Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
File: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft (raw, json)
Hash identifier: JKpsdD3imHeYdLs7O1uYcgefrm6pWRughR8wyrg+KFU=
Subject key identifier: 8C:03:85:17:FA:56:49:84:28:B4:C9:C5:9E:95:2D:BD:0D:1D:C2:61
Authority key identifier: 3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA
Certificate issuer: /CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA
Certificate serial: 53F6CFBA109C69C92FEAF7C1392DC79BA22C5E8F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
Manifest number: 3A
Signing time: Wed 02 Jul 2025 16:36:54 +0000
Manifest this update: Wed 02 Jul 2025 16:31:54 +0000
Manifest next update: Thu 03 Jul 2025 20:34:54 +0000
Files and hashes: 1: 326130393a353463373a316562653a3a2f34382d3438203d3e20323039383636.roa (hash: TaPYx3TgPHUyddmtxy9zzW0mG+lkUufKcfpaVs06+uc=)
2: 326130353a646663333a666434303a3a2f34342d3438203d3e20323134323939.roa (hash: tzPv+0SYW7c4BhO+NRENEMHDxJFYhSgi+7F5pSL26rM=)
3: 3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl (hash: 3OA015B6ahVFyelmiDBdL4MhEVvKV1l7o6cwfyQ8QOA=)
4: 326130393a353463373a313030303a3a2f34382d3438203d3e20323134323939.roa (hash: polSfU3C8waUTNHXjjV/PtCyw7FXJG9dpAnmbVhvFpA=)
5: 326130393a353463373a316562653a3a2f34382d3438203d3e20323134323939.roa (hash: HE6NA8iuF7m/BEGtvKSapzIZyTFfFUeBBMBI1WKr7Q4=)
6: 326130393a353463373a313030313a3a2f34382d3438203d3e20323134323939.roa (hash: sMFqJHE6ZX3ycW3EXnTJu0zQlY1y10K2aBBpHFeENOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f6:cf:ba:10:9c:69:c9:2f:ea:f7:c1:39:2d:c7:9b:a2:2c:5e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0D5C989D06DEE4CEF73B76423F7D1B248305CA
Validity
Not Before: Jul 2 16:31:54 2025 GMT
Not After : Jul 3 20:34:54 2025 GMT
Subject: CN=8C038517FA56498428B4C9C59E952DBD0D1DC261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:6a:f0:03:3c:e3:22:16:44:af:62:02:45:
fc:44:cc:38:c8:dd:4a:1e:16:02:59:8b:92:a6:24:
14:97:e3:b3:87:74:8b:a2:9e:98:c9:aa:dd:3b:9e:
b7:f5:89:e6:aa:3b:69:9f:39:57:2f:ed:18:c9:ed:
7c:02:8d:a5:6f:86:f5:e8:7f:70:f6:13:e8:13:0a:
53:95:98:4b:62:e6:df:3d:5c:c2:19:87:f4:36:e9:
0f:35:d5:f5:ee:1e:a6:ca:bc:1f:23:71:8b:b8:ed:
11:24:7a:e7:ff:dd:95:c4:69:6a:6c:14:21:a4:c2:
a2:24:ec:43:00:a6:3b:69:77:d6:44:f1:21:0d:3f:
4c:f1:71:7e:4e:4e:53:95:34:54:b5:fe:fa:10:11:
81:92:29:56:46:9c:8e:7d:37:e7:97:5b:74:58:d1:
28:e7:48:3b:78:c8:a3:a2:05:6e:ed:1a:03:fc:7f:
4a:f1:f0:d9:fd:17:34:2a:6d:08:ae:9a:93:88:40:
da:d7:ce:f8:97:cb:68:1d:38:ea:54:18:fc:1e:cb:
19:cb:f8:79:82:5b:8b:31:4a:53:68:fe:8e:4d:02:
e8:20:d9:58:bc:cf:73:3d:2c:a7:aa:00:70:80:b9:
9c:6c:d7:8d:c5:80:2c:f7:9a:94:a2:63:74:09:62:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:85:17:FA:56:49:84:28:B4:C9:C5:9E:95:2D:BD:0D:1D:C2:61
X509v3 Authority Key Identifier:
keyid:3F:0D:5C:98:9D:06:DE:E4:CE:F7:3B:76:42:3F:7D:1B:24:83:05:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/1/3F0D5C989D06DEE4CEF73B76423F7D1B248305CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:54:34:e3:b1:41:cd:97:f5:03:01:4f:e5:a2:87:41:3f:80:
e8:71:2c:10:7f:09:ce:ce:3a:f9:91:a3:77:3d:e7:b7:c7:80:
d4:56:7b:f8:ab:f0:e4:00:63:97:a0:5e:d0:93:2f:2a:68:f4:
bd:28:5e:23:93:f8:24:30:4b:d6:37:fa:aa:67:4e:ad:14:5c:
f7:72:a5:25:9b:e4:06:b4:03:6f:8e:bd:7b:86:2f:28:51:e2:
54:d1:fe:e6:51:e3:1c:8b:de:17:e8:75:90:5a:56:54:50:65:
b7:ae:99:42:6e:64:76:8a:9f:76:39:7a:fb:37:d0:cb:aa:42:
3d:9c:7b:91:b5:bb:b5:fa:34:e8:d2:7f:24:c7:7a:95:3d:25:
ff:c7:9b:9d:20:52:4d:f3:83:15:62:2a:2d:c9:e3:47:3d:fd:
94:52:9b:e1:90:15:ef:05:29:d4:30:04:8f:29:32:83:c9:f8:
94:43:e5:83:4b:29:22:69:7e:1e:db:cc:5b:fe:6f:94:f5:ec:
b9:08:5d:0e:13:27:88:8c:23:77:8e:00:a6:21:b7:3a:38:2e:
44:63:1e:8a:f6:02:88:ea:8a:42:31:35:90:18:2a:03:76:36:
bf:97:94:22:05:52:d2:23:26:1b:96:15:e9:10:bf:3e:4a:e9:
6a:9d:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 21:47:05 2025 by rpki-client