Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: 334lvG3e1bl3oydz7Y+4kpU72QXm8xy/GU4URcjPJzE=
Subject key identifier: 26:CB:30:19:64:78:4C:84:2E:A3:53:68:1A:90:3E:80:53:31:84:D8
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 019A72935138A60B1EA069A6AA6570BB50E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0E2F
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: HJBbGJjaUA3BDJkNy5Ir9nVir9Ucg8ef4UB/ItxR0qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:51:38:a6:0b:1e:a0:69:a6:aa:65:70:bb:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=26cb301964784c842ea353681a903e80533184d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:44:8d:23:3b:41:54:bb:29:10:e3:f6:5b:
2a:27:8e:77:86:3f:99:ec:ec:d8:3f:06:72:7c:93:
8b:7d:26:89:88:3b:1a:fa:9a:26:ff:dd:47:85:f2:
a7:6f:bf:87:e1:9b:c8:e4:7d:99:c9:24:af:43:89:
31:54:14:c1:f6:7d:a6:68:38:aa:25:ed:ca:03:6b:
70:18:e5:0b:2e:5d:4e:a9:b9:d7:6c:50:20:ff:6a:
e5:ac:1a:09:0a:7f:6c:b6:d9:7e:bd:4d:ce:2b:8b:
87:a1:e5:5a:06:3a:9e:96:c2:23:e3:1e:ed:60:7a:
f8:1f:5f:f3:72:c5:5f:91:c2:c1:c6:6e:14:f7:35:
6b:b0:65:6d:fd:7d:99:23:c9:c4:55:b6:e4:b7:da:
8a:6b:4f:65:29:28:08:f1:08:10:d5:73:96:fb:52:
44:6d:d5:ca:17:e1:ae:8a:c8:34:7d:80:b9:c7:4a:
1f:d9:a6:db:74:d8:98:28:d8:c9:55:b6:81:02:af:
51:dc:8e:bf:ad:8b:aa:ce:34:2e:2a:09:ab:36:61:
5c:02:2b:3f:d1:80:12:4b:28:19:21:56:98:aa:9e:
fd:97:29:33:24:97:48:a3:9c:e9:05:e7:83:0d:d1:
7d:1e:73:fb:fc:49:35:ee:3b:13:34:99:c1:1b:e5:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CB:30:19:64:78:4C:84:2E:A3:53:68:1A:90:3E:80:53:31:84:D8
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1e:ac:8c:0b:78:9c:f7:e3:fb:7c:95:47:59:cc:f5:23:02:
41:36:ef:42:d7:d1:3d:db:6a:80:03:2b:b1:db:6d:1a:15:b3:
73:a5:3e:07:48:73:af:8e:06:0a:2c:93:43:ed:02:ef:b0:9d:
26:5d:cd:33:e5:5b:76:61:ed:3f:7d:fc:33:30:95:10:6a:3f:
97:8e:57:33:fa:75:60:0e:1d:eb:82:6a:c4:91:08:ec:06:40:
4f:0d:3f:e5:07:78:9b:a5:ca:a4:90:3b:d0:ab:95:9b:0c:57:
46:4b:34:8f:3b:6d:76:d1:d4:88:5c:75:18:c9:69:91:86:02:
41:54:19:c8:88:34:c1:ec:0d:99:74:e9:32:26:11:25:e3:d1:
9c:05:91:a0:9e:e0:e2:54:57:1b:f0:41:a9:08:8b:ef:1a:4b:
3f:13:c4:b3:91:e6:1c:d0:bd:5a:83:ee:66:db:9f:b4:af:9d:
d0:e1:0c:dd:b4:55:c4:fd:9e:6d:37:1b:19:0c:ad:71:c5:01:
c5:c8:ad:58:f7:10:ef:dd:02:8b:ab:7c:e2:e9:e4:77:ad:56:
37:ca:b8:18:fc:b6:2c:21:52:d1:94:89:7c:77:cd:db:73:b0:
dc:6e:0c:bf:16:12:c7:f4:03:ef:6c:9b:a5:0d:10:38:7b:d7:
ca:3e:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:08 2025 by rpki-client