Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: gMw9uibsZ5gwHBXYqs9LAfavw8e/CC9itz+ZMhXo1UE=
Subject key identifier: 76:BA:86:0F:8D:0A:AE:E1:F8:06:36:5B:3F:93:6C:19:C1:12:01:B2
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 3BC9073FA5F7EDD8ABD261149A474E8923FF361F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 0293
Signing time: Mon 08 Sep 2025 17:30:01 +0000
Manifest this update: Mon 08 Sep 2025 17:25:01 +0000
Manifest next update: Tue 09 Sep 2025 17:42:01 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: nQNqgtIvVIzN6XyhUz39TouJaLnuWzooRy/Y3t7WfiU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 17:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c9:07:3f:a5:f7:ed:d8:ab:d2:61:14:9a:47:4e:89:23:ff:36:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Sep 8 17:25:01 2025 GMT
Not After : Sep 9 17:42:01 2025 GMT
Subject: CN=76BA860F8D0AAEE1F806365B3F936C19C11201B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:81:2c:15:ba:f2:85:20:9f:dc:a7:29:76:
58:ba:47:c8:f0:62:f8:34:cd:64:63:b1:49:c5:e2:
53:d7:2a:e9:a7:c1:25:c7:da:52:3e:7c:e8:55:25:
09:4a:b5:91:91:a1:e5:1b:14:d4:7f:70:84:8a:d2:
c3:a0:38:da:97:ba:6a:2e:7c:22:d3:3c:a4:0c:47:
38:c2:7c:d0:64:0f:2d:ad:1b:57:1f:e6:a1:f7:8e:
2a:cc:49:6a:2f:d0:05:c7:7d:ee:07:ee:3d:2d:7b:
74:64:a2:61:65:1a:3d:1b:0d:86:3f:a0:01:0c:44:
59:91:24:77:1a:17:48:6b:ee:d9:3c:15:67:f3:31:
05:72:1c:bb:7b:e6:03:64:92:f7:98:2b:c4:cb:76:
a3:7f:b2:dc:19:21:b2:63:4f:c4:83:63:35:87:4c:
15:0d:01:28:c6:00:81:52:06:c6:39:27:04:a6:18:
02:80:1f:8d:f8:91:cf:0d:c8:51:d3:92:c5:ee:28:
a6:de:84:79:30:ca:56:ec:dd:3a:98:6b:e7:21:69:
d8:24:59:e1:17:4b:7f:08:43:29:7d:72:ea:16:4b:
89:22:9a:23:3c:b8:71:57:9f:05:53:09:cd:82:6a:
19:da:93:9b:2c:23:89:60:f1:21:d5:dc:7b:25:a5:
7f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:86:0F:8D:0A:AE:E1:F8:06:36:5B:3F:93:6C:19:C1:12:01:B2
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bf:64:f6:89:ad:be:c7:e0:a9:f9:c0:a8:23:fe:b7:b6:29:
70:09:5b:61:15:56:61:dc:8c:50:ea:ea:c5:c0:55:5a:b7:b5:
f1:1d:76:8c:af:c6:e6:be:6a:15:e9:78:d4:75:64:7b:15:34:
21:23:6c:24:62:af:da:1f:94:2c:3d:14:c6:f9:6b:b8:97:e7:
69:ca:b9:fb:0f:f9:9b:82:b4:47:9b:f1:e8:96:e9:69:32:0f:
50:e0:4c:d1:d9:55:10:1c:31:da:bf:58:b6:c2:e8:a6:7a:8a:
2f:ce:a9:6c:48:7b:66:7c:52:ca:47:46:e1:02:f1:32:f7:d9:
56:d5:b5:b9:70:9b:4d:3c:1a:00:7e:3c:c8:c3:83:18:db:e0:
e4:99:63:eb:7a:87:55:cc:0e:42:58:a8:4d:e8:e9:4c:b8:60:
83:28:be:f2:ef:20:37:44:04:47:cc:3c:a7:f5:ff:40:3b:03:
6d:68:c1:d0:e3:dd:cc:84:71:d0:83:f5:df:fe:df:2d:a0:d1:
fb:e3:9f:82:2a:b1:27:e5:81:17:ba:f4:46:ee:87:ea:96:d5:
51:e2:8d:75:ee:49:46:12:60:b6:4d:f2:2f:a5:f6:b9:1e:47:
20:b7:a8:9a:ad:20:66:4c:d8:8e:39:96:03:94:40:42:27:2a:
63:61:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:36:28 2025 by rpki-client