
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: lBJZl2AfSzxTC+9Kkkp2SLwEiIL97/bHATw98DvYC88=
Subject key identifier: D4:5E:1F:1E:E9:DF:14:01:C3:F9:5D:99:03:2E:DB:A3:46:8A:CB:09
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 7CEC77A0C71D27C312EDFD3C537B0B8597FA8376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 0263
Signing time: Sun 03 Aug 2025 22:12:07 +0000
Manifest this update: Sun 03 Aug 2025 22:07:07 +0000
Manifest next update: Tue 05 Aug 2025 01:53:07 +0000
Files and hashes: 1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: 6Tv+KBq1g0leMqgqevgd8keJXKJmfx7eDntxqoEgQlk=)
2: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ec:77:a0:c7:1d:27:c3:12:ed:fd:3c:53:7b:0b:85:97:fa:83:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: Aug 3 22:07:07 2025 GMT
Not After : Aug 5 01:53:07 2025 GMT
Subject: CN=D45E1F1EE9DF1401C3F95D99032EDBA3468ACB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:7a:88:c5:72:46:06:08:06:46:8b:ac:2d:
c2:ca:7f:be:09:d3:b7:4a:f2:d1:73:4e:eb:b9:fd:
27:f8:d0:bf:1d:52:1e:99:02:d5:33:17:c8:91:b3:
ce:26:61:11:98:eb:11:53:75:00:ad:27:a7:53:f9:
58:96:2a:ac:7e:5a:08:76:02:6a:b5:0c:55:11:b1:
61:f4:b9:87:76:b9:7a:4d:be:a2:95:d5:2d:77:da:
87:39:e2:42:8e:23:bf:a7:01:e3:8b:3c:67:50:4c:
49:89:f3:0c:8f:43:52:a8:39:9d:c9:56:b8:7a:da:
f2:85:04:52:65:f7:b0:64:de:8d:d0:82:4c:71:53:
ca:49:5d:e3:4c:2b:b9:78:7c:05:5c:66:57:cc:0a:
3f:87:9e:ad:78:16:75:b8:68:5e:48:57:93:64:c5:
24:5e:39:18:9d:be:67:b2:df:1d:f7:87:cb:be:0b:
ce:d1:58:c7:bc:66:9f:44:99:3d:42:d7:b5:87:cd:
db:09:27:88:67:d1:a8:e2:c0:f6:01:fb:85:ff:c7:
a4:68:08:62:81:66:5a:d3:9e:a5:09:d5:c6:b4:55:
62:f8:fd:54:37:9b:51:aa:9d:b2:46:a2:a5:f1:6d:
46:d0:d2:06:3e:63:d0:86:65:99:49:54:52:ef:92:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:1F:1E:E9:DF:14:01:C3:F9:5D:99:03:2E:DB:A3:46:8A:CB:09
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0a:8f:31:26:03:29:6d:73:bd:a8:89:79:be:2f:79:a3:c2:
63:e8:8d:fc:a0:78:28:46:d1:c5:71:38:66:e6:6a:4c:c5:78:
df:43:70:c8:ea:27:ce:75:b3:63:9c:d7:88:41:7a:49:1d:bd:
b0:eb:36:ff:70:ce:c7:8a:9e:80:0f:ee:88:8a:5f:e4:c7:25:
2d:75:1d:31:3c:26:97:f6:26:aa:40:30:a9:83:a4:12:e1:2a:
2c:83:51:d7:91:5e:ce:0a:bb:23:7b:6e:b7:49:a8:38:de:f9:
c8:ec:dc:88:3a:51:22:6c:a4:82:5c:6b:66:99:68:b1:73:08:
3b:3e:a2:84:d0:ab:39:85:9c:1b:52:b5:ce:18:b9:70:3a:17:
bc:6d:2c:5d:7e:ae:66:b2:24:48:83:1a:5d:15:fd:3d:1e:56:
63:4e:ee:9e:08:49:a7:d0:06:29:72:0f:8c:4d:b6:07:47:34:
0a:e5:13:71:14:f0:c2:08:d3:09:2d:5b:f3:fe:7b:15:ca:72:
ec:82:26:07:a5:9a:8c:cc:b3:ed:ef:ea:65:ac:0f:36:d7:c1:
af:cc:0b:3f:6d:ca:1d:51:f5:7c:32:a2:0d:7e:13:f1:a3:ec:
a2:61:c2:a8:1c:1c:73:f7:5e:47:52:5c:9a:ce:f5:5b:fc:24:
f0:dd:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:57:55 2025 by rpki-client