Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
File: PLeBKLecqRq2JLqDJd_O2U9kRpo.mft (raw, json)
Hash identifier: W7/vhZ+0QNT/GzpHkA1T6ForVSbyY5WlVc4CVxDRqPw=
Subject key identifier: 7D:A4:A1:A2:C5:55:88:81:0D:A7:5D:AB:71:45:80:C9:E5:22:49:1F
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 0199FBEB033176518A8535B1129C969812D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
Manifest number: 0854
Signing time: Sun 19 Oct 2025 10:01:46 +0000
Manifest this update: Sun 19 Oct 2025 10:01:46 +0000
Manifest next update: Mon 20 Oct 2025 10:01:46 +0000
Files and hashes: 1: 8A8y9WDWLQcj74J5-U2GMd5jcTA.roa (hash: gPjwDghxURyEGzwpFw/rRUulL8EarCMywzfByHD+L6E=)
2: PLeBKLecqRq2JLqDJd_O2U9kRpo.crl (hash: 3R6gaQWIo2i3e3+dLF73ozUwCCfn9Bj111DqrEQcfbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:03:31:76:51:8a:85:35:b1:12:9c:96:98:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Oct 19 10:01:46 2025 GMT
Not After : Oct 20 10:01:46 2025 GMT
Subject: CN=7da4a1a2c55588810da75dab714580c9e522491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:db:c0:f9:33:e3:b2:4a:61:9c:f1:63:23:
b7:fb:ff:21:43:f4:aa:94:53:eb:ab:cf:aa:6a:31:
db:4b:69:0b:33:52:08:ec:4e:ce:d3:62:85:22:61:
c4:27:59:a3:d2:89:0f:28:5b:e6:36:ca:1d:50:b1:
48:2d:bb:cd:1c:c2:77:5e:e6:96:7b:4d:6b:33:7e:
43:5b:c5:b3:ad:12:92:49:66:a4:ca:1c:f8:f0:3c:
e1:14:c9:5c:f7:84:f7:8d:b9:f2:81:aa:1a:70:e4:
a6:72:36:91:8c:43:5a:ea:c7:1f:a5:2f:db:c5:65:
6e:0f:17:de:14:5d:18:7c:41:db:f8:8a:e1:f3:27:
a4:f8:e4:12:cd:11:6e:00:7f:9c:ae:2b:aa:6c:c6:
30:1d:7a:bd:01:30:7f:30:cf:f5:a3:05:65:4d:00:
a4:63:09:1f:ce:e7:41:3b:4e:89:fd:44:6f:21:92:
21:d2:96:43:c3:4d:73:65:9c:b0:33:18:f8:4a:9d:
14:a6:13:bd:29:b4:08:ad:80:8f:1e:f9:8f:0c:80:
9c:6f:b2:bd:4f:f1:98:53:14:83:60:55:8d:e3:71:
dc:8a:8d:5c:0d:0c:34:17:54:4b:bb:4e:38:cf:66:
cb:8c:7c:e0:92:32:16:46:b9:6d:93:d1:70:b3:1a:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:A1:A2:C5:55:88:81:0D:A7:5D:AB:71:45:80:C9:E5:22:49:1F
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:53:7f:4b:bd:4f:80:e9:db:e8:1d:8b:e3:32:5d:d2:01:a7:
d0:7c:93:d2:0f:d9:5b:46:bc:2a:25:5f:2d:da:71:7b:14:d4:
dd:ef:76:91:65:f9:5b:cd:0a:30:49:bd:ac:e1:3b:25:01:6e:
0b:5c:43:08:8b:4d:7e:36:ce:57:8f:c2:f1:d2:75:8f:f6:80:
10:b7:a8:d2:a5:4c:cf:78:d6:15:4e:03:5b:4e:88:2e:c1:32:
99:d4:48:cb:ad:7c:5b:0b:8b:c9:ed:98:c1:ea:50:45:49:62:
b6:12:fc:1b:d9:82:54:f6:dc:c5:1d:cd:ad:45:b3:c2:6b:86:
18:df:db:3e:86:f0:b0:9b:05:56:78:fd:13:3c:17:73:b3:c4:
1e:75:c6:22:8d:ec:70:ea:30:a3:8a:3a:01:1f:e5:ee:17:3e:
46:36:09:7c:e9:73:49:91:d7:0e:05:72:f2:f8:c7:a1:86:72:
6c:59:32:41:84:e5:be:00:75:0d:c7:f0:e0:af:eb:1b:81:2f:
76:aa:8f:98:ea:3a:75:5f:b5:2e:ea:6d:8e:41:76:a2:5c:46:
df:01:ec:b3:e4:48:22:61:75:54:58:23:3f:36:7f:30:07:9e:
36:1c:d1:3a:de:50:b5:a5:f5:60:dd:17:17:52:7c:56:74:32:
6c:9f:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:23 2025 by rpki-client