Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: mnxioqemlQ82mvBJCgnvpbPqYDPDRdrmfNBg8/OqaUI=
Subject key identifier: 7E:3D:91:D7:18:23:1B:B7:1D:D9:FD:D3:B7:69:4D:C0:85:8A:26:26
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 0199FCC66449EC37A11E71C16D58FEC7A6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0FA2
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: sBmbOPzJI54j+RvqdArIq4iKpq5gauYwThA2m3AG5C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:64:49:ec:37:a1:1e:71:c1:6d:58:fe:c7:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=7e3d91d718231bb71dd9fdd3b7694dc0858a2626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:6a:db:49:4f:c0:f5:aa:5d:be:74:4b:ca:
23:75:af:00:81:77:a5:24:28:0d:30:3c:8a:f2:fb:
42:85:61:bd:33:b7:fa:77:6e:c7:49:c8:54:f2:88:
63:cd:70:c6:4d:08:ee:59:04:54:74:a8:08:46:2a:
a3:58:8c:f2:99:cf:6b:b7:ef:e8:51:f6:a9:a2:44:
8f:6e:5d:31:0b:8c:cd:8b:fb:47:92:74:db:a7:c5:
1c:3d:b8:12:bc:90:0f:72:f2:dd:bf:07:2d:79:08:
40:88:1b:1b:b7:ee:6b:1f:26:63:85:10:c8:fd:58:
00:9c:cb:68:54:28:e7:70:3f:d8:54:e3:83:71:a5:
b7:dc:7b:f4:da:e8:1a:c6:bd:a6:13:f0:c6:9f:69:
31:de:81:d1:e5:a9:6d:5d:2c:39:66:ac:92:80:bc:
6e:74:4b:6e:d7:bd:47:53:97:86:93:10:cb:34:c4:
bd:34:cb:2c:e3:48:81:bf:d9:5d:50:e1:98:59:f3:
6b:23:0d:ca:57:a5:df:1a:3e:00:5e:4a:9f:a7:b0:
24:35:ae:cd:26:ec:b1:3e:e8:7b:a8:01:32:3f:de:
8a:96:99:8d:a1:06:02:78:58:c9:98:74:5f:3e:93:
bd:32:50:91:b8:ef:d4:fe:63:b5:8b:e2:03:f2:e0:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:91:D7:18:23:1B:B7:1D:D9:FD:D3:B7:69:4D:C0:85:8A:26:26
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:96:7b:0c:07:3f:75:e4:89:0b:f0:6b:2d:18:8f:1f:78:
d0:be:a2:db:55:c7:05:cc:72:58:ec:1d:6b:28:37:78:80:c0:
d0:d7:99:b7:13:a1:f1:8b:60:d8:68:8e:11:9d:ad:bf:01:0a:
e9:16:52:77:29:f5:27:23:06:b8:f8:70:34:b1:ac:1d:9d:c2:
24:70:56:0d:e7:3f:0e:fe:b3:69:8b:cb:e3:55:34:f7:a9:75:
8a:8c:a0:fc:f9:35:c6:0a:20:03:96:e6:f6:2c:98:ba:94:d7:
d6:a5:e9:99:c8:bb:58:af:94:e3:ec:41:68:cc:db:20:7d:65:
19:3f:4f:3f:13:f3:5f:89:61:6b:52:6a:22:c7:46:f2:3b:3b:
6c:bc:d2:34:50:d4:a6:f3:35:e3:a7:9d:d1:d0:c7:c5:98:e8:
bb:38:f4:37:da:9f:17:47:a8:35:38:fa:b4:77:c2:05:6f:af:
30:f9:59:05:a9:33:df:d2:dd:c7:06:bd:b8:f2:a6:c6:d3:08:
4e:6e:27:24:f6:7d:e8:d1:7a:1d:ba:d3:1b:e6:e8:70:a9:66:
a3:4d:38:f8:e1:2e:45:e8:5d:50:77:a5:5b:ff:5f:f6:03:94:
23:1d:f9:d4:e6:45:60:23:d7:8e:02:55:e9:1c:0f:a6:0a:0a:
5b:0c:e7:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xmRJ7DehHnHBbVj+x6a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjUxMDE5MTQwMTI0WhcNMjUxMDIwMTQwMTI0WjAzMTEwLwYDVQQD
Eyg3ZTNkOTFkNzE4MjMxYmI3MWRkOWZkZDNiNzY5NGRjMDg1OGEyNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJFq20lPwPWqXb50S8ojda8AgXel
JCgNMDyK8vtChWG9M7f6d27HSchU8ohjzXDGTQjuWQRUdKgIRiqjWIzymc9rt+/o
UfapokSPbl0xC4zNi/tHknTbp8UcPbgSvJAPcvLdvwcteQhAiBsbt+5rHyZjhRDI
/VgAnMtoVCjncD/YVOODcaW33Hv02ugaxr2mE/DGn2kx3oHR5altXSw5ZqySgLxu
dEtu171HU5eGkxDLNMS9NMss40iBv9ldUOGYWfNrIw3KV6XfGj4AXkqfp7AkNa7N
JuyxPuh7qAEyP96KlpmNoQYCeFjJmHRfPpO9MlCRuO/U/mO1i+ID8uBj6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH49kdcYIxu3Hdn907dpTcCFiiYmMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuuWewwH
P3XkiQvway0Yjx940L6i21XHBcxyWOwdayg3eIDA0NeZtxOh8Ytg2GiOEZ2tvwEK
6RZSdyn1JyMGuPhwNLGsHZ3CJHBWDec/Dv6zaYvL41U096l1ioyg/Pk1xgogA5bm
9iyYupTX1qXpmci7WK+U4+xBaMzbIH1lGT9PPxPzX4lha1JqIsdG8js7bLzSNFDU
pvM146ed0dDHxZjouzj0N9qfF0eoNTj6tHfCBW+vMPlZBakz39Ldxwa9uPKmxtMI
Tm4nJPZ96NF6HbrTG+bocKlmo004+OEuRehdUHelW/9f9gOUIx351OZFYCPXjgJV
6RwPpgoKWwzn0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:14 2025 by rpki-client