Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: tBcyz3W+3sGCS6Hhe/QAj0F7U1fKv/MDjVl0MR6uMY4=
Subject key identifier: D8:21:44:DE:41:10:32:E5:43:97:63:82:4C:E5:CB:9B:23:9D:35:70
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019A4E4FB2A1403111C8482BD4BC80117A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 14E2
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (hash: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=)
3: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: 8yAT/8811iysJ4kPXCcJrUXasR+O2u46n2t59qz7QGo=)
4: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b2:a1:40:31:11:c8:48:2b:d4:bc:80:11:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=d82144de411032e5439763824ce5cb9b239d3570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:3c:c5:a1:c6:e0:8f:87:de:db:f8:54:01:
2c:90:ea:17:e6:a4:10:cf:3a:7b:43:8d:b9:6f:ae:
3d:ea:a3:e7:03:80:34:9e:7f:89:66:91:d3:d5:8a:
0d:26:ea:64:ea:cd:cb:a8:1a:05:b2:ff:a1:19:bb:
20:11:74:56:3e:17:c4:5d:e8:7c:aa:05:43:27:62:
a3:96:a0:81:1e:a6:0c:ad:22:d7:8f:31:4a:b6:c5:
1b:8b:f4:40:71:fa:fc:22:62:3f:51:d2:e3:ef:20:
3d:8f:55:ca:22:32:eb:11:25:e3:c9:1b:e8:06:eb:
29:57:87:50:2d:7f:94:2f:46:e2:af:39:32:e7:6b:
8a:c0:aa:7d:c5:2f:c2:0c:cf:a1:44:ed:d4:7d:de:
2c:1c:c0:06:d6:ef:b0:28:34:3f:15:2f:6b:7d:13:
cd:4c:bf:12:4b:40:57:ee:06:c9:3c:c7:fa:96:fb:
46:b4:61:5d:a2:d5:97:a4:ad:4f:45:25:6f:72:da:
ea:7d:d6:92:30:83:52:9b:db:eb:b2:1d:67:cf:c3:
46:ca:ea:88:b6:bb:42:4d:0d:27:7f:42:db:e5:b1:
53:ce:25:d0:aa:a9:74:fa:9c:04:87:67:22:0c:67:
39:d0:2a:9c:b7:71:dc:f3:09:88:b1:32:82:70:cb:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:21:44:DE:41:10:32:E5:43:97:63:82:4C:E5:CB:9B:23:9D:35:70
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:b2:aa:7f:bc:75:b3:1f:e6:21:c1:8d:f8:ff:aa:cb:91:
58:80:25:47:81:e1:a6:e6:b4:2e:4b:e2:7b:9d:69:03:b2:fb:
46:46:df:f0:b1:b8:36:86:34:98:c1:f0:2e:9b:2b:db:4d:bd:
7a:aa:11:c6:16:1c:ea:26:77:03:1c:fa:17:e9:40:92:29:d4:
66:45:88:62:d6:4f:b5:5c:04:cd:c2:c3:70:bd:b0:42:26:99:
ca:ba:dc:2a:e7:f2:5e:11:23:b9:0a:e3:09:2d:65:2f:00:90:
65:17:44:da:13:f7:1c:43:c0:29:c5:49:c6:3c:0d:f3:4a:3f:
70:ca:62:86:54:cf:02:d8:5e:7f:1b:ce:5c:70:93:7e:7d:32:
8a:e7:a5:83:6c:46:e0:5b:c9:2f:20:e5:72:27:c3:b5:11:33:
18:5c:38:46:93:de:d0:8f:f8:32:1d:fd:04:96:c6:df:27:48:
4e:75:a2:a1:97:34:87:c5:77:8d:4f:36:7e:cf:94:de:03:b8:
04:a3:b3:f8:8c:d7:56:7a:65:d5:41:58:af:08:ed:a5:9c:5b:
6a:8f:ba:bc:05:2a:a6:1e:45:6d:41:09:4b:2d:42:82:52:8e:
01:12:df:c0:97:a4:08:a9:4f:01:6d:5f:16:82:84:3c:11:40:
a4:75:4e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT7KhQDERyEgr1LyAEXqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk
YWM3ODQwHhcNMjUxMTA0MTAwMDM3WhcNMjUxMTA1MTAwMDM3WjAzMTEwLwYDVQQD
EyhkODIxNDRkZTQxMTAzMmU1NDM5NzYzODI0Y2U1Y2I5YjIzOWQzNTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc88xaHG4I+H3tv4VAEskOoX5qQQ
zzp7Q425b6496qPnA4A0nn+JZpHT1YoNJupk6s3LqBoFsv+hGbsgEXRWPhfEXeh8
qgVDJ2KjlqCBHqYMrSLXjzFKtsUbi/RAcfr8ImI/UdLj7yA9j1XKIjLrESXjyRvo
BuspV4dQLX+UL0birzky52uKwKp9xS/CDM+hRO3Ufd4sHMAG1u+wKDQ/FS9rfRPN
TL8SS0BX7gbJPMf6lvtGtGFdotWXpK1PRSVvctrqfdaSMINSm9vrsh1nz8NGyuqI
trtCTQ0nf0Lb5bFTziXQqql0+pwEh2ciDGc50Cqct3Hc8wmIsTKCcMveSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNghRN5BEDLlQ5djgkzly5sjnTVwMB8GA1UdIwQY
MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt
YWYzMzRhMGExZTkzLzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz
LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5ayqn+8
dbMf5iHBjfj/qsuRWIAlR4Hhpua0Lkvie51pA7L7Rkbf8LG4NoY0mMHwLpsr2029
eqoRxhYc6iZ3Axz6F+lAkinUZkWIYtZPtVwEzcLDcL2wQiaZyrrcKufyXhEjuQrj
CS1lLwCQZRdE2hP3HEPAKcVJxjwN80o/cMpihlTPAthefxvOXHCTfn0yiuelg2xG
4FvJLyDlcifDtREzGFw4RpPe0I/4Mh39BJbG3ydITnWioZc0h8V3jU82fs+U3gO4
BKOz+IzXVnpl1UFYrwjtpZxbao+6vAUqph5FbUEJSy1CglKOARLfwJekCKlPAW1f
FoKEPBFApHVOPw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:23 2025 by rpki-client