Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: xqX9fXw9BDOCk/7rxkcJARb64iNwjP2HfQrZGFXASyU=
Subject key identifier: DC:75:D0:A7:4F:E3:B4:5B:7C:83:62:69:1C:28:DB:7A:F7:25:AC:25
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 01974A43760A7EF539AB9C804E6BC0EA02C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 12BD
Signing time: Sat 07 Jun 2025 12:00:24 +0000
Manifest this update: Sat 07 Jun 2025 12:00:24 +0000
Manifest next update: Sun 08 Jun 2025 12:00:24 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: GWpJthT7ger49lX/k//Z0hqmd33qgLsoPWwQb7ZBaCs=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:76:0a:7e:f5:39:ab:9c:80:4e:6b:c0:ea:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Jun 7 12:00:24 2025 GMT
Not After : Jun 8 12:00:24 2025 GMT
Subject: CN=dc75d0a74fe3b45b7c8362691c28db7af725ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:84:d5:03:6b:ef:93:fc:60:1c:70:70:7e:
db:1f:77:fb:77:73:06:66:5e:23:a1:3d:03:23:41:
b2:d9:a9:a6:ae:2b:be:f3:fe:17:71:ee:58:8a:54:
de:1f:4e:97:f4:13:e7:77:7f:17:a9:a2:c1:89:ad:
90:7d:d8:fa:61:ea:d8:d9:27:1c:6f:12:72:3d:56:
06:4f:1e:b6:54:37:c8:c6:c5:94:32:7a:e2:44:c9:
aa:ef:fc:4d:3c:d4:16:0a:36:c3:ee:a4:3a:d5:78:
dc:fa:70:26:6d:9a:1a:4c:69:8a:e5:ac:f0:be:93:
cb:5e:9f:f0:3b:d6:d5:c5:a7:7c:2e:4f:09:21:46:
46:f5:45:c6:81:fb:ce:8d:08:ea:86:4e:38:db:f2:
3b:95:13:f5:24:b6:83:09:a7:f1:69:35:8f:b1:f5:
81:29:05:97:58:80:48:f2:3b:6d:6b:0b:9b:3c:88:
2b:e3:46:b6:9d:95:e8:f3:19:a1:60:98:f7:b6:8d:
78:62:2d:18:9e:68:b6:62:45:f9:2f:05:25:1c:1b:
09:8c:ab:16:ee:28:03:1e:2f:4c:0b:3f:01:7c:a0:
88:fe:4a:ca:2f:03:a6:40:34:bd:12:1d:31:b5:b5:
b4:bb:e7:1e:d2:dc:3c:f8:27:b3:16:80:23:f2:c8:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:D0:A7:4F:E3:B4:5B:7C:83:62:69:1C:28:DB:7A:F7:25:AC:25
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0e:87:06:b0:5d:91:70:be:dc:2f:c0:6e:fc:2a:60:26:16:
27:a3:7a:84:3a:25:60:9a:13:5f:46:c7:5f:0f:3e:62:c1:b8:
f9:c8:ba:6d:12:ec:aa:ca:bc:d1:bf:47:1b:75:29:cd:1e:c5:
f4:27:9f:9e:54:be:da:64:ec:45:eb:9e:96:0b:b0:a2:18:f3:
2c:24:b2:6f:27:ab:0f:56:f8:57:0f:f7:8e:87:e0:82:85:75:
18:d0:71:48:fa:85:a8:72:fc:3a:85:7f:1c:ea:6c:6d:d5:8e:
85:48:01:91:c6:9e:dc:fd:b5:f3:a4:d9:83:e1:c4:cd:a1:fc:
56:4f:ef:1a:f1:59:b2:c6:cc:7d:9e:68:ce:c3:8c:ea:32:3f:
4b:25:28:3c:5a:2a:6d:b2:05:38:28:c3:39:72:8c:0f:a8:db:
32:a0:e6:e9:fc:14:8b:b0:ca:bd:3a:e4:82:f6:52:d5:22:2f:
5a:89:43:41:a3:f6:05:d3:86:9f:36:b3:f6:c4:c7:11:a9:bc:
6b:fa:05:e9:69:09:73:63:86:cd:88:6a:92:07:e8:42:a3:80:
ae:7e:cb:9b:67:47:df:f7:27:3f:72:08:49:89:c5:c6:fd:33:
ea:7d:79:bb:49:f2:4b:6a:1e:d8:03:4c:72:38:98:49:16:0b:
6e:81:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:15 2025 by rpki-client