Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: 6EPHDNJDcG3PSgRBg7X5kw9r/LcZvfiWfkEkNB7FGVg=
Subject key identifier: 12:8B:48:14:C1:25:C1:30:FE:FB:77:02:7A:C5:26:6B:8D:89:18:86
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 01974A7AA01AA718517F07E736B34FD12F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 06EF
Signing time: Sat 07 Jun 2025 13:00:39 +0000
Manifest this update: Sat 07 Jun 2025 13:00:39 +0000
Manifest next update: Sun 08 Jun 2025 13:00:39 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: pxJOM39IkaI+Epj42MPezLi8DGQjckNtgRh6s5p3Sok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a0:1a:a7:18:51:7f:07:e7:36:b3:4f:d1:2f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Jun 7 13:00:39 2025 GMT
Not After : Jun 8 13:00:39 2025 GMT
Subject: CN=128b4814c125c130fefb77027ac5266b8d891886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:0f:f1:44:2b:b9:2c:47:3b:38:d3:9a:1b:
f9:11:e8:b4:74:35:4a:72:2c:04:77:42:b8:d0:07:
14:cd:46:e1:1a:1c:c4:26:56:f4:3a:34:ea:09:7b:
92:88:9a:a0:90:b0:86:40:35:6f:5b:e0:5b:3d:31:
ea:22:8c:b8:c1:db:d8:a1:f8:cb:29:f2:81:fa:b3:
c3:34:03:15:97:4e:ae:7f:6a:7c:e7:23:10:42:d8:
68:10:3e:70:aa:f7:3b:63:99:10:17:51:e8:0e:23:
12:90:67:3a:f8:00:ab:f9:ad:7c:17:f3:fe:f0:35:
8d:c8:63:da:b2:a3:8c:5a:ec:ae:15:32:29:48:43:
7e:d3:f8:09:c9:a1:36:80:4b:65:21:cc:32:78:a6:
f5:2a:27:27:1e:29:7b:68:8b:f1:fd:92:58:cf:4f:
6c:8e:ba:d8:85:2f:ec:1e:c8:1d:39:52:43:8a:e5:
07:95:8f:cb:e7:23:ec:a4:57:8e:86:41:b0:02:c5:
86:d8:da:d7:04:73:50:a8:d5:af:00:c1:58:90:a1:
ac:d4:5c:cb:00:ef:08:e6:1d:df:77:67:cd:e4:dc:
63:c7:91:78:db:6f:c3:32:01:94:a0:85:0f:b4:6c:
de:7e:ba:1e:13:28:14:8c:aa:65:f3:01:e7:90:22:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:48:14:C1:25:C1:30:FE:FB:77:02:7A:C5:26:6B:8D:89:18:86
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b5:d8:09:88:88:28:98:36:05:77:cb:25:de:e8:10:95:42:
5a:be:f6:c4:53:65:66:fa:97:83:07:5b:f2:24:b5:21:19:c4:
1e:dc:ae:36:f8:48:75:31:41:19:9b:a2:25:56:83:72:ca:f1:
81:56:d9:3e:cb:39:77:22:1c:08:e4:21:ce:32:1c:8d:f8:ac:
48:11:ec:82:a8:e4:23:7a:18:9c:03:be:90:e9:92:94:b2:8f:
34:fc:bb:09:57:b1:13:f8:90:c8:d2:e5:6e:bb:aa:04:2f:63:
eb:1d:41:13:d1:48:30:4c:46:c8:e8:44:8f:e0:bb:a5:85:5e:
06:3a:98:13:36:65:6f:d2:5c:cb:b0:0a:44:61:2c:b7:ff:b7:
fc:d0:9f:14:12:3f:b0:f0:e1:50:26:99:d1:05:ea:60:c1:65:
a0:09:b3:b0:76:66:4f:de:32:b6:e7:1d:08:cf:ad:09:60:7f:
db:5f:ac:85:ab:53:0c:a6:3b:85:23:a1:c8:af:32:b9:8d:3e:
7a:ee:a3:39:ea:3d:55:40:69:52:05:8e:89:a4:52:fc:13:6f:
9a:4b:7c:46:01:fb:fc:bb:8b:3e:b2:32:4d:94:d4:4e:dd:3e:
25:c7:cb:e3:fa:60:39:db:13:8d:fc:11:f7:d6:38:53:6d:cc:
17:da:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:27:43 2025 by rpki-client