Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: /1QjXzlYFikJxUdtQ1gmtwrAb+JiABxu0YgqkDgfUZE=
Subject key identifier: DF:59:4B:CF:34:81:D5:9B:96:EA:B7:63:28:BE:67:30:FA:79:A1:04
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01974B566D1CC6AAAB8DC3B72FA8CBD25BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0C8D
Signing time: Sat 07 Jun 2025 17:00:44 +0000
Manifest this update: Sat 07 Jun 2025 17:00:44 +0000
Manifest next update: Sun 08 Jun 2025 17:00:44 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: aH24MNOWzPEwFNL+scyCLx42yeAP+lTf5E5JhSv8MFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:6d:1c:c6:aa:ab:8d:c3:b7:2f:a8:cb:d2:5b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Jun 7 17:00:44 2025 GMT
Not After : Jun 8 17:00:44 2025 GMT
Subject: CN=df594bcf3481d59b96eab76328be6730fa79a104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:21:41:56:b9:2a:71:e3:73:ae:bd:9d:2b:
f1:b0:be:a9:d2:f6:d1:a1:b9:22:1d:cb:de:36:78:
bf:49:c9:71:9b:0a:3b:66:7d:46:47:ad:78:08:dd:
e8:2f:e5:3f:92:49:67:e3:a2:31:5a:02:e2:60:2e:
1d:9e:38:33:45:ed:49:c1:08:cd:f2:5c:a0:76:b3:
be:97:2f:5c:28:31:b3:da:dd:76:60:03:05:3c:2e:
eb:4c:b3:82:ac:98:2f:c2:fb:1b:56:5e:fc:e8:eb:
8a:22:55:f5:3c:de:61:ff:ad:e8:db:84:d7:85:5d:
ba:2a:ab:b5:e5:1f:9b:43:3c:d5:19:a6:7f:1b:ad:
d5:a5:da:78:20:2f:47:67:a7:03:d3:c8:f0:e7:30:
4b:0d:b2:0c:ba:44:e7:fb:22:3f:08:21:e6:05:04:
10:75:2a:5b:af:5c:58:09:e8:df:ac:9c:aa:dd:10:
f3:3a:25:e5:74:d4:b7:af:2a:85:d9:9e:7c:da:53:
4b:be:bc:2a:90:8a:9f:8f:f5:c6:0d:ba:c3:06:fc:
89:df:54:98:e9:76:64:2a:39:40:8a:6b:c0:ac:62:
4b:48:c9:4d:56:e6:70:9e:84:db:49:c5:b0:1e:25:
85:63:79:aa:35:06:16:7f:c7:58:cc:5c:98:41:14:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:4B:CF:34:81:D5:9B:96:EA:B7:63:28:BE:67:30:FA:79:A1:04
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fc:5a:ea:d4:3e:b9:ce:7c:30:64:f2:fa:d6:c2:99:25:45:
95:c8:d7:dc:b9:62:74:57:44:52:21:ab:28:a2:8e:0e:59:8b:
2e:84:d5:05:d3:32:c4:1a:14:ab:6f:13:03:d1:63:ce:40:4b:
57:6d:4c:4c:a5:33:14:62:5c:33:6a:af:30:1f:31:0e:4a:d7:
fd:74:04:d9:53:8a:aa:da:12:11:95:11:00:bd:a5:3a:a4:35:
c5:63:f6:be:a9:ed:4d:44:13:70:e2:a8:71:7c:85:f6:10:ce:
cb:e7:23:8c:36:9a:2e:b8:e1:27:1a:90:40:61:4f:d2:39:7b:
c4:24:fa:7a:e6:51:cf:04:02:0d:74:d7:cd:1f:0d:e7:38:64:
78:8a:f0:f4:68:a4:cf:53:7d:80:2a:a8:6b:77:b0:b1:ba:5d:
35:79:ec:d5:7a:67:99:99:e3:3a:e6:11:e4:4d:b5:53:80:9b:
94:21:f6:24:fa:b9:d9:91:2a:68:dc:ec:2a:63:1a:e3:5b:aa:
47:e7:0e:08:18:18:4f:72:f0:ec:7c:f4:ba:9f:9f:6f:2d:a3:
11:6d:e8:bd:c7:36:ca:8b:f5:52:ae:16:1c:fc:ae:91:de:1d:
d5:e3:bd:75:f8:9d:03:af:e6:45:5d:86:25:70:63:66:e5:0e:
46:fd:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:46:59 2025 by rpki-client