Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File: jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier: 6VPcaQs/HzXBU8ZtcrHiyzk8UPEMPS01gGRIFp19keo=
Subject key identifier: D1:3B:D6:FA:D0:BE:C8:5B:B0:1A:21:51:CB:68:5A:72:9F:84:AE:B9
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer: /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial: 019A4DE1771DFDB7BBF09CE8A7B0A3B01761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number: 0E1C
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: xC+eBPqQo1k3aORoSv7+80PFWFoL6W9OnVL1cxRSVEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:77:1d:fd:b7:bb:f0:9c:e8:a7:b0:a3:b0:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=d13bd6fad0bec85bb01a2151cb685a729f84aeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:d7:b8:37:7d:a8:ce:4d:40:01:a6:43:cb:
ee:6c:c2:4c:97:b1:95:c9:01:2d:a6:52:70:2f:b3:
88:bb:26:29:52:0c:7a:d3:60:87:2d:88:e5:3f:db:
8f:0d:29:3c:19:2c:6a:12:b7:0f:5b:85:40:9c:3f:
ee:11:37:8a:7a:d7:5e:3d:d4:4e:05:7b:cb:1e:1e:
5d:8e:a8:21:95:de:a3:2b:61:08:79:dd:e3:bc:ff:
3e:5b:a6:bf:c7:d1:9f:09:f5:a8:7f:f1:9a:d3:d5:
12:c7:18:ba:a8:59:1b:94:d2:1d:8b:e1:01:67:3b:
83:f0:a3:06:22:03:f9:44:9d:13:f6:6b:22:0e:e9:
08:48:46:90:cc:1e:da:9b:46:2d:3f:92:f7:ee:9a:
b0:3e:e0:d1:a7:15:7d:dd:b3:c2:a7:a2:26:a7:16:
f3:e4:b5:cf:34:d0:6a:03:28:f5:77:bd:f4:94:c5:
a8:9e:e5:47:28:cb:75:25:06:ab:61:50:ff:5d:75:
be:0d:3e:06:95:0a:e1:7f:87:59:52:64:7e:4e:3d:
b9:7c:39:4e:6a:f2:39:e5:54:23:63:51:f5:4d:2b:
52:5f:16:1a:66:5b:eb:d7:fa:e2:14:22:bb:0e:72:
d9:80:49:9d:69:c4:39:32:e3:f1:f3:f4:94:66:5d:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:D6:FA:D0:BE:C8:5B:B0:1A:21:51:CB:68:5A:72:9F:84:AE:B9
X509v3 Authority Key Identifier:
keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:84:c2:db:98:33:e7:92:c8:83:f3:34:a9:7b:0e:0a:0e:08:
bd:41:12:f3:23:27:2a:e8:63:5d:8e:64:0d:1f:2d:e5:a4:04:
d1:cf:82:35:38:4c:63:3f:45:55:16:ef:12:ef:8c:6f:2e:3d:
68:da:80:70:8c:25:77:24:e2:c7:67:1c:33:ca:37:3b:37:f2:
dc:5b:ea:fa:48:6a:3e:99:5c:0a:cf:63:c0:b2:fd:97:e9:43:
6c:a1:2c:84:58:14:dc:17:8a:7f:31:c9:96:8d:ad:4c:b8:c3:
6e:29:67:3b:d9:ea:5d:4f:32:fb:bf:8e:fb:4e:8f:2f:f9:bb:
dd:3e:0e:06:86:53:5a:59:23:15:9e:66:8b:eb:a3:a7:6b:1e:
b5:e1:9a:5e:c2:ce:0e:4f:5d:25:92:ea:cd:ff:de:d1:f7:f1:
65:76:3d:ee:54:c8:09:75:e8:8d:d9:1c:ec:fb:56:62:22:11:
37:51:8b:00:e7:78:a3:bc:d0:bc:ac:56:ef:74:b5:40:a7:2f:
fe:25:f0:cf:de:3c:ca:f2:8e:26:6b:9f:f0:cf:07:10:fc:d4:
3f:d8:4b:e4:7f:d7:f9:5e:07:98:35:a0:f3:3b:25:e6:38:fd:
75:f1:ad:89:aa:ed:67:c1:6d:c6:88:68:3f:f4:d7:77:71:63:
c7:3b:6b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4Xcd/be78Jzop7CjsBdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy
MzBmMTQwHhcNMjUxMTA0MDgwMDEyWhcNMjUxMTA1MDgwMDEyWjAzMTEwLwYDVQQD
EyhkMTNiZDZmYWQwYmVjODViYjAxYTIxNTFjYjY4NWE3MjlmODRhZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoHXuDd9qM5NQAGmQ8vubMJMl7GV
yQEtplJwL7OIuyYpUgx602CHLYjlP9uPDSk8GSxqErcPW4VAnD/uETeKetdePdRO
BXvLHh5djqghld6jK2EIed3jvP8+W6a/x9GfCfWof/Ga09USxxi6qFkblNIdi+EB
ZzuD8KMGIgP5RJ0T9msiDukISEaQzB7am0YtP5L37pqwPuDRpxV93bPCp6Impxbz
5LXPNNBqAyj1d730lMWonuVHKMt1JQarYVD/XXW+DT4GlQrhf4dZUmR+Tj25fDlO
avI55VQjY1H1TStSXxYaZlvr1/riFCK7DnLZgEmdacQ5MuPx8/SUZl36/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE71vrQvshbsBohUctoWnKfhK65MB8GA1UdIwQY
MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt
MGQ4ZmNlM2ViZmJiLzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi
LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoTC25gz
55LIg/M0qXsOCg4IvUES8yMnKuhjXY5kDR8t5aQE0c+CNThMYz9FVRbvEu+Mby49
aNqAcIwldyTix2ccM8o3Ozfy3Fvq+khqPplcCs9jwLL9l+lDbKEshFgU3BeKfzHJ
lo2tTLjDbilnO9nqXU8y+7+O+06PL/m73T4OBoZTWlkjFZ5mi+ujp2seteGaXsLO
Dk9dJZLqzf/e0ffxZXY97lTICXXojdkc7PtWYiIRN1GLAOd4o7zQvKxW73S1QKcv
/iXwz948yvKOJmuf8M8HEPzUP9hL5H/X+V4HmDWg8zsl5jj9dfGtiartZ8Ftxoho
P/TXd3FjxztryQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:00 2025 by rpki-client