Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: vtfwQcS7SaWfuMJVLqzG7adxjGikcZo8EeLw6RxJLLw=
Subject key identifier: A1:15:F5:91:7F:CB:97:80:65:4F:8A:61:F9:10:D7:14:CB:A1:09:E0
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 5E12D47A3DC7446BBC9BAACE577A24722CD83C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 0214
Signing time: Sat 07 Jun 2025 07:25:17 +0000
Manifest this update: Sat 07 Jun 2025 07:20:17 +0000
Manifest next update: Sun 08 Jun 2025 07:35:17 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: UukktlCa9G33vtnCCnN5lYHkjnHiqiiEFokaepDPQKw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:12:d4:7a:3d:c7:44:6b:bc:9b:aa:ce:57:7a:24:72:2c:d8:3c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Jun 7 07:20:17 2025 GMT
Not After : Jun 8 07:35:17 2025 GMT
Subject: CN=A115F5917FCB9780654F8A61F910D714CBA109E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:15:15:6a:36:57:5e:bc:a3:d3:73:7b:3a:
c0:c1:fe:a2:09:8e:c0:4f:b7:cf:f4:01:45:91:65:
45:01:c9:48:a3:bf:7c:89:3c:ff:58:09:60:65:50:
25:da:77:47:ab:3f:77:d6:5c:a7:07:7b:f9:f9:32:
fb:3f:de:52:22:03:1b:6b:e1:5f:35:71:2f:cc:a3:
05:de:73:72:01:8f:04:84:82:4a:11:20:d6:67:69:
4e:70:6d:40:d8:1a:21:df:be:1c:32:98:4b:8d:98:
80:65:3c:95:31:7b:bc:d3:ef:0f:c0:08:37:f6:5d:
0e:0e:d5:27:0f:27:1a:be:53:04:f5:6f:49:ef:46:
72:35:64:5f:ba:1d:fe:23:64:a2:f3:5c:9e:a5:83:
de:0c:c3:64:7a:71:96:d9:5f:99:47:3a:f5:c8:c5:
21:d4:90:ef:25:6f:83:88:f6:b7:a8:3b:53:60:a1:
85:13:d0:28:16:7b:e1:ef:c5:a2:7d:9e:80:e3:25:
37:a2:2b:86:68:19:79:a2:10:5b:15:b0:93:75:37:
a6:65:92:72:56:9a:f4:72:b4:d1:7b:b1:b8:db:dd:
55:6e:e5:77:b2:96:9c:15:b2:53:10:de:f6:69:d5:
7e:98:b7:b1:45:39:a9:8c:b9:d9:50:27:cd:6a:8c:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:F5:91:7F:CB:97:80:65:4F:8A:61:F9:10:D7:14:CB:A1:09:E0
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:27:c8:ce:49:22:84:b3:e9:59:ec:0f:d1:ab:99:06:ad:18:
a7:f3:c3:35:d9:4a:68:a5:2b:6b:c2:2f:8f:97:e2:5c:5e:fb:
6a:53:51:cc:79:3d:10:ca:10:1f:e0:64:de:24:77:e6:25:7f:
2c:97:d4:58:7e:85:61:5c:07:e7:62:63:b6:47:0d:54:10:c3:
cc:e2:95:cc:f6:c3:63:18:db:3c:0e:8e:53:f2:87:62:73:6e:
8a:38:3e:13:1e:b5:4b:90:30:c1:e1:bc:85:d5:2f:9c:38:2b:
a4:e6:86:20:dd:fb:be:da:1a:36:cf:d8:50:11:b3:30:e8:5f:
c4:d5:3a:b6:2d:dc:4d:46:f8:12:e3:77:c3:03:e3:c3:0f:e3:
7b:77:f8:c5:74:38:1a:87:f8:fc:3d:e8:0e:e2:3c:1b:59:bd:
a2:ec:50:d0:da:84:b4:4b:6a:56:99:31:65:da:2b:8e:75:a0:
3c:94:58:08:52:98:b3:e9:01:e9:1c:a8:78:ea:7b:ed:94:b6:
fb:ec:70:3a:1b:39:c4:15:aa:d5:ad:aa:f0:85:e0:1e:52:11:
97:c9:ed:f9:f2:2a:9f:05:e3:54:0b:39:79:1d:6c:44:2c:c0:
31:6e:a5:04:87:1e:a1:3c:d4:5e:f5:c9:da:df:20:ab:68:6f:
5e:ba:4b:f7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUXhLUej3HRGu8m6rOV3okcizYPBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNiOTM2MGMwZGRhM2Q2ODhmNGRiZTUzZTJiNmQzY2Vm
NDdmZTgyNTAeFw0yNTA2MDcwNzIwMTdaFw0yNTA2MDgwNzM1MTdaMDMxMTAvBgNV
BAMTKEExMTVGNTkxN0ZDQjk3ODA2NTRGOEE2MUY5MTBENzE0Q0JBMTA5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMBUVajZXXryj03N7OsDB/qIJ
jsBPt8/0AUWRZUUByUijv3yJPP9YCWBlUCXad0erP3fWXKcHe/n5Mvs/3lIiAxtr
4V81cS/MowXec3IBjwSEgkoRINZnaU5wbUDYGiHfvhwymEuNmIBlPJUxe7zT7w/A
CDf2XQ4O1ScPJxq+UwT1b0nvRnI1ZF+6Hf4jZKLzXJ6lg94Mw2R6cZbZX5lHOvXI
xSHUkO8lb4OI9reoO1NgoYUT0CgWe+HvxaJ9noDjJTeiK4ZoGXmiEFsVsJN1N6Zl
knJWmvRytNF7sbjb3VVu5XeylpwVslMQ3vZp1X6Yt7FFOamMudlQJ81qjKhVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUoRX1kX/Ll4BlT4ph+RDXFMuhCeAwHwYDVR0j
BBgwFoAUs7k2DA3aPWiPTb5T4rbTzvR/6CUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzAvQjNCOTM2MEMwRERBM0Q2ODhGNERCRTUzRTJCNkQzQ0VGNDdGRTgyNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M3azJEQTNhUFdpUFRiNVQ0cmJUenZS
XzZDVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYmYwNGM3Yy1m
ODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMC9CM0I5MzYwQzBEREEzRDY4OEY0
REJFNTNFMkI2RDNDRUY0N0ZFODI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyfIzkkihLPpWewP0auZ
Bq0Yp/PDNdlKaKUra8Ivj5fiXF77alNRzHk9EMoQH+Bk3iR35iV/LJfUWH6FYVwH
52JjtkcNVBDDzOKVzPbDYxjbPA6OU/KHYnNuijg+Ex61S5AwweG8hdUvnDgrpOaG
IN37vtoaNs/YUBGzMOhfxNU6ti3cTUb4EuN3wwPjww/je3f4xXQ4Gof4/D3oDuI8
G1m9ouxQ0NqEtEtqVpkxZdorjnWgPJRYCFKYs+kB6RyoeOp77ZS2++xwOhs5xBWq
1a2q8IXgHlIRl8nt+fIqnwXjVAs5eR1sRCzAMW6lBIceoTzUXvXJ2t8gq2hvXrpL
9w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:06:02 2025 by rpki-client