Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
File: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft (raw, json)
Hash identifier: XDb1dGhDMEi+m0RZvLDvNP/AxJXzFc3kJRXLEZbPxhk=
Subject key identifier: 10:4B:86:7C:B9:85:C4:42:92:80:FA:69:30:A1:B1:FD:F5:F6:47:E4
Authority key identifier: CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
Certificate issuer: /CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Certificate serial: 67D69811A7EC3AA65CD21E6DCC45D5E9621AFCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
Manifest number: 44
Signing time: Sat 01 Feb 2025 21:00:58 +0000
Manifest this update: Sat 01 Feb 2025 20:55:58 +0000
Manifest next update: Sun 02 Feb 2025 23:28:58 +0000
Files and hashes: 1: CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl (hash: 9NzWCd4wgRMsQfBxhHb74wTb499dYybt2AnK7+MYW9Q=)
2: 38352e3139332e37372e302f32342d3234203d3e20383334.roa (hash: dNHpugVvVC8uQYA7rwKEilD7uNHgu86VkwTpGtOrrR0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d6:98:11:a7:ec:3a:a6:5c:d2:1e:6d:cc:45:d5:e9:62:1a:fc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1437e9f35edc54a3c0cd31167b996e60de1504
Validity
Not Before: Feb 1 20:55:58 2025 GMT
Not After : Feb 2 23:28:58 2025 GMT
Subject: CN=104B867CB985C4429280FA6930A1B1FDF5F647E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:83:0c:45:15:a2:8f:20:dc:04:78:92:74:
d9:37:5b:a9:92:6e:d3:cc:29:fa:5f:cc:25:bc:f0:
fa:21:53:9c:a5:6b:63:45:39:4e:da:91:85:60:26:
ab:69:9d:fb:49:0a:0b:03:26:5e:48:51:7b:5e:a3:
61:90:d0:59:09:d8:be:ad:75:08:46:bb:22:5f:0a:
53:17:84:4d:07:58:e4:e4:32:e9:35:ce:ef:fd:86:
a4:48:90:af:bd:8e:c7:b0:63:37:50:45:b2:c0:2a:
94:15:82:f8:25:8d:95:62:bd:68:da:53:bb:c5:fd:
e0:8b:d1:04:7a:eb:fa:61:09:81:ca:0b:77:02:22:
a0:b8:f6:d2:54:4d:e4:82:1c:81:75:b4:1d:e3:8c:
65:1f:16:8b:3e:a0:06:d0:6d:ac:33:8d:bc:bd:de:
79:31:ec:65:9e:fb:72:0b:00:aa:5c:fd:a6:3f:c1:
d6:b1:a9:1d:f6:61:70:18:bc:3c:18:a6:fa:24:21:
5c:52:53:3f:43:69:cc:e0:5b:95:fe:30:1d:20:fc:
6a:4a:ab:bd:97:44:e7:bb:bc:27:91:d6:9b:25:42:
20:a6:c8:5f:ea:76:7b:62:d0:a5:25:da:f8:08:a4:
65:4c:e3:27:c0:e0:ec:b7:33:23:cd:6c:0f:91:d3:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:86:7C:B9:85:C4:42:92:80:FA:69:30:A1:B1:FD:F5:F6:47:E4
X509v3 Authority Key Identifier:
keyid:CA:14:37:E9:F3:5E:DC:54:A3:C0:CD:31:16:7B:99:6E:60:DE:15:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhQ36fNe3FSjwM0xFnuZbmDeFQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bd2bc1-4ea6-4bc5-a2a5-97e465472776/0/CA1437E9F35EDC54A3C0CD31167B996E60DE1504.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:df:bd:72:cb:40:6b:c9:7b:b6:e2:6f:9c:ce:15:95:34:c1:
52:02:c9:34:36:ca:fd:fa:59:22:5b:bd:86:79:36:bb:6a:3b:
2a:f5:c6:30:9e:1a:56:7d:86:71:b6:bd:2b:6a:e1:c0:15:71:
05:7a:6a:18:67:78:3c:12:ee:76:ac:6f:f1:d7:a6:73:25:f1:
36:2d:80:d8:e2:80:2a:98:42:32:f2:6c:80:23:1d:87:5d:4f:
69:36:79:74:dd:d2:43:4d:f4:41:f1:d2:6d:72:e5:9b:43:1f:
e8:cd:67:d3:d9:65:80:2d:91:0f:2e:a6:f1:2b:88:75:e5:cf:
ac:b6:26:c2:33:1b:95:fc:fd:6e:ed:4a:b3:a5:b8:b4:83:83:
7d:2e:5f:4a:53:96:76:32:97:6d:66:67:67:96:60:17:4e:a2:
c0:c2:11:77:1c:8a:63:dc:b9:66:31:47:e9:44:06:0c:15:f6:
2b:2a:25:d4:a9:61:c2:6b:16:07:bc:e0:17:3b:89:3d:f0:46:
e8:a7:5a:97:ce:5c:76:19:d7:08:97:df:67:b5:e3:7e:62:76:
8e:e9:64:e6:98:40:53:77:d4:b7:1a:20:1f:4d:2f:c3:0a:ac:
ce:c2:62:6c:9b:ad:0d:06:20:c7:91:37:22:8f:8b:d7:41:0c:
da:51:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:54 2025 by rpki-client