Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: /nu19caqQF1qROApHQkyYomHF1Smu0tntxGWcLRVhD4=
Subject key identifier: C0:5D:3E:4D:AC:F2:36:84:CD:FC:FA:DB:A8:26:C6:A6:D1:9D:0A:9D
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019A71B8A91A791B79373ACC5070E2EEC2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 145F
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: 98oHwO/i7/1UbAES0dP71Fri5Mm4HroEp+Eb3OSQhDY=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a9:1a:79:1b:79:37:3a:cc:50:70:e2:ee:c2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=c05d3e4dacf23684cdfcfadba826c6a6d19d0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:3b:66:8d:32:5b:da:b4:48:47:0e:28:aa:
70:f5:41:a3:f9:aa:7d:9b:1c:6f:4b:d4:d0:8e:3d:
ca:d2:c9:3d:e3:f9:b6:53:35:f5:b9:91:ec:3e:e1:
3c:68:eb:13:78:bc:f7:7f:07:27:bd:aa:14:55:d8:
74:b8:f0:55:a2:13:44:5d:fd:c5:df:cf:d0:59:85:
64:c6:08:c6:11:8d:39:d9:45:29:21:51:50:8f:79:
01:50:f6:95:6a:cb:68:8a:3d:09:2b:a2:b2:5c:45:
5e:f1:90:f6:a0:4b:8f:ae:b4:60:c4:59:c9:c3:e8:
d9:5f:6f:ae:7d:44:1b:ae:58:c8:89:5e:3d:fb:27:
bd:5a:1a:98:f9:f6:35:9e:9b:17:55:5d:34:58:69:
c1:04:67:a5:93:25:99:c8:d8:94:dc:d1:66:03:2d:
21:8e:f9:b7:5d:ea:b5:d6:eb:cb:c0:c0:d7:e2:88:
66:aa:7b:80:49:0f:06:f3:54:2b:d5:b9:c0:2f:e4:
86:c6:44:3c:95:8e:59:b4:44:35:c4:33:7f:24:f7:
59:27:5c:0a:cc:ad:0f:01:44:0b:c8:9f:64:42:38:
f0:da:99:2c:b9:e7:df:28:2e:d9:6e:6a:18:21:1f:
51:94:a6:8f:44:c3:68:f6:8d:50:4c:96:c7:48:4d:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5D:3E:4D:AC:F2:36:84:CD:FC:FA:DB:A8:26:C6:A6:D1:9D:0A:9D
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0c:b8:20:83:36:d1:bf:c5:1f:3c:d7:87:6e:48:dc:9e:7a:
33:05:ad:97:04:06:48:e5:ad:b6:61:11:f4:e3:5e:e4:17:c9:
73:2c:6a:93:72:0d:a1:a6:5f:e3:54:3e:16:e9:57:22:4f:49:
c2:d3:be:88:28:ce:07:95:7a:fe:01:1e:e8:e5:29:00:e7:24:
2f:5b:45:b5:74:2c:ba:db:0a:ba:2b:24:bb:ae:ea:89:a9:58:
db:5f:b3:f0:70:36:2b:23:66:bd:73:5b:d5:2c:31:44:84:1e:
b8:72:6a:03:f3:85:67:2a:bf:fd:5e:53:97:0f:56:30:d2:70:
21:4e:4c:14:a8:90:1c:fb:35:b9:d5:23:99:ec:a2:04:dd:a5:
7f:55:1a:9b:1a:eb:22:f9:71:a9:79:ac:32:1c:8c:3b:92:3c:
24:a8:d1:81:bd:f8:68:64:0c:f2:49:cb:35:6b:8b:c5:85:67:
68:b5:e9:49:46:5f:a1:59:54:6a:cb:82:d2:b5:d9:55:3e:21:
4c:51:dc:a0:0f:fb:2c:42:24:5d:72:e9:81:c9:bd:77:93:3d:
07:3c:df:99:d5:04:37:71:d0:51:5e:66:36:05:37:7e:f1:d2:
7f:82:14:c6:25:df:4b:3c:4f:e5:82:68:1c:5e:c7:9b:02:e9:
15:29:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:26 2025 by rpki-client