Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: JaBsItQ6jA0C2jLvQJgYCoNGfAuQSxfOKasU6igAVzs=
Subject key identifier: CA:22:27:74:04:6C:10:0A:45:5B:5E:A8:B9:5D:DB:FA:35:A2:9A:7C
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 0198D54E1D366D6220FDFA06A00C159608F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0D59
Signing time: Sat 23 Aug 2025 05:02:02 +0000
Manifest this update: Sat 23 Aug 2025 05:02:02 +0000
Manifest next update: Sun 24 Aug 2025 05:02:02 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: LMzuM+6u5GzOOANJMailpwvY+UM2AT6R0w2fBL9kaTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1d:36:6d:62:20:fd:fa:06:a0:0c:15:96:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Aug 23 05:02:02 2025 GMT
Not After : Aug 24 05:02:02 2025 GMT
Subject: CN=ca222774046c100a455b5ea8b95ddbfa35a29a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:85:3c:46:8f:4b:32:2e:f5:3e:0f:98:57:
0f:d6:c8:ac:3b:7f:01:b4:73:00:6e:23:06:59:90:
07:0e:67:f5:0a:28:bb:7b:6b:b1:ad:62:0b:86:d7:
ce:7e:5e:c6:b4:63:50:9c:ba:21:ab:e8:51:75:90:
e8:13:2b:bb:d2:2f:4c:a8:37:32:37:b2:5e:28:6a:
29:6d:a6:10:c7:09:5b:0a:7f:af:45:ba:cb:2a:87:
39:67:96:43:99:3f:36:fc:03:7c:20:00:47:5f:f8:
8a:c6:66:0c:10:9a:34:ac:e2:da:92:52:55:87:75:
ba:97:3b:f5:a2:69:f3:5f:aa:10:0a:ae:1b:0f:1a:
f8:b6:37:e9:36:e5:1e:c8:18:7d:ae:89:85:af:e6:
46:a5:5a:87:99:1d:5a:e6:58:68:8a:5b:50:69:20:
4a:7f:ea:c3:a6:47:4b:f5:15:5d:2b:95:b2:a4:fd:
af:10:3e:4c:92:19:df:f3:b6:7e:4c:ad:3a:e8:59:
ac:20:72:a2:88:f1:20:6f:83:1c:f4:58:52:8f:ff:
a9:a5:0e:30:4a:12:11:3f:97:0f:be:72:62:06:ff:
26:17:c1:54:87:82:7e:6a:0b:4b:3a:18:fd:32:1a:
12:59:d9:6b:15:f4:e4:b5:b7:ad:65:1e:70:43:3b:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:27:74:04:6C:10:0A:45:5B:5E:A8:B9:5D:DB:FA:35:A2:9A:7C
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:66:53:00:9e:da:f0:0d:22:45:10:ae:2c:5a:81:75:e1:5e:
cd:9c:e3:b8:e6:10:24:7f:6f:35:e4:ac:3b:7d:63:48:ad:b9:
d8:f4:dd:24:82:3e:df:2e:00:50:95:ac:79:b7:2b:47:80:e1:
54:10:c4:1a:e5:e1:57:b2:c2:54:b9:0f:8a:d1:f0:bb:67:8b:
75:ad:e2:c6:1b:dd:75:78:43:50:05:d0:fb:1f:c9:05:0e:4b:
ab:46:af:7d:e2:3f:56:09:76:40:fe:4a:8c:cb:bb:95:64:92:
61:cb:99:47:0c:37:8b:57:8e:59:c3:63:3b:bb:e7:b5:c7:d5:
fc:11:b2:86:26:a4:77:bc:d1:69:b8:57:1c:09:b0:b9:d1:47:
61:a5:7c:81:17:a2:de:cb:a5:fa:da:56:1b:b1:bc:c9:c4:e2:
15:87:d6:99:ee:f3:43:07:ac:38:af:e2:19:67:ca:8c:8c:63:
4a:78:5c:08:e8:5b:88:2a:93:e5:f8:d1:4b:5a:8f:63:b8:d0:
72:61:77:ae:11:d6:c0:c4:94:35:83:fc:b9:c5:16:0f:0f:0f:
fb:54:93:ad:99:a7:6f:0b:eb:f9:8d:8f:4a:a3:cd:c3:b9:f3:
3d:6e:ab:cb:02:4b:28:4c:75:51:0f:0c:91:9b:73:11:10:dd:
4f:b5:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:56 2025 by rpki-client