Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
File: jlexRHZCwU8RwEtkHPHY3orax4Q.mft (raw, json)
Hash identifier: fVryTRVUN8dTXEVHnLSWgKgeOVLQK8u3T+t8rOnoAaM=
Subject key identifier: CE:4D:CD:4A:79:30:BC:7A:4D:36:46:FB:66:71:FB:CB:11:6D:37:32
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 01974B8DB648E500748C90ABFC1CBCCDA678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
Manifest number: 1352
Signing time: Sat 07 Jun 2025 18:01:07 +0000
Manifest this update: Sat 07 Jun 2025 18:01:07 +0000
Manifest next update: Sun 08 Jun 2025 18:01:07 +0000
Files and hashes: 1: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (hash: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=)
2: jlexRHZCwU8RwEtkHPHY3orax4Q.crl (hash: wqFUtCe/zemjBmqpGG6S9XENRTsmzGbQcnA7zLZYK6M=)
3: rzln7F3S4gWdG-8SgH5kvCUJ4xI.roa (hash: oUmBkcDadINaUxLlpIH308aZUrK5RDWqrmdyK5/vDp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:b6:48:e5:00:74:8c:90:ab:fc:1c:bc:cd:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Jun 7 18:01:07 2025 GMT
Not After : Jun 8 18:01:07 2025 GMT
Subject: CN=ce4dcd4a7930bc7a4d3646fb6671fbcb116d3732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:c1:0c:58:6c:52:3e:89:d4:30:e1:9b:01:
6c:e9:53:a2:08:ed:34:08:5e:a9:b3:2d:4f:10:b4:
a9:98:09:75:7e:a0:d6:cf:aa:af:05:f7:a7:7b:82:
bc:1c:cc:9d:72:f5:bc:de:ae:e4:3a:d3:e3:ca:7e:
8d:93:19:62:92:d6:32:e1:89:95:5a:85:88:9b:32:
6d:f0:23:9d:a5:52:29:7d:38:d3:8b:ad:fd:68:89:
bd:19:8e:07:e9:34:0f:c7:25:45:f4:13:9d:15:ad:
2f:56:e8:8a:12:ba:ae:5e:fe:49:63:49:d6:c1:ec:
bf:1a:17:f8:ee:93:0f:31:ee:c9:d6:d3:90:ac:f2:
0d:60:a1:48:57:46:4b:06:59:2b:8b:ce:36:3a:e7:
6f:c5:58:38:09:7f:81:3e:cf:f7:63:f4:11:13:73:
de:b9:8b:95:b9:12:6e:7b:1e:94:54:68:e9:0f:b9:
00:a4:c0:6d:65:c7:6f:08:05:f7:a6:e6:4d:58:3d:
4f:0c:4d:34:94:82:4a:d9:53:9a:3b:2b:7a:7d:23:
b9:a7:1c:b7:8c:a2:33:70:9d:82:63:cf:06:54:a6:
5a:94:d2:85:2f:8f:83:1b:30:3c:b9:c6:13:b0:2e:
d0:34:ad:c5:16:08:83:97:4d:2f:08:d3:37:d6:d1:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4D:CD:4A:79:30:BC:7A:4D:36:46:FB:66:71:FB:CB:11:6D:37:32
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c2:74:e9:0f:ed:2d:f4:24:9a:d6:09:bf:69:e5:43:4e:c6:
5d:10:82:0d:5b:17:be:f9:46:d0:3d:ee:02:9d:5e:5d:05:78:
86:7a:5a:c4:ca:e6:fd:25:6b:ba:6c:f7:fa:59:11:c5:af:a4:
78:7d:22:ff:46:bb:2f:6d:fd:f6:3f:ea:75:01:f5:ea:14:67:
bb:33:e7:c4:d0:37:0b:c7:f2:c0:8a:33:26:16:a7:fa:e1:eb:
d8:63:dc:35:c6:a4:3e:8c:01:35:d3:7a:ea:87:f7:d7:65:57:
12:a2:f2:e5:ce:6a:4b:cb:58:fd:37:0e:e0:dd:0c:a9:b8:94:
17:bd:89:28:78:54:1f:4a:ab:15:8b:99:06:bb:4a:d6:d5:9e:
62:5c:cf:27:30:de:72:b1:a9:20:20:8f:15:9e:01:d3:7b:2b:
59:00:4f:32:5d:32:c8:a2:aa:39:62:47:12:d4:83:6b:e0:c6:
a2:5d:e2:b1:18:fd:76:13:79:c0:89:c9:cd:a8:c4:19:57:84:
47:77:57:26:13:f6:79:83:2a:cb:95:a6:8f:67:e2:cf:7f:ea:
d9:54:84:a5:a4:a8:cc:86:5a:72:1b:fb:0c:20:32:0b:be:ff:
d1:cb:8c:e3:d9:44:a2:9f:05:5b:a9:44:47:f2:2e:6a:4d:8c:
60:3c:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:56 2025 by rpki-client