Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: Mj4EdA5H8Qe2weAiXu3wYptgJ3lik1YlrCEifHaRBNM=
Subject key identifier: 8A:8B:1F:82:13:52:A2:F9:B3:18:48:20:C7:50:EE:E2:C9:22:A7:63
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 4FAA05805CC01A27E106A8BFB7C4EF67CF7B0D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 01BB
Signing time: Fri 04 Apr 2025 18:28:46 +0000
Manifest this update: Fri 04 Apr 2025 18:23:46 +0000
Manifest next update: Sat 05 Apr 2025 19:06:46 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: eJfRsnvO0iCZMkiyvDhxylBg35/hCS5tgJ+KkosdwKA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:aa:05:80:5c:c0:1a:27:e1:06:a8:bf:b7:c4:ef:67:cf:7b:0d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Apr 4 18:23:46 2025 GMT
Not After : Apr 5 19:06:46 2025 GMT
Subject: CN=8A8B1F821352A2F9B3184820C750EEE2C922A763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:0a:97:6b:2f:0c:16:9b:22:91:4a:f2:c5:
95:2a:68:54:ef:62:e8:f1:51:4e:60:91:93:98:5c:
13:65:ed:77:36:93:6d:67:d7:16:e3:2e:43:4f:57:
e8:0a:64:a8:bc:dc:18:53:3b:7a:4c:d2:8e:2c:a2:
c1:f0:a2:c8:91:be:da:80:70:88:ea:c7:9b:aa:ea:
a2:e6:45:8e:4b:f8:6c:3c:34:29:41:67:23:d5:8e:
97:46:4f:d9:ef:54:26:8a:49:54:bd:b0:07:a9:a0:
9a:a4:d8:3b:42:2d:29:20:d1:7f:09:d9:c1:55:ff:
af:80:d5:ce:de:31:f1:65:54:25:65:7f:57:c1:ec:
ea:a6:69:ff:0e:57:5c:20:88:d2:73:7f:7d:cd:05:
0e:ce:ac:fc:2d:3f:ed:55:23:df:47:0b:b9:d6:42:
ef:f9:87:99:24:00:7a:e1:a2:8c:ee:7b:bf:14:87:
05:18:26:8b:27:c7:11:b3:83:71:72:b6:30:23:9b:
d8:4c:f6:cb:e8:54:26:8f:c9:f6:e3:e1:ef:a5:53:
bd:86:79:ec:81:c7:b5:5f:4e:9d:d4:c0:97:59:c7:
b0:cd:89:6b:f8:fc:ea:0f:19:d5:96:7e:be:dd:5d:
84:c6:42:e1:78:dc:7d:af:31:54:9e:b7:5c:33:6b:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8B:1F:82:13:52:A2:F9:B3:18:48:20:C7:50:EE:E2:C9:22:A7:63
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:cb:c3:e8:c8:fc:fe:29:d7:e4:b1:b1:f8:0b:91:01:b1:
ca:65:16:d5:ef:b0:36:68:1c:b1:00:a2:21:77:52:c6:34:e5:
aa:6d:4e:13:8d:1a:fe:a4:8f:e2:b2:a7:fb:70:68:29:77:42:
e5:7a:02:e3:a7:51:e3:fb:f6:cd:82:8d:bb:e3:31:37:56:2a:
dd:c6:ca:25:ed:f1:33:3f:f1:23:c1:f1:af:44:cd:95:4c:dc:
86:f0:ba:16:7c:d4:1f:08:9b:49:b5:10:20:8b:71:1d:ad:6f:
d8:bd:fb:d1:49:cb:b7:a0:63:c7:34:42:61:c3:09:a8:75:b9:
d1:08:6b:2c:8c:35:20:95:c4:a5:60:c7:09:69:c7:88:0b:a2:
3f:94:12:c1:f4:63:5d:ce:0f:c0:b5:d1:03:e0:2c:b8:2f:e0:
c0:ca:d0:f0:7f:2c:5c:c5:ec:ff:82:04:9b:ad:2c:f6:d2:08:
03:ae:f0:6d:67:35:96:98:64:67:36:65:1a:f6:17:52:b1:f2:
6c:46:4e:10:a2:1b:00:94:0e:9c:ab:b0:40:5c:0e:a2:74:f0:
ec:5b:86:de:62:2f:f7:81:7d:f0:2c:e1:92:4e:dc:d0:f9:86:
c5:5b:f4:a7:a1:ee:a9:c1:6d:e4:d0:75:71:d0:20:ce:a6:6c:
bb:df:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:22 2025 by rpki-client