
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: 0fbKZzwda3y8tCfwvINtdV9Siqxn8z/qSzUPuD7YLr8=
Subject key identifier: A6:7F:17:9D:C6:7D:F5:3C:94:C7:16:25:5A:BB:31:B0:86:A9:80:50
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 0199FB45F948508ED0F34703279BEBAC359F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 14B7
Signing time: Sun 19 Oct 2025 07:01:30 +0000
Manifest this update: Sun 19 Oct 2025 07:01:30 +0000
Manifest next update: Mon 20 Oct 2025 07:01:30 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (hash: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=)
3: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: CnFJSbues3hhaHX3nL4qVCx1U1mqHtcGaideKFXvRj4=)
4: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f9:48:50:8e:d0:f3:47:03:27:9b:eb:ac:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Oct 19 07:01:30 2025 GMT
Not After : Oct 20 07:01:30 2025 GMT
Subject: CN=a67f179dc67df53c94c716255abb31b086a98050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:46:b8:a9:4a:a3:a6:1c:83:8e:7a:6a:21:
82:52:ba:b3:72:19:cc:ce:f5:45:37:de:ab:5d:9b:
23:a9:20:40:97:4d:65:aa:a8:58:23:31:ec:b1:84:
ce:f9:f8:f2:dd:b6:74:02:51:d2:df:5a:1d:61:7d:
b4:8b:26:87:be:94:13:af:3c:24:b8:cb:b8:c8:7c:
1f:2f:69:16:71:96:d2:d3:cb:8a:29:01:c4:0b:5f:
c4:d3:33:2c:19:cb:1d:60:08:f8:f0:dd:9e:83:74:
f1:4f:19:1d:37:68:2e:4d:6f:3b:8b:bc:0b:74:8b:
f3:b8:99:bd:74:61:78:65:24:af:ab:7c:5a:fe:fd:
a6:44:89:c1:c1:7a:7a:07:cc:00:e7:a2:eb:1e:be:
1a:d1:15:7f:96:44:19:1f:f1:98:29:d9:57:16:ba:
f2:3e:47:33:0a:a0:4e:a8:7f:16:06:94:19:88:b4:
cd:57:2e:c0:06:72:11:93:e7:f8:d0:29:50:46:4c:
1b:7c:1a:fc:e1:58:af:0b:63:1a:6b:a6:bf:b0:3f:
1f:19:81:10:82:85:cd:bf:e9:69:75:eb:6d:39:4f:
49:e1:a3:4a:91:d1:88:45:34:40:53:10:5b:b6:ad:
ae:e0:79:5f:e9:ec:b4:62:0d:91:ea:1c:75:76:00:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7F:17:9D:C6:7D:F5:3C:94:C7:16:25:5A:BB:31:B0:86:A9:80:50
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:a1:14:66:d9:d7:8d:b2:3b:0e:3e:b2:4b:50:f7:ca:8d:
09:41:11:5c:f6:33:ff:a4:1c:33:5a:68:03:92:93:72:ac:6e:
08:93:78:2d:90:0a:2b:f7:23:db:92:b0:4a:4b:18:8e:d8:24:
c5:bd:43:da:5c:23:e7:6c:5d:04:e4:a7:04:ab:68:cf:8e:18:
52:d0:48:84:ac:32:8d:29:39:40:e7:d9:86:c4:c0:ba:a0:7a:
61:a5:9a:09:71:a1:0d:a3:6e:c0:2c:16:05:07:07:b5:f3:b4:
21:41:65:26:74:da:40:ea:f9:fd:16:de:bd:82:19:69:66:a9:
b1:71:fa:65:0c:42:64:6b:62:e8:80:2f:80:f8:fa:10:07:6d:
60:72:e5:b3:bc:f1:00:36:ae:7f:6a:a5:e3:1c:d5:17:fe:a9:
40:8c:b0:12:75:6d:3f:40:e3:4b:65:4f:2b:75:0c:3f:15:29:
72:ae:03:dc:2e:34:50:a7:6e:26:2f:52:2c:40:8d:7b:1b:50:
22:40:c8:61:bf:83:3f:98:19:86:f3:19:57:51:f2:b3:52:fa:
b5:01:63:25:89:af:7e:51:18:9d:99:ab:5c:27:9f:82:04:5f:
5d:bd:ef:1b:58:45:1c:92:0c:33:c9:c0:5c:6e:cb:f8:d8:0f:
b8:69:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:25 2025 by rpki-client