Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: KHcruo22TfTcFCa876RnUYnfDFiwCePxeAVJ2bvc8cQ=
Subject key identifier: D2:66:35:66:90:74:4F:2F:6C:83:9B:46:E9:F6:9F:F2:AF:0F:44:C3
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 0196BA7F398F25B6EC2EBC0F6C937AB04D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0DF2
Signing time: Sat 10 May 2025 14:00:22 +0000
Manifest this update: Sat 10 May 2025 14:00:22 +0000
Manifest next update: Sun 11 May 2025 14:00:22 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: L4jvEQbiNCH1qen8WnbKNahkDHcjXO+hWtprp3ZBHog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:39:8f:25:b6:ec:2e:bc:0f:6c:93:7a:b0:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: May 10 14:00:22 2025 GMT
Not After : May 11 14:00:22 2025 GMT
Subject: CN=d266356690744f2f6c839b46e9f69ff2af0f44c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:f4:77:e6:92:3e:8b:d1:90:e9:d0:5d:76:
4d:53:94:e3:7a:0a:76:26:e4:3b:8e:3d:45:67:f0:
be:09:c8:ca:0c:84:6d:8a:48:19:78:a3:38:48:87:
29:61:63:42:26:86:d3:f8:55:9f:aa:8b:32:be:08:
62:4f:ac:7f:9d:70:7f:a1:ee:6f:66:15:ae:fd:f8:
a4:3a:89:ef:88:d3:b1:e6:2d:57:00:7e:70:d9:24:
70:32:98:32:c4:de:05:c3:88:84:90:8c:5d:c3:07:
fe:15:ed:bd:5a:73:3c:63:32:86:dd:8f:50:ba:70:
c8:40:ce:76:bf:3b:0a:b4:a9:d4:c3:a3:26:8f:b7:
be:a5:46:a0:0a:b0:18:4b:61:93:16:57:ef:07:ca:
e9:d3:a4:af:cf:1e:b2:8e:c9:e3:43:c4:28:02:77:
4e:ab:12:69:cb:d9:99:3e:f9:08:d0:89:74:7d:8f:
6c:15:b3:1c:8d:10:da:a7:3d:4c:40:57:2b:2f:88:
03:fb:0c:8f:a9:11:dd:df:3e:f8:bb:4b:b3:ba:21:
fd:c7:64:3e:89:dd:4e:97:bb:4b:71:73:f2:45:f3:
f0:b3:cc:91:7c:1f:b6:2d:8c:0b:25:d6:8d:a3:ca:
85:7e:db:bc:de:e8:ff:38:40:ae:c4:41:2c:81:2a:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:66:35:66:90:74:4F:2F:6C:83:9B:46:E9:F6:9F:F2:AF:0F:44:C3
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:83:f8:f6:7d:6a:04:c1:31:99:e7:9b:3f:9a:45:14:27:8f:
dd:12:5b:aa:53:c8:e1:84:4e:f6:3d:bf:8e:d3:69:69:b1:e6:
f1:4a:32:04:37:4f:8c:ff:63:72:38:3d:0a:3e:d9:ed:f1:8e:
3d:87:86:c8:1c:a4:d1:7b:ef:c0:3f:a5:27:ff:04:e1:0d:42:
7f:8e:b3:4a:b7:24:36:ab:28:8f:9e:0a:9e:a0:e4:7d:0d:2c:
f9:0e:18:d1:52:00:f9:aa:10:8b:b9:de:55:15:ca:0f:7d:c6:
12:1d:be:3d:04:b7:52:4d:74:38:d4:da:ef:11:ea:42:09:9b:
fb:ec:6f:30:c9:ad:b9:68:46:8b:74:4f:3e:3b:c5:1a:77:87:
4c:37:4d:b6:48:58:93:9f:6f:d7:ba:42:0c:73:86:45:cf:4a:
c7:28:ae:a4:cc:71:bf:b5:aa:5d:e2:1f:d5:b9:8a:25:69:e8:
88:17:5a:5f:59:4a:f8:59:1a:fc:36:d1:90:ac:e8:a7:43:83:
c2:f3:26:eb:74:cb:de:87:cc:88:00:70:0d:e3:29:d8:82:7b:
ee:ac:7d:8d:86:ba:63:40:0f:83:7a:20:c1:a9:5e:00:d0:23:
c3:11:5d:e1:be:d2:ff:3c:8c:49:c3:96:ac:fb:7f:fc:9b:2d:
f6:67:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:10:13 2025 by rpki-client