Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: 3eCXUfZnyWYdkk9LPskT1A8rcAZ+Yk3P7g/7NGaQMyM=
Subject key identifier: F1:9A:69:F2:90:93:38:6B:71:6E:A4:40:D8:B2:14:27:19:8E:47:C4
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019644B1C31A7F90789E252CAF5CC8360727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0DB5
Signing time: Thu 17 Apr 2025 17:00:22 +0000
Manifest this update: Thu 17 Apr 2025 17:00:22 +0000
Manifest next update: Fri 18 Apr 2025 17:00:22 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: aD1fehjA4PO5QRKotbjdbRO4YTW40A4JKjyHNVbKmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:c3:1a:7f:90:78:9e:25:2c:af:5c:c8:36:07:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Apr 17 17:00:22 2025 GMT
Not After : Apr 18 17:00:22 2025 GMT
Subject: CN=f19a69f29093386b716ea440d8b21427198e47c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:4d:7a:60:ac:1c:b4:1c:ec:fa:c8:da:5d:
24:96:73:72:c5:27:02:b9:23:4e:45:ad:ea:ef:aa:
f5:8a:b9:77:ff:9c:e3:ff:29:7f:1e:25:66:5a:94:
54:bc:36:0b:de:e7:d5:c7:d2:b6:95:22:c9:07:4e:
27:8a:b3:d6:c6:8e:a1:c9:88:f7:19:a0:e1:f2:2d:
bd:5d:7e:f5:58:de:0e:62:3a:85:70:ed:61:1c:da:
2c:21:31:86:2d:60:ba:b2:c3:3d:0f:19:03:c7:da:
24:d5:d1:f6:60:52:82:c4:25:d9:8b:4d:8e:04:16:
31:19:d7:8c:e0:e2:ac:a1:f9:0e:37:a6:07:56:5c:
f9:51:31:18:98:16:16:55:1d:5d:ec:b4:17:4c:a4:
41:44:cf:7b:0a:95:9a:79:e0:58:0e:2f:1b:89:03:
9d:c2:dc:14:ad:fa:ee:94:ab:77:ee:92:53:f0:18:
ae:78:8d:20:a0:db:a2:17:bd:3c:96:30:41:72:13:
18:46:91:a4:bc:43:41:76:27:72:ee:17:ea:45:29:
19:ad:73:f3:cd:35:69:6b:0d:f9:c8:4a:3d:67:2a:
54:24:98:a5:24:47:f0:5a:dd:45:6a:41:a9:6c:db:
e5:ee:51:58:b7:44:79:aa:bf:45:9c:87:de:92:8a:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9A:69:F2:90:93:38:6B:71:6E:A4:40:D8:B2:14:27:19:8E:47:C4
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:c7:0b:b9:5e:3a:38:85:e8:3c:c3:01:36:a9:b9:3a:2f:
9b:7d:03:63:88:e5:3e:96:9d:bf:ea:eb:f9:35:b8:3e:e2:c6:
70:73:51:42:22:18:29:c9:71:91:1a:68:dd:de:89:6e:00:6c:
06:67:47:a3:bf:48:f4:d0:32:4e:35:fa:bc:c9:84:e8:06:74:
18:74:d0:eb:40:47:5e:72:73:c2:11:76:ba:c2:c6:76:33:a0:
9b:48:cd:5e:de:ed:3d:16:9f:98:fd:e0:0b:5c:e2:9a:c7:ec:
b9:c3:0b:01:c3:5a:99:0b:64:ea:74:b5:2f:51:62:03:9c:20:
1c:ab:bc:c1:52:8f:20:e9:c0:80:5d:b2:28:32:0c:ed:82:0e:
b4:e3:af:fd:1a:31:1b:bc:e8:a5:b7:51:9b:72:2f:e2:35:55:
3f:cc:1d:b5:19:66:76:80:25:5f:d0:8a:42:d7:63:27:51:f7:
33:1e:a3:91:d5:42:0f:b0:8a:db:32:d5:ed:4d:0d:fb:b8:76:
d2:35:55:d0:bd:5c:e6:48:38:03:8a:f5:d9:d5:43:a6:5c:78:
9c:b1:ab:da:f6:50:35:e4:e1:8b:5b:92:45:71:22:78:62:37:
92:99:4b:2a:7a:2f:3e:04:6b:3b:92:ea:ac:48:9a:e3:1f:84:
8b:32:77:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEscMaf5B4niUsr1zINgcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjUwNDE3MTcwMDIyWhcNMjUwNDE4MTcwMDIyWjAzMTEwLwYDVQQD
EyhmMTlhNjlmMjkwOTMzODZiNzE2ZWE0NDBkOGIyMTQyNzE5OGU0N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssBNemCsHLQc7PrI2l0klnNyxScC
uSNORa3q76r1irl3/5zj/yl/HiVmWpRUvDYL3ufVx9K2lSLJB04nirPWxo6hyYj3
GaDh8i29XX71WN4OYjqFcO1hHNosITGGLWC6ssM9DxkDx9ok1dH2YFKCxCXZi02O
BBYxGdeM4OKsofkON6YHVlz5UTEYmBYWVR1d7LQXTKRBRM97CpWaeeBYDi8biQOd
wtwUrfrulKt37pJT8BiueI0goNuiF708ljBBchMYRpGkvENBdidy7hfqRSkZrXPz
zTVpaw35yEo9ZypUJJilJEfwWt1FakGpbNvl7lFYt0R5qr9FnIfekopbzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGaafKQkzhrcW6kQNiyFCcZjkfEMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIXHC7le
OjiF6DzDATapuTovm30DY4jlPpadv+rr+TW4PuLGcHNRQiIYKclxkRpo3d6JbgBs
BmdHo79I9NAyTjX6vMmE6AZ0GHTQ60BHXnJzwhF2usLGdjOgm0jNXt7tPRafmP3g
C1zimsfsucMLAcNamQtk6nS1L1FiA5wgHKu8wVKPIOnAgF2yKDIM7YIOtOOv/Rox
G7zopbdRm3Iv4jVVP8wdtRlmdoAlX9CKQtdjJ1H3Mx6jkdVCD7CK2zLV7U0N+7h2
0jVV0L1c5kg4A4r12dVDplx4nLGr2vZQNeThi1uSRXEieGI3kplLKnovPgRrO5Lq
rEia4x+EizJ3dw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:43 2025 by rpki-client