Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: PP3KgIEn9FIXWgr9VogIGvwtb0PXjPzUpy+eVru20Rc=
Subject key identifier: 79:95:7E:68:A3:AB:13:7F:E7:6C:D3:A6:92:75:0B:47:01:68:C0:4C
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 6F283108184E2BC3E7A274628A0C8FA508B489AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 021E
Signing time: Sat 14 Jun 2025 19:19:56 +0000
Manifest this update: Sat 14 Jun 2025 19:14:56 +0000
Manifest next update: Sun 15 Jun 2025 23:02:56 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: tGld+Dy33hEfpasoyjxmlihZvVCUzlj/QNXSKu7hBOA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:28:31:08:18:4e:2b:c3:e7:a2:74:62:8a:0c:8f:a5:08:b4:89:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Jun 14 19:14:56 2025 GMT
Not After : Jun 15 23:02:56 2025 GMT
Subject: CN=79957E68A3AB137FE76CD3A692750B470168C04C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:55:41:47:34:2a:8a:b6:b5:bd:33:7c:a2:
b5:26:97:ee:cb:73:e0:ba:e6:ef:5d:26:01:60:8a:
5b:5d:2d:f6:58:f9:a2:4f:3a:3f:0e:78:30:0b:87:
8a:df:d4:b5:c1:95:4f:43:1b:eb:c6:a0:09:3c:af:
20:0e:27:e2:29:2b:6e:ee:1b:7f:92:b1:16:14:20:
bb:2a:98:e4:e6:ed:25:b3:f7:8b:28:e4:22:57:ff:
16:ee:9f:9d:62:91:f5:80:82:d7:e1:3d:61:ad:0c:
c0:a5:c1:dd:c1:09:7f:66:76:b8:f9:b4:61:0e:35:
76:34:53:75:d1:fa:df:e7:5d:41:7f:ab:63:4a:83:
c2:19:89:eb:bb:e4:5c:18:90:8e:cf:01:bf:47:14:
03:fa:09:21:ed:91:50:2d:50:f1:a8:07:40:72:15:
d1:a9:7c:6f:58:60:7b:46:7a:a2:a0:ea:5c:f7:81:
11:d1:b0:46:7e:36:ee:d0:78:f3:a0:fd:17:d1:c6:
f7:4e:63:a4:4a:6a:f6:ac:1e:7a:85:86:d7:ec:9f:
51:11:56:b7:64:64:88:e0:02:4d:40:b9:eb:f1:f1:
4c:5a:59:20:83:1a:9c:20:53:ac:1b:2a:64:83:c0:
c8:a9:ea:2d:b2:7e:39:07:ac:f4:23:e7:ec:00:38:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:7E:68:A3:AB:13:7F:E7:6C:D3:A6:92:75:0B:47:01:68:C0:4C
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d1:bb:20:83:96:13:4d:4d:0b:df:3a:ff:e4:fc:fd:52:4d:
b4:d7:cd:9f:56:26:72:17:d9:6b:a7:d6:3e:5b:f7:9e:4d:1f:
be:dd:e6:6a:52:a1:d0:3a:ab:4d:74:2d:c9:57:94:5b:38:86:
c0:2e:ec:49:e8:35:a3:30:5a:db:3e:05:98:2d:8b:db:cd:65:
4c:c0:f4:11:55:e9:86:b7:3d:df:20:f1:30:d7:86:8c:69:38:
94:d6:bc:b8:ca:c5:de:da:81:9b:d9:2b:27:3e:01:ab:42:4e:
11:65:78:79:36:01:f8:2f:c1:e9:97:f4:71:50:47:5e:a8:df:
d7:b2:4f:d5:db:c8:ab:16:4e:24:fa:08:2d:d6:23:96:b9:dd:
28:9a:3c:31:0d:ed:8e:d3:40:02:ec:df:a8:0c:bb:2d:bb:39:
cd:52:46:be:a1:4a:1e:f9:b7:48:ea:ac:69:ab:fb:01:b9:db:
a3:23:d7:50:13:01:f8:84:73:72:9d:41:d6:c5:7f:91:3a:90:
5c:42:e2:9c:70:54:64:50:63:4d:fc:9f:d9:8e:ce:33:3c:2c:
6b:8f:29:25:11:f0:30:53:5d:cd:7e:46:27:31:07:61:22:5c:
1a:40:44:38:cb:93:da:13:0e:33:03:16:2a:4c:7a:45:76:d2:
07:62:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:06 2025 by rpki-client