Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: FNSGnu4H1gXGRNPK83khc4uNLm7D/gaf2GCEUsFRT9A=
Subject key identifier: 49:BF:18:15:68:AC:49:51:64:49:F7:1D:79:DB:88:E6:FC:36:83:D2
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 25AB38D335D7C05F0CFAD4399155C7382C552BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 02A7
Signing time: Wed 20 Aug 2025 22:13:07 +0000
Manifest this update: Wed 20 Aug 2025 22:08:07 +0000
Manifest next update: Fri 22 Aug 2025 02:07:07 +0000
Files and hashes: 1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: 8DGoaw9CzZJvHYiXF5Ud83aQ9mdo+KAt87s2TVhhq+M=)
2: AS215147.asa (hash: J2x/D/dp4X7UL/t56blYMubeUgQMJur/XGZvebo5ANU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ab:38:d3:35:d7:c0:5f:0c:fa:d4:39:91:55:c7:38:2c:55:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Aug 20 22:08:07 2025 GMT
Not After : Aug 22 02:07:07 2025 GMT
Subject: CN=49BF181568AC49516449F71D79DB88E6FC3683D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:23:0c:f3:b0:75:f9:75:5f:ba:8a:04:a3:
b0:41:19:b2:9c:ff:d9:40:9b:01:66:01:3a:70:81:
4d:75:d9:1e:d7:08:09:71:91:b8:57:87:de:88:12:
d4:4f:77:51:9a:78:5a:19:f5:d3:d9:92:a2:04:59:
56:41:83:7b:ce:37:57:e7:c3:28:fe:c5:13:15:aa:
6d:99:83:92:7e:a2:f9:84:62:08:7e:2f:83:00:af:
7e:f8:f0:ee:af:56:85:e6:85:7e:ed:d6:5b:87:a3:
49:e2:95:d0:be:31:37:45:db:b2:64:e2:ad:0b:09:
0f:ce:75:c1:4f:4a:ae:72:f5:a7:e8:5d:76:e9:1c:
19:ca:e9:24:22:7e:17:99:24:96:0e:36:32:07:a4:
e8:fd:f3:84:3f:76:75:48:c6:2d:47:71:e5:dd:23:
cf:02:2c:4e:db:63:32:7b:89:1d:d0:10:56:33:5f:
32:b6:93:c9:3d:8b:0c:75:b1:e8:be:52:07:6f:36:
77:41:4c:27:17:b1:0c:6b:7a:39:8f:4f:04:5b:20:
a0:8e:f0:43:bb:28:c2:9d:50:b3:36:b0:a8:bc:55:
e2:3d:07:7e:b8:62:1d:de:04:cb:d1:5b:8d:19:91:
9e:cf:76:d6:9f:58:e9:38:9a:31:c7:dd:29:b9:50:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:18:15:68:AC:49:51:64:49:F7:1D:79:DB:88:E6:FC:36:83:D2
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e8:d8:8d:e8:b6:f6:c7:f3:07:11:c1:73:bb:27:20:0b:f7:
93:08:6b:96:26:2d:f8:27:25:7f:84:83:7d:f1:9b:78:e5:cf:
74:95:25:28:14:c1:52:0b:46:0c:2c:66:c4:0c:49:c5:ac:06:
2a:f9:14:6c:d5:93:ba:00:50:d6:e6:39:f5:a0:52:ca:54:bb:
54:cb:a4:66:cd:41:8b:5e:85:18:35:74:bf:50:e8:44:e5:f4:
f2:03:4c:73:99:d3:8b:1b:a4:a7:8e:63:01:44:4e:ed:a2:14:
1f:d1:8c:5a:6f:2a:b5:d7:b5:1a:ca:3e:57:43:92:24:8b:36:
ab:17:8a:16:6f:fe:91:9a:4e:66:66:7b:42:c3:10:5e:a3:cc:
f5:69:79:13:65:74:23:dd:05:1e:b3:be:74:05:1d:1b:88:8d:
c0:b5:39:45:f4:6b:69:49:21:94:e2:44:b4:ff:8b:87:63:3d:
f2:4f:c3:76:a4:20:7e:e3:56:51:5d:a5:02:c0:eb:59:48:d5:
3b:08:97:3f:f5:7f:34:09:62:16:2c:78:db:dc:1c:2e:fb:7f:
45:27:9a:31:24:2c:b2:3c:c6:86:80:d1:e7:17:e9:85:80:d3:
07:10:c6:b9:2c:a5:79:2c:6c:f0:05:a4:b5:8d:85:89:b0:c0:
b0:4b:21:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:16:08 2025 by rpki-client