Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: Lb5FSrMeoovzxvsMdUYOgQdOxZDzNgqM+gLNgqTOSt4=
Subject key identifier: 9A:61:B0:2C:B9:2D:CE:8C:30:40:9C:69:77:EE:E5:70:5F:F9:29:3C
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 0198D96014643F2C40B1FC02915DC2DA5780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 1420
Signing time: Sun 24 Aug 2025 00:00:08 +0000
Manifest this update: Sun 24 Aug 2025 00:00:08 +0000
Manifest next update: Mon 25 Aug 2025 00:00:08 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: piIQu3m7SLL4H6oZTP+l7ZVHmpEtQGELfME7gAf0qzA=)
3: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:14:64:3f:2c:40:b1:fc:02:91:5d:c2:da:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Aug 24 00:00:08 2025 GMT
Not After : Aug 25 00:00:08 2025 GMT
Subject: CN=9a61b02cb92dce8c30409c6977eee5705ff9293c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:6d:8b:02:09:92:8e:43:40:d5:65:ed:b9:
03:10:44:21:8b:91:84:15:2d:44:fe:a3:4f:41:5d:
dd:4e:7f:6c:7d:de:fe:67:ce:35:35:06:9b:50:4c:
e9:bf:6b:c6:f1:39:f8:d3:b0:ed:b1:17:06:77:f8:
87:b3:4d:1d:da:7f:6a:0f:fd:bf:ab:2e:38:7d:c5:
14:ff:84:9d:79:5c:69:3d:80:8d:6c:db:78:da:cf:
2f:ee:7a:aa:17:d8:25:8a:ad:f3:8b:47:ed:0b:f1:
39:80:da:4f:e3:b5:e2:81:99:89:0f:86:4a:e1:84:
17:1f:e7:b9:59:e3:ea:65:9c:4f:a3:3c:f9:b1:fe:
85:56:30:4c:5b:f6:59:a3:a0:60:29:09:65:9b:7a:
8b:55:75:05:ca:e5:9d:b3:31:b0:87:ac:35:97:8d:
fa:e2:b7:6e:ca:95:b8:d5:ce:85:dd:f0:1c:95:6f:
e0:91:e4:90:17:35:99:8a:db:17:18:25:bb:09:17:
20:47:7d:c2:85:e8:4a:83:3f:c7:77:28:41:76:ab:
0a:13:6f:01:95:03:6b:1c:56:52:a9:99:70:8e:47:
57:7f:f1:94:e3:0d:31:77:31:07:af:80:05:2a:6e:
aa:9a:db:03:c6:65:c7:11:95:db:69:01:63:e8:a7:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:B0:2C:B9:2D:CE:8C:30:40:9C:69:77:EE:E5:70:5F:F9:29:3C
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cc:85:7f:47:2b:17:de:56:54:7b:b4:c5:6a:cc:dd:c1:29:
b7:b8:4e:38:e2:a4:06:1a:77:71:e3:87:6c:d6:63:76:19:af:
5e:67:64:fc:6a:8e:1d:27:f4:33:1c:7a:b8:e1:31:d5:75:00:
7e:84:38:17:ce:82:c7:08:27:7b:f4:54:73:e3:6c:16:8a:81:
ab:6f:36:50:16:b0:32:bb:71:3b:36:de:42:1a:a4:98:7b:03:
fb:7b:06:b0:2c:41:35:17:6e:65:02:0f:10:55:6e:3a:a5:da:
8e:fa:18:e9:b4:47:8d:1b:a1:ed:2d:4f:3c:14:63:6f:52:79:
6d:28:fb:a0:c0:4f:fd:d7:37:36:c4:a4:ae:2f:23:66:2d:dd:
ff:87:aa:4c:5f:ab:e7:f7:42:f5:c5:42:7f:79:d4:a4:ff:e8:
c6:b5:2a:da:08:60:4d:e5:aa:49:ff:c1:4a:0c:da:6f:6f:14:
49:93:2f:68:33:f6:c3:1b:34:83:e3:f2:c0:f8:c0:1f:80:e4:
fe:fe:1e:22:14:7f:19:9a:6e:62:22:81:5b:d3:47:c6:46:2f:
c9:13:3a:5c:01:ef:49:cc:3a:74:be:50:a2:8d:12:bc:f7:96:
1d:2b:d6:de:ff:27:44:d3:fd:e9:08:41:22:98:02:99:c6:13:
dc:48:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:19:18 2025 by rpki-client