Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: aGhM/BBqZPyU0vTZjDLvudV1MlNVBJjcTNgoNVF+1mU=
Subject key identifier: A8:3E:DD:3F:84:7A:B9:EF:FA:E5:DF:19:C4:0A:AD:40:98:ED:C5:A7
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 0197477976B83F37EC0A40E26EA68FB12F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0E3B
Signing time: Fri 06 Jun 2025 23:00:31 +0000
Manifest this update: Fri 06 Jun 2025 23:00:31 +0000
Manifest next update: Sat 07 Jun 2025 23:00:31 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: crfdI6116AXy+TUAM9yoRIS941fAkYXcSB6qwvUi+a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:76:b8:3f:37:ec:0a:40:e2:6e:a6:8f:b1:2f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Jun 6 23:00:31 2025 GMT
Not After : Jun 7 23:00:31 2025 GMT
Subject: CN=a83edd3f847ab9effae5df19c40aad4098edc5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:ef:43:11:c4:f2:c5:94:a3:36:d3:fb:07:
67:68:de:ca:60:cd:f5:c1:16:fb:0f:e0:58:36:38:
c9:31:43:b7:9c:56:fb:83:87:c4:c0:e0:c8:af:53:
67:19:27:a4:c4:97:20:8e:a0:c3:dd:33:30:f8:15:
80:42:5c:e0:19:c8:6b:12:65:75:12:96:81:9a:bc:
02:d8:d0:04:46:15:25:6b:e9:11:5e:e1:f0:4c:09:
b2:87:ba:04:aa:65:6e:04:fc:7a:6f:ff:47:00:18:
cc:af:2e:36:0f:be:a4:e3:aa:62:48:e7:b5:dc:4b:
81:a3:d4:45:44:ed:b5:64:84:22:d4:dd:36:4a:be:
55:42:bd:9a:ad:63:c2:27:bd:03:26:a0:f7:45:a3:
cd:66:57:c0:fa:d7:56:3a:aa:dc:fc:29:ec:e8:96:
0a:b8:52:49:c5:56:0b:42:5d:d9:65:d2:2b:d0:9f:
11:57:1a:ec:cc:30:07:60:58:f8:5d:b1:ce:3b:01:
5a:5b:20:38:2f:1b:ec:0b:ef:d9:a1:3e:1e:4d:b3:
fc:7e:b5:3b:44:7f:cc:f5:db:00:ab:64:4f:5e:dc:
49:f4:57:ae:e8:64:8d:af:6d:16:35:13:42:58:e0:
cc:4a:15:2d:3a:27:51:e5:2a:80:fb:af:47:42:5a:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3E:DD:3F:84:7A:B9:EF:FA:E5:DF:19:C4:0A:AD:40:98:ED:C5:A7
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:de:f6:a3:cb:6b:d3:b5:6e:f5:b7:b1:a4:6e:2b:75:59:2d:
21:cc:dd:0e:4e:a7:df:e7:35:bc:6f:65:4e:c9:ed:60:83:8b:
bb:59:ee:13:4f:fc:d3:d7:8f:e1:64:ce:55:aa:39:da:12:94:
a1:7a:b8:96:c6:d0:65:f5:05:97:12:03:ea:23:9d:d0:94:3c:
4a:80:0c:5a:10:9e:89:66:42:4c:c0:fa:91:0a:e1:db:37:ce:
80:80:86:42:63:37:c8:1b:10:3d:f9:17:50:d3:71:76:8b:cd:
17:a6:eb:32:f5:1d:9d:85:9f:55:7f:66:01:c9:30:fe:07:0a:
b0:98:8f:8a:02:c4:bb:a9:73:97:ca:a9:af:7a:7d:c8:bb:05:
46:17:0c:b1:ec:0c:63:ec:de:30:ef:ee:c4:fe:de:c5:de:95:
f1:b6:9e:1b:24:55:bd:f7:21:96:90:44:11:a6:26:a6:85:da:
c4:c6:9a:3b:8f:4e:d9:e4:f6:69:91:d3:c1:c6:21:9f:75:35:
7e:7f:5c:98:ac:32:64:c2:e6:10:20:f2:5a:89:b9:1b:5e:70:
b9:30:92:c2:a1:ee:f5:d7:16:33:af:8c:32:fc:2e:b1:8e:a2:
c6:b9:2d:c5:58:a1:d2:a4:d1:14:ac:98:d0:fe:f6:57:c9:c7:
de:8a:9b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:30 2025 by rpki-client