Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: KnQYMD9Pjbkz8CPLKiLNBiI01YDq9vVJE07yD+jQ/s4=
Subject key identifier: 91:A1:04:DB:70:F1:C1:3E:5D:9E:2A:EB:56:27:FD:8B:D0:99:81:A1
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 264BBE502701E17BCA8AEC3F9F7CB689A4561D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: AC
Signing time: Mon 21 Apr 2025 00:14:22 +0000
Manifest this update: Mon 21 Apr 2025 00:09:22 +0000
Manifest next update: Tue 22 Apr 2025 03:58:22 +0000
Files and hashes: 1: 38352e3139332e37372e302f32342d3234203d3e20313337353137.roa (hash: ANBAip94aJgKBvYU6JmgV2jssU1VZukeD0JC5Y7qLUg=)
2: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: KOSPxFvzPFrJYwPnI9z+g5aqXHvEi8YVzff+F1PnwQ0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4b:be:50:27:01:e1:7b:ca:8a:ec:3f:9f:7c:b6:89:a4:56:1d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Apr 21 00:09:22 2025 GMT
Not After : Apr 22 03:58:22 2025 GMT
Subject: CN=91A104DB70F1C13E5D9E2AEB5627FD8BD09981A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:29:ca:17:5b:57:fc:79:67:f2:17:91:da:
85:27:2f:8a:e1:de:d5:6d:d1:dd:7b:2f:3d:14:58:
46:d3:ef:3c:c4:d4:9f:f7:0c:9a:95:4b:01:d9:62:
d6:0d:68:69:7c:ae:d3:43:c1:9f:22:dd:3f:61:de:
32:17:29:30:3e:c1:3d:e8:cd:99:10:86:92:5c:27:
e9:fb:af:ec:41:ba:2a:c7:e2:88:85:65:ba:31:e2:
f3:09:3d:b6:8a:cd:e9:17:0a:76:39:41:f3:9c:80:
46:75:df:bd:07:44:e6:f8:26:d4:27:83:0e:59:00:
39:51:ab:99:94:f3:bc:d9:fa:04:51:9b:a0:42:13:
c5:b3:81:14:89:72:4f:64:e2:e3:a5:c2:3e:14:6d:
fa:36:28:65:ba:a7:5e:a3:0e:c8:35:1c:ce:2b:af:
f1:e2:04:6a:99:d2:cf:38:06:fe:06:f5:37:a2:8f:
46:f0:c7:18:df:19:f6:96:e5:ef:04:d2:f8:db:fd:
c1:34:6b:96:00:57:73:55:d7:84:42:78:ca:c7:56:
93:1a:43:79:88:d5:da:e3:3e:8c:02:35:35:36:98:
d9:e7:a9:aa:00:c7:0c:20:2f:80:32:22:4e:a7:b7:
0d:2e:78:49:cb:58:a7:0e:75:a9:1e:72:bf:e1:31:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A1:04:DB:70:F1:C1:3E:5D:9E:2A:EB:56:27:FD:8B:D0:99:81:A1
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:64:9a:b3:0f:dd:36:99:84:79:53:f1:40:c7:bb:e1:1e:
a4:1e:1c:79:ec:27:b1:e0:e4:bc:bb:42:24:4d:b0:e5:5c:2f:
ec:d7:82:23:66:9a:8b:b1:9f:38:96:06:0f:10:79:72:47:a7:
71:ec:35:b1:b3:60:9a:87:38:9b:49:65:48:84:62:91:f4:6e:
fd:f7:75:c3:59:13:21:f2:7f:41:37:61:f0:fc:3b:33:19:e5:
79:32:cf:3a:f0:2e:11:de:8d:4e:a4:41:cb:7b:65:9a:2d:cf:
08:c7:00:14:38:bd:c6:87:5e:84:8d:1f:e2:46:ad:8c:3b:f9:
65:a6:0c:80:8e:9a:27:74:03:11:fb:c1:3a:40:b8:9e:7c:42:
76:6e:cc:79:c4:14:37:08:96:51:9b:01:8e:aa:1c:31:3f:fd:
63:04:ae:0a:4b:f3:fe:00:ed:0f:af:81:af:81:26:21:aa:9c:
60:13:04:b2:6b:c5:7e:2f:25:2f:f8:51:70:dd:d2:35:73:b8:
74:90:9b:d5:46:f0:80:43:dc:9e:65:3f:7b:f2:e9:50:e0:58:
3d:91:47:22:44:4c:54:f5:f3:51:38:7f:a9:cc:dd:42:e8:28:
e1:41:40:ca:0b:05:18:22:6d:28:22:a3:6a:09:04:83:c8:70:
8e:81:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:00 2025 by rpki-client