Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: 4xngSgGEwWenWhyR8zAsGbvHk2O5wnnBMTNB8i8GIrQ=
Subject key identifier: BD:3D:4F:DF:F2:D6:E1:6A:40:4A:FE:39:0F:02:2B:2D:BD:D0:7A:8A
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 01964D46E9ADC05A150B2575B86AFBA03E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 123A
Signing time: Sat 19 Apr 2025 09:00:15 +0000
Manifest this update: Sat 19 Apr 2025 09:00:15 +0000
Manifest next update: Sun 20 Apr 2025 09:00:15 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: bOtiLNM0XwlI4K4pYoF/smwU+AEFxTQWahFLXd1jRso=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:e9:ad:c0:5a:15:0b:25:75:b8:6a:fb:a0:3e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Apr 19 09:00:15 2025 GMT
Not After : Apr 20 09:00:15 2025 GMT
Subject: CN=bd3d4fdff2d6e16a404afe390f022b2dbdd07a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:4c:0c:ef:a8:81:46:c4:94:e1:77:a2:02:
37:61:54:4c:ec:3d:3c:78:86:65:97:66:e5:ab:db:
75:08:36:f5:cd:03:a3:19:54:87:df:b5:24:31:0d:
d9:bd:fb:6b:37:38:8c:8c:56:2f:fc:3e:a2:bd:c1:
39:b7:4c:31:16:ee:ea:66:d3:17:87:6a:d8:55:dd:
9d:2c:78:41:f7:0a:39:25:d9:0c:45:46:d0:19:fc:
13:92:6a:19:e7:4a:99:2b:b4:29:08:29:a6:4b:ad:
2b:16:56:12:8a:ba:b5:ed:31:7e:3d:f7:c0:19:2d:
cf:21:4c:b6:7e:06:db:9e:6c:84:f2:1e:70:cf:a7:
7b:fe:d2:0f:6e:47:aa:7b:f6:8a:02:22:e7:05:c0:
4d:44:aa:6a:02:92:82:53:0e:82:a2:26:ff:27:8d:
e0:17:af:fe:d0:ac:03:fd:7d:71:e7:d7:f8:82:dd:
e6:07:71:b4:ea:78:ca:8e:22:49:07:3c:6d:79:89:
fe:45:c1:c0:1c:d7:df:6a:19:3b:f2:b6:81:9b:39:
bc:0a:73:a0:82:ef:55:cf:62:5d:77:11:a1:5e:86:
d3:d3:76:df:5d:b1:2f:17:c3:b2:6f:ab:28:9a:91:
92:0e:e8:bf:2a:b4:97:ba:91:f3:f6:32:3a:54:de:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:4F:DF:F2:D6:E1:6A:40:4A:FE:39:0F:02:2B:2D:BD:D0:7A:8A
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:16:a2:6b:dd:99:bb:b8:1c:92:3f:08:9b:b2:3b:ec:b0:
70:80:f0:f5:86:dd:e6:a0:51:f5:2c:22:5d:e0:66:51:ee:e2:
5d:4d:88:38:c2:0e:6d:ed:d4:e0:e6:dd:ab:cf:47:14:4f:e3:
72:3f:1c:cf:7c:08:67:e4:50:35:52:29:47:94:6e:80:17:92:
80:83:a4:fb:3c:7a:25:77:d5:39:d9:66:15:47:25:61:9c:14:
77:2b:77:67:ee:ec:27:c4:f2:41:df:d0:9a:12:b1:10:89:9f:
6e:2e:4b:45:f0:fa:40:3a:7e:4c:0e:b1:26:f6:e6:f4:11:de:
b4:6c:01:17:5f:af:7e:4d:5b:85:a0:13:90:a3:5d:2f:df:42:
a5:b5:85:4d:d3:4c:1a:d3:47:6e:70:57:0f:2b:be:0d:24:59:
bc:69:92:df:4a:30:08:07:e8:57:de:4d:19:d9:1e:d8:6f:ba:
4a:2d:5a:77:fa:51:a2:3a:70:d9:b9:1f:8a:8c:ea:29:ec:f4:
3c:bd:c3:c3:58:10:d7:80:fd:d1:15:d3:1d:a9:43:f6:7a:75:
eb:8e:dd:9f:16:e8:d9:24:79:76:5f:00:27:21:54:b5:1c:c1:
ec:d7:0c:0b:87:0c:78:ec:2a:b3:e3:15:f8:d9:b5:1c:3f:c2:
94:e5:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:34:54 2025 by rpki-client