Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
File: jhpIch_0OxgFfvQXSp05apgcZpM.mft (raw, json)
Hash identifier: YoRwh362gtV7bc2TkcBFvEOEdTw5vBUOVsg6ZZZbAlo=
Subject key identifier: 29:26:C6:06:21:22:1C:E8:6A:F8:3C:72:48:AA:6A:9C:6A:69:31:73
Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Certificate serial: 019A53AC7FD6805B6B5ABDB08FAE1E4FDCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
Manifest number: 0FCF
Signing time: Wed 05 Nov 2025 11:00:04 +0000
Manifest this update: Wed 05 Nov 2025 11:00:04 +0000
Manifest next update: Thu 06 Nov 2025 11:00:04 +0000
Files and hashes: 1: 1-Na5cdjkknnPjBDa8CSwg969ti4.roa (hash: WZGHMPK2nQA1frPQkCJW1REGcPzcUesUydiFogSJYmY=)
2: jhpIch_0OxgFfvQXSp05apgcZpM.crl (hash: raICkmf7/lcnC3y5V2oUgd4F9bDNHcQhmhBNTIagCn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:7f:d6:80:5b:6b:5a:bd:b0:8f:ae:1e:4f:dc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693
Validity
Not Before: Nov 5 11:00:04 2025 GMT
Not After : Nov 6 11:00:04 2025 GMT
Subject: CN=2926c60621221ce86af83c7248aa6a9c6a693173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:b9:cc:4b:b2:8a:47:43:6e:1b:7d:71:5e:
e8:9d:ee:8a:91:e3:41:cd:c9:aa:10:e8:c0:e0:d8:
3e:92:7c:bc:52:4e:ed:99:c8:a8:83:13:1e:2d:fa:
a1:db:69:be:70:fa:da:b4:e5:5f:73:b3:1b:46:86:
0c:e2:f4:fc:62:62:27:3f:4e:30:8f:27:8f:9c:9b:
87:28:ad:5f:a6:73:7b:f7:d2:fc:79:52:c6:79:3d:
6a:cd:8f:a1:d8:f6:cd:41:f3:db:1b:1a:12:e9:27:
f6:a2:e1:2a:0e:02:f4:41:95:2d:c9:ae:01:69:bf:
d0:67:a9:ef:61:25:94:6f:c7:51:cf:e4:c1:e1:a8:
c4:98:97:7b:bc:2d:a2:70:98:92:84:63:42:4a:c6:
6e:9b:2b:db:ae:d8:56:09:11:05:0e:74:8e:d1:00:
6b:80:09:d2:0d:fa:ca:25:53:7b:8f:82:24:f7:86:
42:b9:bf:8e:2c:9a:62:0e:21:a7:f6:c4:6a:75:89:
c4:43:e9:97:fb:8f:13:ac:ee:1a:f4:8a:6b:46:a7:
ed:33:fe:00:85:a8:1e:a3:b8:0b:71:86:c3:74:f1:
00:d5:b6:90:04:ab:49:03:37:68:d8:ab:68:a3:1d:
af:a5:9d:b2:10:4e:29:1d:8f:54:54:1f:9e:47:d6:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:26:C6:06:21:22:1C:E8:6A:F8:3C:72:48:AA:6A:9C:6A:69:31:73
X509v3 Authority Key Identifier:
keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:88:69:cd:5d:74:77:ff:09:db:54:74:26:0d:eb:d5:c4:ae:
8a:5c:9b:18:da:52:25:e9:33:41:48:50:b5:90:ec:54:95:51:
6a:00:e8:2c:f2:b6:a7:49:f9:7a:9d:9e:89:cd:a5:50:4c:03:
c3:48:0e:54:bf:58:e4:33:b3:2b:2e:02:63:17:dc:b5:56:4f:
66:03:ba:0b:66:85:a8:9b:17:35:69:93:dd:c1:75:59:94:23:
c9:80:98:64:93:43:66:60:9c:17:34:a6:81:d4:19:4a:24:87:
3d:db:f1:88:5b:1e:51:b4:b3:13:51:20:a6:29:cc:2e:f2:10:
91:36:aa:cc:69:ab:4b:c6:17:e6:ca:fd:57:27:36:c4:3e:cf:
0c:91:f6:72:eb:68:2e:de:00:c8:9b:a9:dc:23:2d:95:4f:36:
e2:1f:10:da:ef:20:de:ef:cf:9b:93:78:98:75:a6:08:d5:af:
13:20:39:20:d6:1b:c1:d9:af:22:93:8c:8a:bd:81:cf:f6:eb:
9a:06:5b:dc:3e:2d:78:3c:b4:bc:64:df:17:d9:e4:80:d1:22:
56:96:bf:82:89:19:07:05:78:f6:c3:b5:7d:e3:c5:b4:c4:fd:
32:97:b7:3a:74:4f:42:ea:d2:df:8d:d0:45:c9:e0:61:1f:38:
d1:83:7c:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrH/WgFtrWr2wj64eT9z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx
YzY2OTMwHhcNMjUxMTA1MTEwMDA0WhcNMjUxMTA2MTEwMDA0WjAzMTEwLwYDVQQD
EygyOTI2YzYwNjIxMjIxY2U4NmFmODNjNzI0OGFhNmE5YzZhNjkzMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYm5zEuyikdDbht9cV7one6KkeNB
zcmqEOjA4Ng+kny8Uk7tmciogxMeLfqh22m+cPratOVfc7MbRoYM4vT8YmInP04w
jyePnJuHKK1fpnN799L8eVLGeT1qzY+h2PbNQfPbGxoS6Sf2ouEqDgL0QZUtya4B
ab/QZ6nvYSWUb8dRz+TB4ajEmJd7vC2icJiShGNCSsZumyvbrthWCREFDnSO0QBr
gAnSDfrKJVN7j4Ik94ZCub+OLJpiDiGn9sRqdYnEQ+mX+48TrO4a9IprRqftM/4A
hageo7gLcYbDdPEA1baQBKtJAzdo2Ktoox2vpZ2yEE4pHY9UVB+eR9Z6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkmxgYhIhzoavg8ckiqapxqaTFzMB8GA1UdIwQY
MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt
Y2U0ZTMxY2UxNTE4LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4
LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4hpzV10
d/8J21R0Jg3r1cSuilybGNpSJekzQUhQtZDsVJVRagDoLPK2p0n5ep2eic2lUEwD
w0gOVL9Y5DOzKy4CYxfctVZPZgO6C2aFqJsXNWmT3cF1WZQjyYCYZJNDZmCcFzSm
gdQZSiSHPdvxiFseUbSzE1EgpinMLvIQkTaqzGmrS8YX5sr9Vyc2xD7PDJH2cuto
Lt4AyJup3CMtlU824h8Q2u8g3u/Pm5N4mHWmCNWvEyA5INYbwdmvIpOMir2Bz/br
mgZb3D4teDy0vGTfF9nkgNEiVpa/gokZBwV49sO1fePFtMT9Mpe3OnRPQurS343Q
RcngYR840YN8Tg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:41 2025 by rpki-client