Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: ky5/UQ7ijIeb0x3HEwymUBMcgfLB5fDzhZWyHjo/sqk=
Subject key identifier: 78:5E:7F:3D:A5:25:A1:94:E7:A8:A2:3F:A7:3E:29:DE:4D:B9:82:8F
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 01967BD81EBB50E7D8FB785EB9A52C1F88BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 0684
Signing time: Mon 28 Apr 2025 10:01:23 +0000
Manifest this update: Mon 28 Apr 2025 10:01:23 +0000
Manifest next update: Tue 29 Apr 2025 10:01:23 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: 7rdp9u80RUdzf+6dcV27Rm7C6tXSrI5rJXATyo3SLw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:1e:bb:50:e7:d8:fb:78:5e:b9:a5:2c:1f:88:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Apr 28 10:01:23 2025 GMT
Not After : Apr 29 10:01:23 2025 GMT
Subject: CN=785e7f3da525a194e7a8a23fa73e29de4db9828f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:94:27:d0:d2:ff:b0:61:0c:01:74:38:02:
4e:74:b7:07:8e:a1:43:ca:3f:29:dc:cb:d1:59:17:
44:e0:7c:26:98:d0:03:64:c6:3d:8d:66:c7:97:7c:
b9:79:2d:55:fa:80:80:24:8c:96:0d:1b:d6:0b:65:
8a:42:24:0b:3e:b1:cc:6f:a6:62:ca:7b:ae:9c:6e:
f4:02:28:35:e6:e7:d8:14:d2:8d:30:ee:33:f1:cd:
92:ac:17:ea:1b:a3:f0:28:34:32:be:56:f4:a2:2a:
6f:ad:c5:74:8a:66:49:43:1a:58:7f:63:7b:26:2b:
78:3b:7f:d6:8e:cf:8b:b8:7d:26:a4:ba:c7:76:3e:
dd:99:dc:6a:86:4d:00:7d:ae:f1:7e:2d:07:65:23:
d5:ad:fe:de:ae:26:c5:3f:9c:8b:03:95:cf:22:da:
f4:d9:0c:50:b1:79:a5:68:22:a4:63:5a:45:8a:b5:
62:93:9f:bc:ac:89:91:7b:0d:db:d4:da:b5:6f:5a:
d5:59:10:a7:a0:b6:f0:b7:81:39:6f:d7:75:88:a7:
73:4c:86:cf:b6:39:17:2a:4b:52:c5:a0:1b:dc:ea:
53:3e:5c:9b:cb:23:e4:45:77:79:1e:71:d1:c1:73:
e8:d3:a9:50:84:08:dd:e0:a6:b4:d4:73:c6:b0:10:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:7F:3D:A5:25:A1:94:E7:A8:A2:3F:A7:3E:29:DE:4D:B9:82:8F
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:91:e5:01:74:3c:fb:82:68:fe:7c:28:ae:24:21:ed:b6:65:
16:74:d6:74:77:cb:2b:90:51:02:52:34:4c:df:5c:00:17:50:
71:50:e3:ad:9b:a1:4b:6b:c7:f9:3f:6e:e9:91:db:36:6a:4d:
c2:f2:03:a4:bd:89:93:cd:7d:6d:f1:3d:2a:33:e4:ec:44:7e:
ee:23:91:f6:98:81:12:92:2a:07:f5:ef:e1:c3:bf:15:e7:12:
0f:4e:8f:7c:69:7d:8d:ec:44:88:fb:e6:24:f4:be:2b:b6:cd:
5b:1b:c5:2c:e6:20:57:16:24:ae:2f:d7:70:b5:bd:59:42:5b:
0c:03:89:29:b3:de:b7:50:73:ba:74:8f:26:6c:41:d3:21:cf:
32:20:e3:b2:78:64:37:c7:81:3b:7f:f8:10:c0:5b:46:fe:4c:
4f:af:b8:59:ba:54:cb:ef:69:f3:07:ea:4d:28:1e:b3:09:09:
44:35:8e:c0:7e:63:4c:2e:c6:5f:d0:1d:12:bd:4c:71:10:7b:
38:28:37:2d:12:e1:1e:df:df:d8:17:e8:bb:6a:84:2a:b0:62:
6b:d5:70:83:2f:0e:3b:8f:8e:84:2f:58:18:f7:8c:f3:b2:fb:
bc:f9:24:14:99:bb:72:8c:4f:bc:bc:c5:fd:10:e0:17:87:83:
fc:04:f7:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72B67UOfY+3heuaUsH4i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2
NDQ2OWEwHhcNMjUwNDI4MTAwMTIzWhcNMjUwNDI5MTAwMTIzWjAzMTEwLwYDVQQD
Eyg3ODVlN2YzZGE1MjVhMTk0ZTdhOGEyM2ZhNzNlMjlkZTRkYjk4MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9yUJ9DS/7BhDAF0OAJOdLcHjqFD
yj8p3MvRWRdE4HwmmNADZMY9jWbHl3y5eS1V+oCAJIyWDRvWC2WKQiQLPrHMb6Zi
ynuunG70Aig15ufYFNKNMO4z8c2SrBfqG6PwKDQyvlb0oipvrcV0imZJQxpYf2N7
Jit4O3/Wjs+LuH0mpLrHdj7dmdxqhk0Afa7xfi0HZSPVrf7eribFP5yLA5XPItr0
2QxQsXmlaCKkY1pFirVik5+8rImRew3b1Nq1b1rVWRCnoLbwt4E5b9d1iKdzTIbP
tjkXKktSxaAb3OpTPlybyyPkRXd5HnHRwXPo06lQhAjd4Ka01HPGsBC1LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhefz2lJaGU56iiP6c+Kd5NuYKPMB8GA1UdIwQY
MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt
NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi
LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpHlAXQ8
+4Jo/nworiQh7bZlFnTWdHfLK5BRAlI0TN9cABdQcVDjrZuhS2vH+T9u6ZHbNmpN
wvIDpL2Jk819bfE9KjPk7ER+7iOR9piBEpIqB/Xv4cO/FecSD06PfGl9jexEiPvm
JPS+K7bNWxvFLOYgVxYkri/XcLW9WUJbDAOJKbPet1BzunSPJmxB0yHPMiDjsnhk
N8eBO3/4EMBbRv5MT6+4WbpUy+9p8wfqTSgeswkJRDWOwH5jTC7GX9AdEr1McRB7
OCg3LRLhHt/f2Bfou2qEKrBia9Vwgy8OO4+OhC9YGPeM87L7vPkkFJm7coxPvLzF
/RDgF4eD/AT3mA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:27:52 2025 by rpki-client