Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: MxmhyCyyzP/bfoyAfkE1i4Cg0EgHUNYIEofRteIAdMA=
Subject key identifier: 5F:DA:FC:B9:91:EC:FC:CC:6F:18:7C:8C:61:59:A9:5F:54:5C:16:D7
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 0197B77CA87BB0D3629D7AF52E1EB4D095B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0CC5
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: 8rB/BckF/6geHCL2yyR9XY7kpCYYnVBORi5OKW+pCmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a8:7b:b0:d3:62:9d:7a:f5:2e:1e:b4:d0:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=5fdafcb991ecfccc6f187c8c6159a95f545c16d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:55:59:9d:16:e8:0a:3a:a0:f4:26:18:35:
7a:99:ef:b0:de:63:ca:15:55:78:f9:88:11:4a:b7:
83:da:09:03:1c:c2:59:c5:6d:d8:96:88:a2:f8:eb:
73:29:9e:88:26:a3:16:a9:48:49:46:74:d1:95:60:
6b:0c:48:b8:ea:b3:8b:c6:68:3f:e0:45:d2:cf:07:
df:70:27:04:fe:46:97:f5:6b:3a:64:2f:91:30:3d:
0f:22:e4:24:c3:86:a1:bc:e2:fd:df:78:52:59:78:
57:05:76:9f:62:5a:d5:36:be:b2:ca:f8:83:c6:ef:
ee:fd:d6:9d:fd:f6:d6:54:b5:36:2c:de:2e:f5:82:
0a:64:8c:fd:95:6f:50:48:e3:86:6e:12:05:ea:a2:
e1:9c:ed:64:5d:05:38:c6:52:92:b3:55:d3:d7:96:
40:c8:90:f0:fa:33:0a:e6:7c:02:60:96:02:68:47:
ee:dd:c0:38:e2:ed:2f:fb:59:36:64:ef:a7:72:d4:
1b:82:ad:1b:9b:6f:39:9d:14:5f:4c:d6:50:36:cb:
f5:e7:01:35:32:f1:03:32:01:16:76:c9:4e:9a:9d:
0c:28:e3:d4:cf:8f:51:f7:5d:2d:02:d0:4c:6a:43:
48:c1:18:9e:26:8b:ba:d9:b3:ab:a2:24:15:95:53:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:FC:B9:91:EC:FC:CC:6F:18:7C:8C:61:59:A9:5F:54:5C:16:D7
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:70:8b:c6:b5:83:ba:8f:8e:52:58:01:e0:3b:ea:3a:d9:35:
df:c1:9c:73:9c:df:34:62:3a:61:9b:a5:f5:55:7d:9e:8d:a0:
08:59:bd:17:7f:72:ad:d9:1e:93:16:90:5a:61:b9:d0:8b:29:
a9:c8:3f:46:50:a1:7d:79:61:da:ae:6d:6c:cc:0e:48:b6:8d:
d4:ec:66:a9:28:3e:f5:b4:32:76:eb:41:b0:f7:18:43:3e:c9:
a8:ec:cb:1b:9a:8c:78:34:e3:c1:8c:62:d4:35:02:8f:8d:4d:
48:7a:f3:92:98:7d:3a:4a:c3:d9:5c:46:60:ee:c4:a4:dc:21:
b5:cd:2b:12:36:52:17:bc:03:ac:af:63:aa:8c:45:b6:2e:76:
76:b1:1a:79:b8:f7:b9:66:45:f1:44:3e:f8:5a:d2:df:2b:d0:
37:36:3e:86:89:ca:9e:f5:37:4f:6d:1b:00:f8:9b:2a:81:15:
dc:95:dd:76:87:a1:b3:d9:c2:8a:5a:48:c1:19:0f:8a:1b:78:
70:38:04:e8:4d:fa:f3:0e:53:32:e1:e0:f1:0a:d4:dc:21:f7:
05:24:8c:6c:b6:93:ed:f0:1e:46:3c:7a:c5:9d:df:04:c6:67:
aa:27:b5:3b:f6:f1:e0:7a:d9:8e:85:68:7d:5c:06:14:96:4c:
64:b1:80:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKh7sNNinXr1Lh600JWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy
MzBmMTQwHhcNMjUwNjI4MTcwMTI5WhcNMjUwNjI5MTcwMTI5WjAzMTEwLwYDVQQD
Eyg1ZmRhZmNiOTkxZWNmY2NjNmYxODdjOGM2MTU5YTk1ZjU0NWMxNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMdVWZ0W6Ao6oPQmGDV6me+w3mPK
FVV4+YgRSreD2gkDHMJZxW3Yloii+OtzKZ6IJqMWqUhJRnTRlWBrDEi46rOLxmg/
4EXSzwffcCcE/kaX9Ws6ZC+RMD0PIuQkw4ahvOL933hSWXhXBXafYlrVNr6yyviD
xu/u/dad/fbWVLU2LN4u9YIKZIz9lW9QSOOGbhIF6qLhnO1kXQU4xlKSs1XT15ZA
yJDw+jMK5nwCYJYCaEfu3cA44u0v+1k2ZO+nctQbgq0bm285nRRfTNZQNsv15wE1
MvEDMgEWdslOmp0MKOPUz49R910tAtBMakNIwRieJou62bOroiQVlVMM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/a/LmR7PzMbxh8jGFZqV9UXBbXMB8GA1UdIwQY
MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt
MGQ4ZmNlM2ViZmJiLzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi
LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXCLxrWD
uo+OUlgB4DvqOtk138Gcc5zfNGI6YZul9VV9no2gCFm9F39yrdkekxaQWmG50Isp
qcg/RlChfXlh2q5tbMwOSLaN1OxmqSg+9bQydutBsPcYQz7JqOzLG5qMeDTjwYxi
1DUCj41NSHrzkph9OkrD2VxGYO7EpNwhtc0rEjZSF7wDrK9jqoxFti52drEaebj3
uWZF8UQ++FrS3yvQNzY+honKnvU3T20bAPibKoEV3JXddoehs9nCilpIwRkPiht4
cDgE6E368w5TMuHg8QrU3CH3BSSMbLaT7fAeRjx6xZ3fBMZnqie1O/bx4HrZjoVo
fVwGFJZMZLGAWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:58 2025 by rpki-client