Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: bymKs47mlU2xkyB4NHF53Pu74NRkhx+SYgehnE09PXs=
Subject key identifier: D3:03:88:72:A9:CF:91:B2:A1:78:78:1E:FB:EC:05:60:B8:2D:9E:44
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 0197B6A218BE7C7553885A73A6D65C72A5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 0727
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: LYu6ZCNpW9QTzF8WgWGQxikFvT1ci4G3AODgO0sv4Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:18:be:7c:75:53:88:5a:73:a6:d6:5c:72:a5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=d3038872a9cf91b2a178781efbec0560b82d9e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:4c:f3:2c:54:28:39:df:15:01:77:fa:66:
23:ba:64:8d:d5:2d:79:f6:29:71:d6:b9:e9:19:70:
48:a5:28:e1:2b:f5:18:5b:60:22:6b:6e:54:ec:f4:
c8:5f:38:39:1e:08:b0:1f:3c:93:e4:59:29:c1:9d:
a2:99:3e:19:db:ca:60:e9:0a:7a:fb:4c:60:f4:79:
04:cb:4f:96:ce:e8:a9:ca:ef:22:f8:81:88:27:77:
54:e4:31:fb:6a:2e:6f:58:e7:74:48:55:17:db:93:
16:9a:70:23:d9:84:fc:93:49:0e:f6:0e:50:ea:a6:
02:24:04:7f:bd:45:13:3c:ed:80:c8:87:05:39:39:
a6:7b:24:52:12:1e:28:70:b3:f7:c7:cc:02:c0:0f:
6a:6d:40:59:87:0a:c8:0b:09:76:90:22:2c:9f:2b:
99:e7:9b:c9:53:4d:18:07:8a:29:62:e3:bf:8a:91:
2c:8e:e5:e3:7e:e0:9b:ac:0f:3c:8e:dc:f4:a9:89:
af:b5:75:b5:84:65:8e:2d:50:37:ef:5c:a2:15:be:
98:84:2b:c7:03:9e:e6:30:81:af:ea:01:65:d7:6d:
43:78:25:bc:63:19:fa:a6:3b:8e:17:f4:3f:9a:23:
8b:c6:f6:92:2d:f5:21:bc:fa:16:6b:37:7c:ed:3f:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:88:72:A9:CF:91:B2:A1:78:78:1E:FB:EC:05:60:B8:2D:9E:44
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b4:f0:b9:db:b1:d6:ce:ae:fc:1d:cd:3d:c8:91:a9:d8:1a:
5d:79:89:0b:7e:af:c2:18:c5:c9:60:bd:ec:1b:a8:df:bd:7a:
21:97:be:61:c5:ac:e5:ea:96:17:8e:5a:f8:21:65:fe:d4:dd:
0c:df:82:96:76:6a:7c:6f:10:77:3c:57:de:6b:fc:df:23:a0:
0d:d0:51:46:a0:e1:28:fd:28:2b:74:68:f4:04:4d:be:71:cb:
38:62:2a:ce:a3:04:bd:a7:47:86:b4:88:9f:f0:c9:9a:d0:77:
8e:0b:08:f9:86:bf:02:f0:ad:3c:e2:43:ab:5b:12:49:13:6d:
a3:d1:cf:d6:67:ab:8f:4f:91:69:d4:7c:39:a9:a2:cd:87:af:
8d:ce:8c:c4:d0:0d:0c:16:7a:9b:7e:30:ac:1e:39:47:29:33:
1d:3e:bd:dc:a9:c6:d9:f3:10:10:1f:82:8a:7f:4b:c4:34:98:
e0:a2:0a:e1:8d:e3:69:eb:cb:60:69:4f:10:4b:47:98:f0:92:
32:92:b9:c7:01:45:1b:75:2d:22:7c:f8:29:7d:20:87:ff:a8:
ab:d6:6d:29:ea:26:bc:a6:77:f2:35:96:1f:c3:fe:0b:4f:80:
59:60:f7:17:f6:db:13:ed:5d:0b:a0:5d:c5:55:4a:d0:af:bb:
5f:08:25:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:41 2025 by rpki-client