Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: u8DGeO/aiUZpKki3Qf82kPuGZXg/+lHLFmRevPg3yUI=
Subject key identifier: 38:6E:96:29:3E:EC:E1:70:C7:EB:94:32:5E:66:C3:15:09:1C:1C:70
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 20AA968502AB64442D74FCF2D9A3A457A33F480C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 021E
Signing time: Fri 06 Jun 2025 06:36:55 +0000
Manifest this update: Fri 06 Jun 2025 06:31:55 +0000
Manifest next update: Sat 07 Jun 2025 10:26:55 +0000
Files and hashes: 1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: o/lxzhnEPjiYz6n7GK+Z6vqB6wmJGfPI17RY+gd/M74=)
2: AS215147.asa (hash: Y15WnKTnuqfvxRL2v22hgKSMpUyc+xtqTUbKoWNNWzQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 10:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:aa:96:85:02:ab:64:44:2d:74:fc:f2:d9:a3:a4:57:a3:3f:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Jun 6 06:31:55 2025 GMT
Not After : Jun 7 10:26:55 2025 GMT
Subject: CN=386E96293EECE170C7EB94325E66C315091C1C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:f4:dc:b9:94:8b:0a:c0:a4:12:c7:9f:b0:
98:c9:29:06:84:8e:9d:4b:22:82:2c:7b:9e:ef:51:
bc:d7:37:20:45:49:97:39:b0:b7:7f:db:ce:c5:ed:
c4:0f:28:3b:54:a8:5e:29:94:23:79:e9:37:f4:6b:
e2:eb:6c:a4:e2:2b:a6:6c:19:19:0b:01:d3:f2:28:
8d:cf:e0:ec:61:a1:03:a9:c9:07:b6:d6:0d:5f:aa:
6a:81:48:26:1e:f2:9d:34:1e:9a:9d:07:e5:48:9c:
61:27:04:8b:d8:39:80:d0:80:d2:0c:83:e9:82:f3:
8f:7c:f0:04:eb:4f:92:3a:f8:4c:ca:d5:d8:9b:8b:
4b:70:00:63:41:8e:fe:43:1f:40:8c:44:00:3c:b7:
ce:b6:b3:7c:40:57:f9:a4:9c:95:4b:c7:dd:9d:ee:
ac:46:72:7c:49:02:47:c9:8e:16:d4:06:61:90:fb:
00:57:d8:11:94:2e:85:02:2e:9f:57:6e:17:0a:0c:
f4:dc:9d:8b:4d:c9:6f:88:5a:f4:f6:b8:af:0e:5d:
45:93:01:8b:d7:86:5f:1c:e1:63:91:e7:5e:fc:8b:
0e:d6:cc:74:36:f4:01:e4:20:43:83:0d:7b:5c:d6:
45:f7:82:2a:b9:0d:06:33:cc:02:5b:f5:17:12:46:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:96:29:3E:EC:E1:70:C7:EB:94:32:5E:66:C3:15:09:1C:1C:70
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:72:6b:ce:93:8a:8a:b4:bb:e4:c3:48:b5:10:cf:4e:30:e0:
eb:d8:23:57:9e:61:f2:08:6b:66:d1:84:c0:95:a3:37:eb:07:
60:17:05:68:de:4f:84:7a:f7:16:84:8d:8c:a6:b9:41:6c:db:
ac:e3:34:c3:c6:39:b1:41:5c:b4:61:5d:3a:f1:25:a0:9c:6b:
66:2a:57:b6:84:3e:46:0f:fc:35:0a:36:e4:c8:ee:30:38:3f:
90:0e:80:61:63:4f:04:e8:d4:0e:48:e3:d7:23:7b:55:83:83:
fd:9d:5b:c5:cf:36:20:ff:a6:2b:86:72:66:0f:34:26:a1:ae:
73:dd:4e:a4:49:45:b7:20:82:d5:b4:6e:dc:79:9c:3f:85:62:
af:b5:41:28:e0:8f:11:87:98:8a:40:59:94:5a:a7:4e:4e:68:
9d:09:de:2e:91:bc:cb:b8:f3:7d:f2:9b:71:4f:a5:4b:3a:01:
49:f7:ad:48:d8:7b:d5:28:57:04:39:88:58:e8:87:31:f7:d0:
b6:07:97:a6:01:dd:f0:fb:c0:4e:b7:cc:08:ba:ea:c0:f8:9d:
b6:1f:13:60:1b:77:9a:83:29:06:14:ac:a5:19:a7:37:e2:63:
18:a1:f6:9e:76:d6:d0:67:aa:3d:5c:fe:21:9d:09:5f:02:e7:
56:98:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:23:15 2025 by rpki-client