Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
File: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft (raw, json)
Hash identifier: xlesyBaE+OZMkxHaKtqf0bvjKyg8FuPSfaEdwJzO+uU=
Subject key identifier: C7:06:A1:6D:F1:13:EE:97:F7:B0:25:C1:2E:92:A9:28:AD:67:DC:0A
Authority key identifier: 2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
Certificate issuer: /CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Certificate serial: 384E9FCBF25BCCC132A8065214F17E337E115CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
Manifest number: 5C
Signing time: Thu 17 Jul 2025 10:51:58 +0000
Manifest this update: Thu 17 Jul 2025 10:46:58 +0000
Manifest next update: Fri 18 Jul 2025 12:56:58 +0000
Files and hashes: 1: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl (hash: l8irypkSE+DmXqKwC9nrXDawjW7G9ALQ2sGr8HUq3Qs=)
2: AS214757.asa (hash: l0Y+CPb9AOgowGXfzD29IiYtbowgVgdv2PTL+8Uiexk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4e:9f:cb:f2:5b:cc:c1:32:a8:06:52:14:f1:7e:33:7e:11:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Validity
Not Before: Jul 17 10:46:58 2025 GMT
Not After : Jul 18 12:56:58 2025 GMT
Subject: CN=C706A16DF113EE97F7B025C12E92A928AD67DC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:b6:c4:69:f2:10:06:8c:57:03:4b:81:f2:
72:c9:02:b9:cd:b6:e0:b9:24:0c:fd:09:29:06:de:
06:3b:4c:a4:fd:31:86:01:c4:3f:21:30:c9:e1:ce:
2e:80:f9:5f:e0:a9:ca:64:ba:d2:72:d4:07:40:d1:
3a:5d:5f:c1:b8:c4:db:f8:40:49:96:7f:46:7f:83:
1d:83:f9:f4:f0:25:7b:10:a9:f5:a6:ba:4d:82:96:
95:03:bc:c3:46:16:12:80:fc:1f:24:4c:7d:9c:d5:
99:a1:8e:56:08:6f:b5:fe:6e:67:e1:b3:2d:52:76:
55:0a:c1:dc:66:3c:6f:7a:78:c1:89:90:80:a4:ab:
97:7c:5c:b9:a7:ef:1c:05:8d:8f:92:a6:a7:96:bb:
09:7b:bc:28:81:8a:b8:cb:be:ac:d9:a4:e8:8e:c1:
72:87:b6:18:30:5c:7e:28:4a:49:60:ab:f6:85:fe:
7e:3e:58:cf:4f:bc:d9:31:b1:eb:91:cb:41:9f:aa:
d8:97:a6:42:91:bc:c7:3b:e7:41:17:0a:e9:4f:98:
bc:c6:cf:ec:a9:34:18:bb:cb:bf:92:9b:0b:7c:18:
d4:14:85:b2:87:e4:8c:3f:9c:e2:dc:b9:7c:36:e9:
40:a1:32:56:3d:12:0c:c8:15:b3:b1:15:d6:5f:37:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:06:A1:6D:F1:13:EE:97:F7:B0:25:C1:2E:92:A9:28:AD:67:DC:0A
X509v3 Authority Key Identifier:
keyid:2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:83:48:b0:01:86:ba:7c:d1:fa:fa:3b:6d:d6:d3:3e:63:87:
25:d4:fb:01:73:af:f9:bb:52:1d:55:44:67:29:87:06:5b:d6:
ed:07:a9:c3:39:f3:39:c3:82:8f:e3:c3:3d:13:42:03:8d:7d:
a4:fa:72:d1:45:b9:0b:36:ec:16:4c:73:cb:df:31:ba:77:25:
91:7e:46:47:57:3d:6c:cb:da:0f:8a:aa:73:c7:ec:fe:39:d0:
14:9f:15:89:0b:13:d9:84:ad:2d:59:5a:58:22:2a:45:4b:91:
27:1c:74:e8:d7:75:aa:4d:0c:4a:99:33:61:3c:4c:11:23:c2:
7d:10:28:4a:6b:50:1d:73:a3:ba:1e:5b:d2:89:13:35:f4:6a:
e4:83:8e:72:4f:64:5c:4f:10:bd:73:3b:17:68:23:04:5e:11:
f7:b0:41:4f:1a:58:7f:dc:6e:7b:85:2b:5d:97:9f:54:6c:0a:
e5:8d:e7:73:4e:63:e6:ce:00:5c:b5:f8:00:eb:42:91:a2:18:
c0:11:c9:39:38:1a:d4:87:22:7e:b6:96:8f:49:d6:2d:ee:ce:
c3:77:5b:a8:f8:e7:2f:ad:16:dc:48:06:7d:98:08:ab:f1:5b:
e7:32:5e:a0:70:60:d0:c8:9f:2d:a3:3e:9f:fb:e4:5c:59:18:
ef:bb:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 13:55:29 2025 by rpki-client