Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier: QqQEh9mA4Hun+FEDY1yT6Hc6VKjqeBuLP7x7d/c4Lro=
Subject key identifier: ED:79:1A:3F:11:CD:D4:7E:73:41:58:4C:9C:4C:D3:AF:90:61:C6:5E
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial: 2226B7F85F3744346AC0C0A9F2980A66CEC35423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number: 02AA
Signing time: Sat 23 Aug 2025 06:10:04 +0000
Manifest this update: Sat 23 Aug 2025 06:05:04 +0000
Manifest next update: Sun 24 Aug 2025 08:53:04 +0000
Files and hashes: 1: AS215147.asa (hash: J2x/D/dp4X7UL/t56blYMubeUgQMJur/XGZvebo5ANU=)
2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: DsuVSo6i3Uy1rcIcSskad8yQj72Slq1WXeh5q7VegIg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:26:b7:f8:5f:37:44:34:6a:c0:c0:a9:f2:98:0a:66:ce:c3:54:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Validity
Not Before: Aug 23 06:05:04 2025 GMT
Not After : Aug 24 08:53:04 2025 GMT
Subject: CN=ED791A3F11CDD47E7341584C9C4CD3AF9061C65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:c4:22:7a:f8:7d:99:3c:9d:0f:b5:8a:2f:
3c:80:56:66:a3:18:4e:62:05:b8:76:00:f3:08:4c:
0a:59:4d:a0:51:ba:1c:d8:77:2e:1e:b0:55:7c:4b:
1e:c1:8e:61:39:4b:32:fb:11:11:8a:86:e8:b2:ec:
ff:e7:1b:f0:96:a6:57:75:71:19:c6:8e:ff:6a:05:
cc:2a:ef:c1:57:5a:ec:74:41:fd:8a:24:f7:7f:cc:
76:8f:74:69:4b:c1:63:a7:14:1e:55:df:6e:37:4a:
4f:66:7d:bc:40:50:8c:bb:19:45:ce:2b:74:8a:0e:
ad:09:dc:be:ca:96:a3:9e:b8:64:38:66:95:d2:c1:
e3:4c:73:79:dc:58:68:ff:42:fb:b8:87:3e:40:c7:
53:2e:49:13:f0:c7:37:89:18:ad:9b:89:89:c0:cb:
34:bc:54:2f:f2:7e:5a:d7:49:5d:29:b5:9f:fe:f0:
0d:b9:cb:06:68:92:12:60:d4:9b:b3:9c:b7:0c:12:
5b:ac:77:03:77:d0:ac:b6:7e:43:0c:a2:34:2a:3b:
79:d7:33:0a:34:be:00:f8:f5:10:4c:80:76:d0:f4:
78:c5:66:7b:55:0d:aa:34:c2:dc:df:70:91:8b:0f:
22:56:56:08:69:88:73:12:9e:4c:03:11:9a:75:a5:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:1A:3F:11:CD:D4:7E:73:41:58:4C:9C:4C:D3:AF:90:61:C6:5E
X509v3 Authority Key Identifier:
keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:26:bc:66:cf:38:51:36:bc:fe:cc:fc:50:14:e7:9f:68:
f0:0f:dc:e2:5f:9e:d1:27:58:d9:21:90:1c:69:da:89:fc:38:
9a:3d:74:4b:79:e0:ca:56:6d:4c:02:73:99:17:40:f6:ab:c5:
63:cd:e4:15:f9:f8:67:00:94:91:46:d0:d6:8b:58:43:5a:9d:
67:5c:55:15:e2:31:5b:cb:57:36:83:e9:0e:b4:dd:26:13:a7:
9a:87:83:31:7f:5c:a0:d3:72:77:9f:44:b2:e5:22:15:1d:a3:
c1:6b:f9:65:d2:5a:49:77:97:11:b1:f4:53:26:bf:f6:35:03:
ee:c1:88:aa:46:2b:bb:cc:a1:5c:1f:02:27:05:9f:ee:cc:d4:
cf:63:80:f4:16:cf:69:41:cf:8e:aa:3a:fd:4c:57:16:ab:75:
38:5e:f0:5b:7f:43:74:1f:16:9d:8e:41:89:2f:9b:4f:55:88:
55:e1:e9:1a:f5:6d:d4:ef:80:59:37:9c:0d:7d:5e:f2:5f:f9:
7d:e4:5a:f0:87:33:58:39:36:4a:72:78:fa:35:a0:8c:ac:6a:
41:b9:fc:23:8a:b5:f9:10:25:91:47:98:cf:aa:23:cb:97:0d:
85:c4:c5:e2:72:e6:38:c8:ff:b2:74:8d:76:af:75:d3:a2:e5:
f8:2f:fd:79
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIia3+F83RDRqwMCp8pgKZs7DVCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNjMDc4ZTE0OWQ5NzQxNDM0ZmQ4ODc3YWI0Y2VkNDZk
YzI3MjBkYTAeFw0yNTA4MjMwNjA1MDRaFw0yNTA4MjQwODUzMDRaMDMxMTAvBgNV
BAMTKEVENzkxQTNGMTFDREQ0N0U3MzQxNTg0QzlDNENEM0FGOTA2MUM2NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhMQievh9mTydD7WKLzyAVmaj
GE5iBbh2APMITApZTaBRuhzYdy4esFV8Sx7BjmE5SzL7ERGKhuiy7P/nG/CWpld1
cRnGjv9qBcwq78FXWux0Qf2KJPd/zHaPdGlLwWOnFB5V3243Sk9mfbxAUIy7GUXO
K3SKDq0J3L7KlqOeuGQ4ZpXSweNMc3ncWGj/Qvu4hz5Ax1MuSRPwxzeJGK2biYnA
yzS8VC/yflrXSV0ptZ/+8A25ywZokhJg1JuznLcMElusdwN30Ky2fkMMojQqO3nX
Mwo0vgD49RBMgHbQ9HjFZntVDao0wtzfcJGLDyJWVghpiHMSnkwDEZp1pSbxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU7XkaPxHN1H5zQVhMnEzTr5Bhxl4wHwYDVR0j
BBgwFoAUs8B44UnZdBQ0/Yh3q0ztRtwnINowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzAvQjNDMDc4RTE0OUQ5NzQxNDM0RkQ4ODc3QUI0Q0VENDZEQzI3MjBEQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M4QjQ0VW5aZEJRMF9ZaDNxMHp0UnR3
bklOby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m
MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMC9CM0MwNzhFMTQ5RDk3NDE0MzRG
RDg4NzdBQjRDRUQ0NkRDMjcyMERBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQImvGbPOFE2vP7M/FAU
559o8A/c4l+e0SdY2SGQHGnaifw4mj10S3ngylZtTAJzmRdA9qvFY83kFfn4ZwCU
kUbQ1otYQ1qdZ1xVFeIxW8tXNoPpDrTdJhOnmoeDMX9coNNyd59EsuUiFR2jwWv5
ZdJaSXeXEbH0Uya/9jUD7sGIqkYru8yhXB8CJwWf7szUz2OA9BbPaUHPjqo6/UxX
Fqt1OF7wW39DdB8WnY5BiS+bT1WIVeHpGvVt1O+AWTecDX1e8l/5feRa8IczWDk2
SnJ4+jWgjKxqQbn8I4q1+RAlkUeYz6ojy5cNhcTF4nLmOMj/snSNdq9106Ll+C/9
eQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:40:50 2025 by rpki-client