Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: /0CBEKgmWjWW1iGWieANNbrHN58cwb1HabLBTvMQqz4=
Subject key identifier: A9:7C:A4:00:AB:ED:8F:19:71:F4:32:A7:D8:6F:7D:09:BC:60:89:D7
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 019A2C32B26117F0B001ADFCEAC457DFA3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 086D
Signing time: Tue 28 Oct 2025 19:01:51 +0000
Manifest this update: Tue 28 Oct 2025 19:01:51 +0000
Manifest next update: Wed 29 Oct 2025 19:01:51 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: m3DAcIXEv0CDV579yJbEjGdsBD4dPivyl/FmGBdEFck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:32:b2:61:17:f0:b0:01:ad:fc:ea:c4:57:df:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Oct 28 19:01:51 2025 GMT
Not After : Oct 29 19:01:51 2025 GMT
Subject: CN=a97ca400abed8f1971f432a7d86f7d09bc6089d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:17:0f:f9:54:08:54:ee:1e:2d:c1:10:7b:19:
5e:43:77:e0:30:39:15:92:63:36:49:be:1f:c3:f6:
61:7f:b5:2b:e2:8e:4a:8c:33:10:6f:38:2f:48:e6:
3c:84:ba:0c:05:76:49:43:d1:c1:38:5e:7c:67:7a:
05:dc:5f:11:98:95:0e:12:e7:49:ad:80:46:3b:67:
1d:bb:21:9b:6c:2a:c1:68:9f:6a:12:7a:35:8e:0c:
8b:cc:b8:6d:4e:2d:e5:cf:88:2f:ff:fa:d7:c7:8b:
64:b7:91:61:8b:b4:fe:37:96:22:82:07:f9:fc:63:
83:a8:44:f9:e5:72:e5:03:1c:ad:76:e3:ac:d9:73:
83:31:97:fb:56:81:af:18:a6:ae:4a:fe:fb:6f:55:
f8:42:cc:24:2e:f7:d1:9a:bf:0b:04:bd:5c:8a:84:
70:8b:c4:2e:61:cb:ac:c3:33:89:96:98:55:22:0b:
9b:0a:67:14:4a:eb:52:c3:c1:e1:ff:03:6b:ae:3f:
10:f0:00:46:de:bc:be:08:60:ea:3e:c4:8d:b1:17:
f4:d8:8f:2a:50:e0:5e:52:d6:e6:b1:5c:c1:ed:2e:
a2:e3:8d:d2:f4:f5:9e:07:2e:0f:ff:b7:c8:70:b3:
24:64:28:70:58:a2:57:6c:23:ac:21:69:10:8b:ab:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:A4:00:AB:ED:8F:19:71:F4:32:A7:D8:6F:7D:09:BC:60:89:D7
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6b:9c:3b:44:ab:8e:f9:12:8a:bf:5d:06:a9:33:ed:fb:c6:
57:f4:5a:b2:8d:4b:cd:7a:a6:eb:74:66:d2:92:73:85:82:cc:
2f:0b:c0:1b:a4:9f:51:85:fc:71:9d:0f:ef:0c:cc:0d:2f:3c:
b5:71:c7:85:f5:a2:a7:cb:d9:1d:bc:db:72:ac:42:aa:7d:75:
bc:8c:5d:0f:90:63:86:48:f6:72:85:dd:fa:be:ae:62:eb:f3:
00:5c:94:57:56:cc:07:3d:cb:52:ff:ab:08:d9:eb:66:7b:65:
3e:51:98:33:27:24:9f:39:f9:c9:2c:03:77:79:b1:30:71:f7:
b7:a3:a3:57:ae:21:15:57:f8:c8:bd:3d:ef:c6:b7:bd:11:c7:
31:4a:58:d1:97:02:19:c5:41:c5:ae:6a:d5:cc:55:a8:0b:1e:
a1:93:c3:12:ca:81:0f:00:cb:4e:fd:78:d6:89:46:fb:16:f9:
c6:bb:9c:61:f1:a6:e2:41:ee:13:17:01:cd:44:06:04:ce:1b:
81:39:34:8a:bb:ce:2d:8e:78:e5:44:0c:1c:36:d5:c1:2f:d6:
59:52:e4:05:b5:b4:55:28:83:ff:3f:89:c1:b0:7e:15:8a:bb:
ab:da:cb:2a:a0:2f:1b:fd:2a:35:74:ad:fd:de:11:79:11:19:
b0:8a:ef:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:28:09 2025 by rpki-client