Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: 9RnZF31ThZfzTXDbee4N8H3+7VZYMy6HaD53r12kfFk=
Subject key identifier: 20:F9:66:D5:14:85:76:37:8E:03:60:53:90:CF:14:72:4F:A4:C6:64
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019A7112DB1244BC6D55DE2F08C9BEB47C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 14F4
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: COfNecMp37Kyo8BUu-OjhqwkX0M.roa (hash: EcSrFvvwVtSZ3xGoiWJMUyEv74s10nwqb3WegulBEsY=)
3: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: EBfw+90mOH4BAfKYBDMREArz4RVLSqdn/ZPbKplsCSs=)
4: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:db:12:44:bc:6d:55:de:2f:08:c9:be:b4:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=20f966d5148576378e03605390cf14724fa4c664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:c0:a6:b5:0f:fb:27:ea:b6:d5:6e:be:da:
90:d6:6b:d5:cb:d3:c9:58:48:93:89:08:25:a0:c2:
54:df:68:64:ad:2c:4d:00:7d:a2:ef:56:1b:16:94:
58:ed:e1:4e:71:d5:9a:0c:a0:40:66:d9:2e:d8:e7:
67:d8:34:d4:25:53:81:ca:44:f7:f9:d4:1a:0f:7a:
16:97:70:37:59:0c:d3:0a:f0:7b:9c:32:a0:3f:b6:
fb:3e:7d:a4:00:2a:0d:66:5c:dc:44:2d:9a:09:33:
7c:14:0f:80:01:64:a8:6e:0b:53:21:12:32:77:44:
5f:2d:a2:13:0a:4b:86:e9:e5:1e:18:26:ab:9a:07:
37:72:ed:22:9b:45:e5:b6:af:d5:82:69:e9:15:e1:
ca:29:2b:3c:aa:4f:60:b9:fd:82:31:60:f5:d0:98:
b0:48:7d:f4:da:c7:2b:17:ca:ae:93:ab:67:2e:92:
e2:62:95:ed:36:f3:39:26:fe:30:9d:e2:2d:b2:03:
be:d4:be:d1:24:66:c7:dc:66:50:61:43:d8:5d:77:
8d:ea:2c:77:c9:2e:38:38:8f:0b:7a:f3:23:b2:47:
32:cb:10:59:e9:27:ee:02:8f:2f:d9:72:77:a9:9c:
68:a3:42:49:52:51:2f:3e:f7:5a:f8:18:01:16:fd:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F9:66:D5:14:85:76:37:8E:03:60:53:90:CF:14:72:4F:A4:C6:64
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:45:33:37:e1:90:fe:df:97:c9:dc:93:e6:07:39:1b:14:62:
e7:3c:2a:84:c7:f1:22:86:17:cd:ff:73:6f:31:8a:7f:e4:91:
ae:32:84:c4:7b:74:2d:01:f8:dd:49:67:c5:15:06:1f:38:78:
5e:18:02:2c:75:96:32:5e:34:b6:15:5e:dc:8a:f3:58:47:ea:
e5:a8:48:ca:05:45:1b:c9:5d:79:38:23:f5:bb:82:69:1c:40:
a9:62:cf:57:09:8a:41:b7:c4:03:f7:e3:a3:8f:f3:71:f4:8e:
52:d5:8b:dc:ce:dd:fa:74:7b:37:86:6b:7c:26:98:1b:ca:0a:
a6:7c:44:31:bc:64:83:e0:8e:00:6d:cb:7e:57:be:89:83:bb:
17:78:6b:d8:de:e7:cb:03:12:8b:24:71:1a:77:58:53:d3:b9:
8d:f9:10:a3:e2:c0:a7:89:3d:cc:3f:83:fd:70:6a:7f:f7:e3:
e3:1a:8b:7c:de:05:95:ae:1f:84:ac:b3:15:1f:7b:6a:7c:ec:
76:45:d6:23:b2:46:be:6f:b6:b4:0c:58:a1:6c:f9:fc:24:c1:
d6:c9:ff:a6:3e:68:0a:0f:84:23:c6:e7:d1:08:9e:12:55:e2:
5a:4d:b6:ea:ee:49:cb:04:20:fb:5f:9f:2a:32:d0:cf:3e:62:
3d:5e:fe:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtsSRLxtVd4vCMm+tHwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk
YWM3ODQwHhcNMjUxMTExMDQwMDUyWhcNMjUxMTEyMDQwMDUyWjAzMTEwLwYDVQQD
EygyMGY5NjZkNTE0ODU3NjM3OGUwMzYwNTM5MGNmMTQ3MjRmYTRjNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLvAprUP+yfqttVuvtqQ1mvVy9PJ
WEiTiQgloMJU32hkrSxNAH2i71YbFpRY7eFOcdWaDKBAZtku2Odn2DTUJVOBykT3
+dQaD3oWl3A3WQzTCvB7nDKgP7b7Pn2kACoNZlzcRC2aCTN8FA+AAWSobgtTIRIy
d0RfLaITCkuG6eUeGCarmgc3cu0im0Xltq/VgmnpFeHKKSs8qk9guf2CMWD10Jiw
SH302scrF8quk6tnLpLiYpXtNvM5Jv4wneItsgO+1L7RJGbH3GZQYUPYXXeN6ix3
yS44OI8LevMjskcyyxBZ6SfuAo8v2XJ3qZxoo0JJUlEvPvda+BgBFv3S7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCD5ZtUUhXY3jgNgU5DPFHJPpMZkMB8GA1UdIwQY
MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt
YWYzMzRhMGExZTkzLzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz
LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkUzN+GQ
/t+XydyT5gc5GxRi5zwqhMfxIoYXzf9zbzGKf+SRrjKExHt0LQH43UlnxRUGHzh4
XhgCLHWWMl40thVe3IrzWEfq5ahIygVFG8ldeTgj9buCaRxAqWLPVwmKQbfEA/fj
o4/zcfSOUtWL3M7d+nR7N4ZrfCaYG8oKpnxEMbxkg+COAG3Lfle+iYO7F3hr2N7n
ywMSiyRxGndYU9O5jfkQo+LAp4k9zD+D/XBqf/fj4xqLfN4Fla4fhKyzFR97anzs
dkXWI7JGvm+2tAxYoWz5/CTB1sn/pj5oCg+EI8bn0QieElXiWk226u5JywQg+1+f
KjLQzz5iPV7+RQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:44 2025 by rpki-client