Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: nJa1dteTS8iHIXdzl5g3IiUMumFDR41jB2oT83qBI0A=
Subject key identifier: D9:0C:1C:C8:BA:C9:66:03:59:59:96:98:F1:67:66:4F:73:85:87:2B
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 01976E19087D72CE34B06270AB888BE14E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0C9F
Signing time: Sat 14 Jun 2025 11:00:23 +0000
Manifest this update: Sat 14 Jun 2025 11:00:23 +0000
Manifest next update: Sun 15 Jun 2025 11:00:23 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: nJTtjUwVKkUwHv8KkjH+BaGoVfdv+RiWToYuUg1NoFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:08:7d:72:ce:34:b0:62:70:ab:88:8b:e1:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Jun 14 11:00:23 2025 GMT
Not After : Jun 15 11:00:23 2025 GMT
Subject: CN=d90c1cc8bac9660359599698f167664f7385872b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:1e:82:1d:9f:39:66:19:69:88:60:53:68:
5a:e6:8b:f3:6c:ef:17:83:8a:f0:0e:51:25:da:48:
8d:7a:e8:e0:41:2d:cd:0b:b6:5e:f5:cd:6d:81:07:
ce:69:6a:52:f9:24:35:4a:7e:9a:9e:d4:41:f2:08:
fa:1b:5e:f2:3a:97:ae:98:66:58:0c:79:3c:cd:44:
e1:91:33:49:0c:e5:09:bc:97:00:40:f4:17:ef:e8:
d9:25:51:05:f0:17:cc:df:4a:41:11:e6:6f:6f:b8:
3f:d4:3d:75:92:51:b4:fa:18:17:6d:07:52:20:00:
62:3c:55:c6:d2:af:1b:98:e8:16:94:2f:be:bc:91:
c0:75:ed:e7:5c:a9:33:cc:2a:ed:11:6c:73:aa:70:
2c:de:08:26:59:60:7c:b0:15:6d:ab:c9:8f:48:02:
d8:97:a7:3b:07:60:e1:1e:81:cb:37:64:11:63:c0:
bb:51:bd:78:8d:ba:45:d7:5e:91:63:63:d6:7b:a3:
38:44:49:0a:2a:84:b0:e2:7a:ca:d3:40:b7:75:04:
12:55:c6:64:64:11:af:4b:ba:8c:a8:19:93:05:71:
74:50:1e:bc:1a:36:77:1c:42:2f:23:fe:4d:b5:6f:
47:40:b1:c8:2f:0b:15:98:51:aa:db:29:c5:ee:86:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0C:1C:C8:BA:C9:66:03:59:59:96:98:F1:67:66:4F:73:85:87:2B
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9b:ab:c5:fe:e0:73:75:64:17:03:80:49:6f:5f:52:57:28:
c6:95:56:b7:a6:f1:63:da:c9:46:bd:32:69:94:c0:20:aa:c8:
3f:f8:b0:f9:35:f9:8d:3d:f6:11:78:bf:e9:b0:b6:ad:70:1d:
f5:fb:b9:90:3d:d9:1b:a1:1e:db:e2:a1:5a:67:11:8a:96:1c:
4e:bb:3b:2f:33:8b:77:5e:9f:e6:f2:1d:fd:35:2c:bb:aa:31:
d8:6a:02:83:57:f1:a4:af:39:6e:14:7f:53:91:ff:3c:53:d0:
18:61:f0:00:34:d9:84:0c:f0:9d:05:0e:92:8a:94:04:c9:59:
34:69:bf:6a:f9:11:fa:bc:5f:96:48:5f:81:f4:b3:82:a7:a4:
13:52:5a:33:2c:02:bd:5e:25:17:74:da:76:ed:da:9d:08:01:
3c:52:34:6f:99:1a:da:30:e4:d6:54:d3:8f:51:b8:4c:8d:99:
79:eb:62:33:43:5d:fd:f7:0d:8b:f8:7b:63:35:cc:0d:fe:bf:
6e:9f:cb:0c:fb:9a:6a:fe:e0:98:35:3b:43:af:1b:1d:e3:05:
f8:17:1e:27:5d:c0:b1:13:76:0f:d8:f5:0a:fe:54:66:d0:71:
a9:80:64:5d:ec:20:d9:3b:ef:db:ff:03:49:94:73:a9:ea:44:
6f:1c:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:51:46 2025 by rpki-client