Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: blRUCRfCl7ky9VUPJ2evji3XFD+J77ZCqbUm4oQvQlo=
Subject key identifier: E8:56:85:58:E6:E4:86:6D:3C:1D:B3:04:09:61:D2:5F:7E:6C:34:0B
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 01988FFE01F2B926A98706D461F130025829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 13FA
Signing time: Sat 09 Aug 2025 18:00:45 +0000
Manifest this update: Sat 09 Aug 2025 18:00:45 +0000
Manifest next update: Sun 10 Aug 2025 18:00:45 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: PWqu+usMR4/iiQj3k26wIKxBslucY5E0An3R7O/AuW8=)
3: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:01:f2:b9:26:a9:87:06:d4:61:f1:30:02:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Aug 9 18:00:45 2025 GMT
Not After : Aug 10 18:00:45 2025 GMT
Subject: CN=e8568558e6e4866d3c1db3040961d25f7e6c340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:71:a5:9e:b0:55:ef:a5:77:65:01:38:e5:
d5:90:a4:3e:02:a1:02:ef:e4:11:33:52:9f:4a:d4:
e1:80:79:42:e0:6c:f8:6f:89:7c:e1:4a:97:98:b9:
1b:8d:78:7c:36:56:3f:f7:ac:e7:99:f0:26:87:fa:
b4:97:a7:b2:a4:ae:8d:bc:8e:01:03:d0:9f:97:f3:
6a:dd:46:53:e4:87:54:1b:57:5f:30:ce:ff:a6:10:
2d:80:e4:07:e8:05:35:4e:a5:bc:d2:78:3e:92:d0:
0b:b4:24:13:04:9c:14:dd:91:e6:97:48:16:7b:85:
d2:42:9c:23:18:9a:89:9b:3e:68:e5:d0:ea:4f:56:
af:2e:9b:cb:2e:65:55:75:0a:92:7a:e5:d5:bc:80:
b9:0d:4b:31:d3:43:3b:4f:02:c8:5f:ef:fd:48:32:
86:8f:ea:b6:cb:72:bf:70:37:fa:6d:01:fb:c1:84:
3c:3c:ab:30:ed:ab:70:33:20:17:b1:c6:22:6c:a5:
65:a3:4c:8d:bf:fc:ed:0c:b9:8a:52:69:e5:27:d3:
a7:0b:df:a7:24:4f:88:39:45:82:35:3a:6d:5e:00:
cc:29:39:f1:6d:14:8e:98:05:e3:94:42:8c:8b:2e:
2c:c3:cb:1a:59:eb:98:9d:1e:f0:89:ab:18:cf:00:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:85:58:E6:E4:86:6D:3C:1D:B3:04:09:61:D2:5F:7E:6C:34:0B
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:76:52:4f:4b:35:2f:51:c2:3d:5c:6a:3b:85:38:0d:01:ae:
76:49:ac:3c:f3:5c:20:84:75:58:1d:23:ef:e5:86:1f:a6:c9:
65:ec:4d:2e:d3:b2:c5:65:6f:fa:e0:23:77:c6:a2:07:12:9c:
45:99:dd:79:3f:ce:7b:3c:48:b2:f5:49:b0:f7:0b:84:24:b8:
ae:9e:26:c9:d9:9d:bd:1b:04:08:73:23:c9:53:d1:36:64:d2:
07:3d:9d:d7:62:a1:ef:36:ae:cf:c8:0c:9a:b9:b5:97:45:d1:
d4:48:20:df:74:dd:ff:55:db:90:d0:c7:a1:c6:1a:85:e5:18:
71:02:99:71:c6:c0:34:75:e9:f4:8f:48:02:25:75:61:04:fa:
3b:38:ad:e2:f6:c0:52:b6:53:d9:70:f0:81:11:d0:83:09:ba:
d4:ab:c4:f4:60:dd:e4:48:0f:2f:3c:8e:2e:20:1a:20:c0:18:
26:9d:37:f2:6d:b1:c9:ef:dd:25:58:fc:0c:91:e2:51:93:5f:
8c:39:59:2c:ea:45:75:a7:fd:45:39:a8:4c:78:ef:f4:da:bf:
c6:18:f1:6c:74:e0:ed:e8:cc:ad:be:21:a4:e8:a2:94:0a:4e:
00:a8:d5:ba:a7:a9:56:ba:e0:64:85:65:cc:89:5e:8c:5e:9e:
35:ba:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:27 2025 by rpki-client