Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: pnx7GAJpxdyzOn84j/DPv/QV/Eo5dTwkhRGGt2oJDwI=
Subject key identifier: 39:5B:23:C8:71:98:41:3B:6E:45:7C:61:B1:D4:80:4E:DC:06:DD:88
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 49D7D7A1838A98BA649401737861FE6E1F63CCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 0252
Signing time: Tue 22 Jul 2025 12:30:50 +0000
Manifest this update: Tue 22 Jul 2025 12:25:50 +0000
Manifest next update: Wed 23 Jul 2025 14:51:50 +0000
Files and hashes: 1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 8PZllzQAyuJm5qEHjdmqjyofBAYfSpmeLjdAA3VsIJc=)
2: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 14:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d7:d7:a1:83:8a:98:ba:64:94:01:73:78:61:fe:6e:1f:63:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Jul 22 12:25:50 2025 GMT
Not After : Jul 23 14:51:50 2025 GMT
Subject: CN=395B23C87198413B6E457C61B1D4804EDC06DD88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:38:b0:8d:e2:b8:29:ae:5b:f1:05:61:9a:
57:f0:ae:37:54:6c:fa:35:5c:9b:f3:f3:f0:67:d5:
2f:ef:aa:69:e5:d1:10:7a:28:14:ce:63:81:04:fb:
6f:e9:cf:f0:6b:ff:00:27:75:40:2d:0a:2b:de:55:
bb:e7:c2:71:79:e7:59:3d:0a:cc:bd:c5:dc:c9:5c:
78:67:3b:9b:ce:0a:6c:c3:c4:7e:b1:49:0c:64:96:
eb:8c:87:e4:39:bc:59:ec:d4:ce:09:62:0c:c4:44:
60:d4:83:ea:53:7b:52:35:ae:99:af:3d:a4:6e:3c:
12:ae:35:7b:a2:f0:ce:e4:83:b7:39:e9:c2:d4:f9:
07:ae:c1:36:bc:d6:a6:e7:ef:c0:5f:b8:47:8c:b7:
1c:7c:b6:e8:f8:82:0f:e7:57:a3:a5:c3:25:88:6b:
0c:29:6a:ca:19:46:3a:55:50:82:fa:48:1e:36:5f:
43:07:00:64:3b:0c:08:b6:a0:d9:a3:60:b0:7f:91:
a9:94:1f:5c:16:a2:b0:1b:cc:87:66:da:fa:10:1d:
dd:be:dc:5a:7d:aa:8f:43:a6:d2:ab:a6:73:75:cf:
95:30:33:21:46:6a:22:e2:bb:99:30:84:01:f6:3f:
fe:c2:8b:eb:fa:2b:61:96:3e:22:c6:fe:44:ae:8a:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:23:C8:71:98:41:3B:6E:45:7C:61:B1:D4:80:4E:DC:06:DD:88
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:aa:4e:63:8e:3b:ec:62:5d:30:af:a5:47:43:72:e6:7b:b9:
25:81:c2:c0:ce:c0:05:ff:56:f5:3f:49:3e:7d:a4:ef:d8:29:
16:3d:60:30:10:c7:60:62:d8:4c:54:d5:fa:b5:fc:c6:57:ef:
aa:3a:16:5f:01:4e:d4:85:23:ab:38:0d:3d:ae:b7:c8:b6:97:
d7:28:c1:01:26:55:3e:ad:b2:31:74:fd:e3:3d:60:5c:6c:04:
4c:17:9c:74:fe:4d:95:0c:d8:f7:9d:67:c5:8e:50:a7:c6:cf:
7e:dd:d9:55:3c:5c:95:d1:10:42:cf:40:81:60:48:d9:5c:11:
2f:64:be:3a:5e:e7:e6:f6:9c:9a:21:2b:0c:ce:ac:b4:e0:57:
ea:f8:f4:34:94:52:99:95:3d:1b:9d:f5:2f:a9:14:67:be:4c:
15:4c:da:b2:05:11:f3:37:89:f7:97:0a:b8:2c:6d:f6:97:fb:
0e:33:ce:f2:4f:fa:7e:2c:ac:48:72:00:f1:c1:d3:60:7d:4d:
ee:8e:7d:6a:fe:59:79:5f:d9:11:0c:eb:32:34:fa:4f:e0:cf:
59:df:90:52:cd:df:61:9b:e6:40:d8:e3:8d:63:1e:21:ca:eb:
99:08:d1:76:4f:15:e7:c1:95:63:a8:08:46:60:4d:27:56:8c:
fd:9a:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:13 2025 by rpki-client