Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: a+J1qT5F4iMjWg9uvrn3W0gs7KF8ohSrdmTyUiIyCBo=
Subject key identifier: 41:92:58:DB:B5:68:F6:6F:4E:19:63:16:89:AE:56:2D:9F:B7:40:93
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 01993500D4769ED67F74C5FA3AE259E6C81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 07ED
Signing time: Wed 10 Sep 2025 19:01:10 +0000
Manifest this update: Wed 10 Sep 2025 19:01:10 +0000
Manifest next update: Thu 11 Sep 2025 19:01:10 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: NGDthiKAgXuOVXRbxH5WKWRTKDWcE9QrM2UHOHl5/gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:d4:76:9e:d6:7f:74:c5:fa:3a:e2:59:e6:c8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Sep 10 19:01:10 2025 GMT
Not After : Sep 11 19:01:10 2025 GMT
Subject: CN=419258dbb568f66f4e19631689ae562d9fb74093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:4d:44:dd:79:6d:c5:e0:d9:ba:d9:19:14:
c0:91:4a:e0:00:b1:e8:5d:02:7b:3e:e0:04:9b:3b:
f7:f8:a5:e3:d2:51:94:b0:fe:e5:6d:89:85:07:a8:
e5:70:3b:9a:46:6a:05:cd:1a:74:db:cf:7f:05:dc:
3b:30:21:f3:c5:c1:4b:f7:38:7c:62:da:4c:c4:2c:
34:38:7c:ea:09:cc:a2:f5:e2:09:7f:2f:ba:84:5f:
ea:ad:71:60:d2:c1:3e:72:8e:f8:80:18:fc:59:ff:
aa:57:65:4f:f8:a8:b0:e4:f8:e8:75:fd:9c:62:b7:
d1:93:9f:32:b7:5e:1f:71:96:a2:41:59:d9:bc:53:
e2:3d:4d:b3:db:13:7d:7b:0c:77:d2:a7:92:91:c4:
7f:12:b2:d7:c5:98:c9:92:fa:00:88:e5:f8:77:49:
6b:37:03:c3:12:05:48:7e:84:9d:f8:89:85:2f:90:
5e:8f:ea:01:83:5d:07:b1:7b:4d:4a:28:3b:76:e9:
f2:ec:32:57:5c:80:1f:dd:c2:1a:d4:56:02:33:b1:
da:cc:05:35:b0:fd:ea:9c:b9:b3:3b:ea:45:ff:ea:
30:c2:46:6c:c5:6b:f9:19:88:94:5f:55:1d:4a:98:
ea:8b:0b:2d:c6:ee:88:93:38:52:16:c2:87:4b:76:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:92:58:DB:B5:68:F6:6F:4E:19:63:16:89:AE:56:2D:9F:B7:40:93
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d4:6a:70:f5:1b:4e:ff:bc:b0:e7:85:0a:e0:90:96:2a:b9:
23:4a:00:49:29:f6:f9:87:02:a7:43:91:08:33:32:3f:7e:5b:
44:c3:51:9d:c2:79:69:a8:7c:30:f6:43:39:fa:02:4d:51:12:
06:3e:0a:d3:0e:36:10:e6:63:3f:93:2d:05:98:93:a6:26:0d:
3f:f2:fb:bf:8e:d5:ad:4b:14:66:fe:05:5f:0a:23:3c:e4:91:
da:1b:f8:0b:88:46:03:e9:b6:1b:97:de:5a:87:7a:a0:5d:8e:
ac:55:72:46:90:94:04:9d:09:5a:f7:88:0e:37:67:b9:c6:42:
88:7a:b6:46:05:83:0a:61:23:a6:4d:6c:72:ab:d0:c9:09:6d:
0a:34:b5:fd:9d:91:df:58:9d:1a:01:5f:05:21:ae:0d:75:7c:
74:e6:56:3b:e2:b7:e9:ce:09:fe:94:de:db:7c:70:13:79:c2:
86:92:98:47:8c:19:3e:d2:ce:e4:10:6d:b1:9e:39:1f:73:00:
c1:71:15:30:21:99:ea:da:1e:05:a8:d5:da:fa:9d:2e:c1:7a:
48:24:dc:ef:8d:1b:a5:8c:c9:19:bd:10:00:d9:02:5e:c9:05:
08:c9:20:5d:36:9d:43:4e:0e:78:5c:99:ab:7f:e9:16:5e:e7:
94:a9:55:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1ANR2ntZ/dMX6OuJZ5sgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2
NDQ2OWEwHhcNMjUwOTEwMTkwMTEwWhcNMjUwOTExMTkwMTEwWjAzMTEwLwYDVQQD
Eyg0MTkyNThkYmI1NjhmNjZmNGUxOTYzMTY4OWFlNTYyZDlmYjc0MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOlNRN15bcXg2brZGRTAkUrgALHo
XQJ7PuAEmzv3+KXj0lGUsP7lbYmFB6jlcDuaRmoFzRp0289/Bdw7MCHzxcFL9zh8
YtpMxCw0OHzqCcyi9eIJfy+6hF/qrXFg0sE+co74gBj8Wf+qV2VP+Kiw5Pjodf2c
YrfRk58yt14fcZaiQVnZvFPiPU2z2xN9ewx30qeSkcR/ErLXxZjJkvoAiOX4d0lr
NwPDEgVIfoSd+ImFL5Bej+oBg10HsXtNSig7duny7DJXXIAf3cIa1FYCM7HazAU1
sP3qnLmzO+pF/+owwkZsxWv5GYiUX1UdSpjqiwstxu6IkzhSFsKHS3aZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGSWNu1aPZvThljFomuVi2ft0CTMB8GA1UdIwQY
MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt
NWY2ZWU1OGQ5YzhiLzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi
LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9RqcPUb
Tv+8sOeFCuCQliq5I0oASSn2+YcCp0ORCDMyP35bRMNRncJ5aah8MPZDOfoCTVES
Bj4K0w42EOZjP5MtBZiTpiYNP/L7v47VrUsUZv4FXwojPOSR2hv4C4hGA+m2G5fe
Wod6oF2OrFVyRpCUBJ0JWveIDjdnucZCiHq2RgWDCmEjpk1scqvQyQltCjS1/Z2R
31idGgFfBSGuDXV8dOZWO+K36c4J/pTe23xwE3nChpKYR4wZPtLO5BBtsZ45H3MA
wXEVMCGZ6toeBajV2vqdLsF6SCTc740bpYzJGb0QANkCXskFCMkgXTadQ04OeFyZ
q3/pFl7nlKlVxQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:19:43 2025 by rpki-client