Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: ++p6Pox+5YpJ+D2CD31xMg2p2zPRps9ZiNqEtpzG5KI=
Subject key identifier: 4D:BB:41:25:8C:84:CB:1D:AC:3E:AB:CA:25:42:21:BF:59:7E:60:36
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019A1BABAB54E96895D6A98B3342825973AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0FB2
Signing time: Sat 25 Oct 2025 14:00:26 +0000
Manifest this update: Sat 25 Oct 2025 14:00:26 +0000
Manifest next update: Sun 26 Oct 2025 14:00:26 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: K4/aBR5WFCkmshNlQIBiRtLfBYgmahbroZlY3lRMEIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:ab:54:e9:68:95:d6:a9:8b:33:42:82:59:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Oct 25 14:00:26 2025 GMT
Not After : Oct 26 14:00:26 2025 GMT
Subject: CN=4dbb41258c84cb1dac3eabca254221bf597e6036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:07:61:85:c9:61:e4:a2:e8:7e:7b:e1:92:
0c:32:b9:76:62:b1:13:be:23:0d:a5:57:33:34:d5:
ea:69:5e:4d:11:fd:60:bc:59:bd:6c:ce:11:f3:3d:
3b:7d:48:60:bf:f7:3c:12:10:7c:ec:b8:b1:23:a8:
2e:22:0d:37:0b:e0:1c:24:e4:e5:bd:b3:63:b8:22:
4a:3e:3a:14:02:2d:aa:a1:4b:7e:89:c0:1c:8c:76:
08:5c:4f:18:22:6f:c1:15:00:ed:7a:48:01:74:ea:
15:d2:ec:cf:76:0b:b7:81:31:56:e2:25:1c:72:b2:
58:3b:32:bb:61:34:d8:23:8b:32:8f:83:92:00:08:
b2:1b:27:59:99:7b:3c:1a:76:42:08:74:2f:21:e3:
59:6f:12:ac:69:bd:33:0a:3b:60:3b:a6:d4:b9:4d:
72:1c:05:dc:42:00:7c:53:e1:0a:01:8b:e5:a3:48:
25:39:e0:58:10:19:5f:ed:0f:c0:3e:8b:3c:5e:af:
df:d7:98:a1:05:d1:91:59:cc:73:20:bc:4a:dd:a3:
71:53:0a:60:1f:b4:83:55:48:98:07:62:9e:20:9f:
bb:79:28:18:ae:ba:b6:31:c9:bf:e9:53:f4:6a:70:
78:e8:70:95:bd:d9:8b:b4:e8:3a:ff:ce:83:ba:68:
c4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:41:25:8C:84:CB:1D:AC:3E:AB:CA:25:42:21:BF:59:7E:60:36
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fa:5b:3c:9b:fd:6b:3f:b4:38:63:60:23:a8:22:03:2c:62:
b9:ce:4b:16:6f:75:55:23:b3:71:49:63:72:7c:23:85:36:ac:
f5:8d:7a:6a:30:d7:52:be:a3:b9:b3:9f:58:a2:e7:4e:f6:32:
7e:59:3a:67:6e:9b:df:ef:27:34:8f:c6:18:95:09:05:84:92:
5a:54:24:1a:75:d2:98:39:60:0b:f0:54:76:13:c8:99:c2:fd:
e9:18:99:d3:d1:8e:f2:f3:a6:e7:1d:06:f4:c8:52:62:8a:8f:
af:43:c3:65:6b:3b:24:5b:67:1b:7a:cb:2e:25:7e:ad:c6:16:
7d:91:3d:86:04:f7:8d:a7:9a:97:08:e9:8d:8d:48:6b:61:d8:
d1:16:38:b2:17:02:6c:b7:5a:8d:bf:0b:7b:d8:4b:0c:0e:fe:
10:8b:b9:32:16:99:5e:6c:1c:50:13:3a:2f:b9:ce:2e:19:df:
2c:ed:2c:08:ba:56:af:d8:a7:c4:9b:60:06:62:0c:6d:3e:45:
7f:51:09:29:65:cc:e8:b6:dd:c7:12:ca:ec:29:91:59:78:34:
6d:ab:e2:24:12:ec:0c:d2:d0:e6:1d:03:b2:a2:78:b1:f7:3b:
28:43:5b:6b:72:f2:0f:d9:44:ad:23:09:6d:b2:81:f1:56:70:
c8:7f:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:53:22 2025 by rpki-client