Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: wCEP4SQDusF8q27hVSkD4SRiQUBFhyxT+3Y5z7rybyA=
Subject key identifier: 7E:87:D1:22:77:31:4F:6D:E7:A8:35:F5:F9:73:10:EE:A9:78:6C:5F
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 019A4EF4D73DF81E7135CD32A6E56A100931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 087F
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: lYOGifP04gjekOibUljbU/nxSbDJFqH6i+6i+5hWHX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d7:3d:f8:1e:71:35:cd:32:a6:e5:6a:10:09:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=7e87d12277314f6de7a835f5f97310eea9786c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:e6:57:b6:36:3b:ce:d6:d5:2c:8a:89:53:
8c:47:c5:40:d1:20:bd:43:a9:38:e8:c3:5a:4e:27:
99:44:ed:ff:37:2a:a3:d3:c9:b1:8d:2a:04:ef:b2:
d2:a9:dc:a6:8b:05:ba:ac:e7:8a:94:2a:70:44:38:
36:d0:55:98:0f:36:aa:36:3f:48:7a:c5:5b:77:5e:
18:09:ed:0e:6c:81:a9:60:3f:3e:1f:cf:28:f7:6e:
46:dc:3c:cb:74:79:79:62:f9:e0:de:8f:66:66:f5:
6f:62:aa:ac:c8:db:d7:64:53:96:bf:d2:50:91:bb:
ce:d7:03:e5:82:f6:3b:cf:a9:54:f2:37:b0:49:1f:
bf:c0:83:87:f7:35:e6:25:bf:94:ba:02:17:c1:3f:
33:0b:8a:fc:d0:2a:38:01:82:6f:dd:c9:85:19:c2:
80:69:4e:6d:65:98:d3:c0:2e:47:1d:4d:e3:37:c4:
bd:fb:f9:6e:b7:9b:f3:14:cf:17:69:c9:52:7a:83:
d5:c3:82:57:93:d0:59:f7:cf:b9:f0:b3:36:9b:df:
44:a0:da:b7:a3:c0:3d:81:20:9d:6e:9b:08:b1:30:
8c:d5:3c:31:da:bd:be:d4:50:64:cd:ca:fd:a3:71:
75:77:09:83:78:e1:1c:84:b4:c5:18:45:72:56:db:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:D1:22:77:31:4F:6D:E7:A8:35:F5:F9:73:10:EE:A9:78:6C:5F
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:22:ed:45:ac:2e:3b:e9:ff:5f:ae:ae:fd:97:fd:45:99:0f:
e2:d6:85:19:c1:5e:de:7c:87:ed:5e:1c:10:83:8e:7e:e3:85:
71:81:a4:50:70:e2:c9:01:78:cf:e4:2d:f1:d3:f5:7c:ea:b7:
0f:f8:9c:c2:d6:ee:b1:12:e8:62:e2:f9:9e:fd:0f:e7:7e:36:
4b:59:88:6f:c1:31:81:9e:22:3d:84:fb:d1:2e:f1:a7:ce:4b:
68:e2:49:41:71:29:df:67:24:4e:1a:c7:68:58:18:32:c9:47:
fa:96:14:e1:46:c8:d7:e9:a3:0c:24:d0:06:68:d5:10:37:b4:
b1:30:5a:10:15:de:75:27:fc:f4:0d:10:f3:f1:61:70:93:0e:
55:ce:04:37:8e:f5:8c:bc:ed:2a:14:58:30:30:9b:00:8c:ac:
10:48:6b:da:d2:ea:b2:19:db:17:73:60:51:12:3f:57:2d:c6:
af:73:eb:ea:50:12:8c:eb:a9:6d:99:0b:10:f6:61:a5:09:9f:
2b:6b:08:11:8e:80:7a:0f:a1:74:1a:6c:83:3d:2c:b4:a0:0d:
be:68:07:37:a5:be:51:0b:11:97:87:4c:9f:b8:a0:50:86:0f:
39:ab:14:8f:60:26:fe:2f:ec:68:4f:81:ca:c2:d6:2d:09:5f:
d4:4b:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:45 2025 by rpki-client