Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: CkMP9b54hkjhmqqSx494RGQqjcpA5g2Ua6WJcr4cluI=
Subject key identifier: D2:64:82:4A:D0:9C:16:97:12:F0:77:A7:CC:83:C2:59:45:87:EE:8A
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 0199FCC6506AE86B0C8B021361F690071908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0DF2
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: s/ASrvf61csJs0IlaqUiogrN8xt5jpvfP3c4MDT6OMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:50:6a:e8:6b:0c:8b:02:13:61:f6:90:07:19:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=d264824ad09c169712f077a7cc83c2594587ee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:bd:86:fc:e8:47:79:ca:28:42:c1:8e:f2:
bc:80:97:4b:62:29:e2:62:2d:72:73:91:cd:14:d3:
b6:48:43:e1:ad:0c:ad:ec:c7:3e:a9:1d:c2:6a:23:
92:04:87:54:5b:66:5d:8f:14:ec:e3:62:11:c5:60:
16:31:81:02:1f:f3:59:92:44:80:6c:63:af:0f:7d:
1e:09:b7:82:a1:bf:e4:2d:d5:c0:8f:44:30:c5:e2:
e5:6d:e6:5f:65:c1:d3:9d:12:88:39:54:33:ea:d1:
8e:cd:b0:4e:8b:7c:be:0a:4d:80:93:d9:e2:ee:55:
2a:af:4d:5b:22:88:9c:77:d5:c7:3c:4b:96:8c:e6:
fd:29:76:f0:17:1f:9f:ff:99:9d:0d:87:b9:01:6a:
78:7d:f8:7d:a2:48:4d:06:3a:a4:4d:68:be:9c:71:
22:0d:7f:03:29:a1:56:ac:a3:06:0b:55:c2:68:51:
25:24:25:21:8c:f8:80:a8:96:4a:5f:12:f6:21:77:
53:79:b4:c5:1c:67:32:3f:ee:a8:4a:d7:ca:d7:b3:
cd:ec:80:72:57:0f:4c:e9:61:0f:d1:9b:75:8f:b1:
17:ed:51:06:a1:06:b3:53:6f:7f:f4:ce:75:7e:60:
36:36:7c:f4:35:cb:61:04:24:a2:15:f3:0d:13:bf:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:82:4A:D0:9C:16:97:12:F0:77:A7:CC:83:C2:59:45:87:EE:8A
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f8:2b:98:26:ab:5f:b0:a6:b9:10:c2:67:3e:ab:db:d5:51:
d7:6b:9c:7b:84:a0:6f:27:cb:7f:df:84:5e:54:6d:36:ee:59:
6b:a1:33:3a:e3:a6:f9:7d:2a:30:7e:48:f4:22:91:3d:14:4b:
b5:3f:72:42:95:fd:2d:5e:e0:c9:75:72:fb:d7:db:d9:6e:8e:
79:d4:cb:3b:9b:b9:fe:4a:72:c2:e0:e3:d7:17:82:6c:e9:08:
84:a0:a1:e8:2f:d4:fa:a5:99:5f:38:51:f4:ed:e3:da:0f:7c:
48:41:d6:c0:ec:6e:2e:53:2a:5c:50:1d:99:87:7a:54:07:0f:
b6:99:27:e8:81:14:f5:48:4c:39:e6:27:25:a7:ae:5a:33:5d:
86:83:65:01:50:f2:b7:12:18:64:a3:f2:a2:17:5c:dd:a1:a8:
6f:a4:c2:ac:8e:7a:85:2a:86:68:21:45:bc:24:81:dd:8c:d2:
6b:38:7e:67:31:2a:e5:7b:8e:d2:5d:1f:3c:1c:c6:ba:0c:55:
fa:1b:d0:5f:ad:84:6e:ed:a3:09:0b:ed:60:23:68:ea:5f:a1:
6a:e6:72:21:6a:a6:3f:96:a0:b2:b4:38:4b:7b:67:6d:40:c1:
93:00:80:19:65:64:3a:9e:9a:c9:22:cb:e2:67:7e:78:75:b4:
a9:b1:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:07 2025 by rpki-client