Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: 07CIfBxAq0Qd42WVWriVY0POHk3bojK0+FoElK+j+A4=
Subject key identifier: 44:9E:FC:07:43:3A:2D:88:3A:26:3D:86:83:45:6F:15:55:7D:A0:F5
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 46917FF0EE98989066C7AC655D2AD0541911B182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 0155
Signing time: Sun 24 Aug 2025 04:07:34 +0000
Manifest this update: Sun 24 Aug 2025 04:02:34 +0000
Manifest next update: Mon 25 Aug 2025 04:15:34 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: 6IP1U1YSFkjLJncKvDKvI1JDcpnpGfg4cK64g420XIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:91:7f:f0:ee:98:98:90:66:c7:ac:65:5d:2a:d0:54:19:11:b1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Aug 24 04:02:34 2025 GMT
Not After : Aug 25 04:15:34 2025 GMT
Subject: CN=449EFC07433A2D883A263D8683456F15557DA0F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:87:ad:97:fd:42:9a:fc:72:57:d2:44:41:
23:4a:84:0e:e2:79:5e:1e:01:78:79:a0:5b:6c:c3:
d7:f2:11:9b:d9:8c:67:9d:8d:1c:f2:17:15:ec:8d:
40:ac:a7:a8:9c:6c:55:42:00:7c:41:21:e7:21:d4:
3c:44:a2:62:78:08:65:be:a9:d0:2e:5d:a7:5a:18:
06:f3:fc:98:51:db:b3:48:ce:34:41:b7:35:ad:4d:
b5:50:5d:45:81:e8:e7:5c:19:25:0a:84:7e:4a:54:
76:a1:8a:bf:f7:48:44:93:b5:18:fd:25:2a:bb:a5:
0e:61:96:d0:42:5e:14:e1:45:98:52:3e:e5:c5:5c:
db:7f:fb:61:2f:7a:36:a9:3e:fd:e2:4a:84:b0:e5:
a0:e1:9d:31:88:a6:11:64:77:cd:d4:ea:10:af:35:
10:af:d6:43:93:2a:b4:96:87:e9:e7:ee:4b:d3:4e:
7f:82:01:77:de:14:b4:2d:8a:1f:be:db:3d:14:ee:
1b:01:a7:7d:df:6a:90:56:1e:87:e0:bc:00:5f:40:
88:ff:1d:81:3c:95:cc:b8:94:b4:f5:44:8b:c5:50:
de:5a:16:33:a2:af:d9:43:b0:14:cc:e1:dc:a1:38:
56:1c:e1:c5:7d:eb:22:48:d7:d6:06:2d:bc:46:8a:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:FC:07:43:3A:2D:88:3A:26:3D:86:83:45:6F:15:55:7D:A0:F5
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6e:77:24:19:04:57:f4:7f:38:23:c1:c4:0a:a2:61:3f:5d:
a3:a9:0f:08:42:69:24:35:71:47:be:4f:16:e8:74:23:a6:73:
88:31:a0:b6:92:50:0c:9e:56:ce:6f:cf:07:37:86:d8:8d:47:
39:1f:78:9e:41:db:06:ad:1b:2c:2b:ea:4f:a1:a0:1e:4a:6d:
04:94:0e:94:e7:52:d4:d1:67:62:45:c6:d1:25:f3:2c:17:8e:
f6:23:9f:a3:1a:87:e7:34:48:fd:dd:c1:18:fc:92:01:06:95:
14:09:52:2b:c2:ce:c3:12:9a:23:9a:c3:97:1f:73:54:ca:e6:
fc:59:82:d1:98:e7:60:9e:33:ab:30:3b:b8:b2:01:4d:7f:fe:
e3:24:a9:9a:e5:72:d8:33:94:3c:b9:7b:a4:8b:02:c1:cb:3c:
5a:22:3e:1f:ac:76:2d:3b:2c:b1:2f:cb:1b:5d:60:9d:28:e5:
2f:58:54:c4:47:e2:be:e0:0b:80:1c:48:d1:a3:e3:db:94:af:
a0:a0:35:92:47:65:58:f4:5a:76:93:dd:e5:f7:68:2b:66:f6:
81:3f:ec:d3:c0:49:ce:65:62:a2:e2:57:69:61:f8:55:7f:b7:
57:42:7d:65:7d:96:06:5c:6b:d5:1c:ad:d9:54:d6:32:42:e7:
8c:c0:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:08:03 2025 by rpki-client