Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: gqU1iw6jhugLNV8ByA9cfCXGchLxAt1p0tdc1fCvig4=
Subject key identifier: EF:D9:E6:D8:18:96:AC:4F:9D:B2:31:5A:7D:C1:69:1D:0C:73:53:FA
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 1B238DAEB69A37CB1E3E7C6B9BF24B2A698D434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 0129
Signing time: Mon 21 Jul 2025 12:11:52 +0000
Manifest this update: Mon 21 Jul 2025 12:06:52 +0000
Manifest next update: Tue 22 Jul 2025 15:12:52 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: f6Ogxgk+ZZYvdvDG/XZIdZGwCtIpXM9htI8f6lkkHzo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:23:8d:ae:b6:9a:37:cb:1e:3e:7c:6b:9b:f2:4b:2a:69:8d:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Jul 21 12:06:52 2025 GMT
Not After : Jul 22 15:12:52 2025 GMT
Subject: CN=EFD9E6D81896AC4F9DB2315A7DC1691D0C7353FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:0f:57:34:dd:53:e5:e6:8f:49:8b:89:f3:
9e:df:ac:b2:72:b9:e6:c8:c4:19:12:ec:c9:48:96:
e4:50:36:19:90:9e:6f:e8:f5:2a:56:28:7a:75:b0:
e4:39:b4:b7:d5:d4:99:07:bf:08:a0:72:c2:c1:9e:
bb:11:07:c3:b1:02:0d:6a:37:be:11:91:84:d4:ec:
c2:46:8d:14:42:5c:e7:10:e4:11:4b:4d:eb:f6:7e:
fd:4d:f5:77:9e:aa:87:13:9b:b2:6b:de:39:15:bb:
04:ce:92:48:1d:3d:a5:22:96:10:bb:4d:bf:f4:64:
e8:f7:ff:55:9f:01:77:36:ee:81:11:cc:58:a0:cf:
7a:63:ff:10:9b:bb:5f:03:04:48:5d:44:40:c2:ae:
10:40:bf:20:18:a3:85:51:b6:73:0d:7b:df:8d:5e:
ec:a4:75:2c:42:c0:9c:7a:99:0e:d4:56:d4:84:cd:
50:5a:bd:17:60:13:06:0f:b2:d8:36:85:e0:5e:83:
6a:b3:9e:19:70:24:26:1d:f2:e9:bc:c7:0d:6f:fa:
5b:95:88:85:2c:96:3c:57:ba:66:b4:17:37:e1:39:
b8:e1:96:cd:f1:3a:ff:ed:75:8d:b1:a4:d7:9c:ed:
78:1c:a5:56:fd:aa:bb:b7:3c:ee:09:52:6e:e4:5e:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:E6:D8:18:96:AC:4F:9D:B2:31:5A:7D:C1:69:1D:0C:73:53:FA
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c8:43:7a:8e:f2:de:8d:53:07:1a:8c:f3:3e:4e:06:5c:d9:
90:71:a7:6f:a8:d4:69:81:58:52:09:ab:c8:e4:61:f0:ca:48:
c6:32:96:92:73:cc:3a:77:5c:07:cb:e1:0a:3e:da:69:4f:9a:
9b:3a:e1:c1:79:4c:fb:60:e0:43:21:7a:6c:11:07:8e:5f:b9:
bb:fe:7a:96:9a:24:ed:5c:b8:d3:b5:18:bf:b7:d6:e1:d3:fa:
3a:98:c6:5c:b9:b8:7a:f5:1a:2f:be:44:e3:35:8c:75:95:55:
27:30:71:67:9f:b3:e3:96:d7:32:b2:a4:60:2d:e8:15:8b:87:
dc:6e:3b:02:95:9c:0b:a4:d2:a8:dc:e0:95:ce:0d:3b:c6:a9:
ce:59:17:60:c9:76:55:2e:a7:b6:ea:bb:15:7d:34:a6:35:15:
dc:13:ef:76:8c:8d:5a:46:0f:d8:a2:2d:77:76:8e:01:4a:1a:
a3:ce:08:fd:10:bd:6a:13:93:31:f3:18:e5:93:25:81:36:15:
96:77:a0:00:01:3f:c0:18:ae:36:4e:08:76:ac:08:1f:2f:f0:
5b:44:79:30:fa:3f:c3:be:74:a9:c7:10:d9:9b:39:8d:c7:17:
58:cb:5b:28:90:c4:38:23:b2:e1:08:4d:df:5a:17:e1:e7:a1:
63:c5:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:57:31 2025 by rpki-client