Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: 8+VQ0aJmo4E+RUGHbSrH4Llj5jtUz2a4LqjvnJNGit8=
Subject key identifier: C3:8F:B9:9E:85:29:0A:00:47:83:5A:FD:9E:C1:C3:8B:20:0D:A7:D0
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 0199FBEB1EDFD779B45477F6B084CF08CEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 1422
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: ZtkaiqVNEx239lvH2+DMVlAqqepP5b6Xt6FtPZEOB+U=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1e:df:d7:79:b4:54:77:f6:b0:84:cf:08:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=c38fb99e85290a0047835afd9ec1c38b200da7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:94:80:8d:4d:77:56:54:c6:ce:c0:92:fa:
17:4d:38:96:9d:57:cb:24:ad:72:e7:2d:85:8a:d6:
3c:43:fc:a4:00:ca:fc:57:04:a1:4b:8e:49:2a:34:
24:26:da:1b:80:30:5f:75:bf:b7:0f:ad:04:5a:d0:
d8:07:54:0d:73:65:ee:11:d5:0c:1b:83:7e:9a:c9:
90:48:96:67:14:42:95:c7:e0:52:0a:b1:4b:79:98:
15:dd:0c:f4:69:7e:69:3d:b2:cf:1e:b8:ba:9b:9d:
21:2d:70:3c:33:25:86:ad:6d:6f:de:2f:c7:e9:46:
14:48:84:bf:64:f6:91:65:ec:4d:d8:a4:4a:4d:a5:
9c:13:b3:d7:3b:31:3b:66:d5:2e:96:85:ca:8e:a1:
55:ed:b0:b0:35:8e:22:07:b8:77:e0:de:64:8e:ee:
dc:03:59:c4:07:12:0d:49:7d:45:3d:dc:55:28:1f:
50:db:d3:fd:20:a5:60:e6:1d:f5:60:35:47:2a:66:
fb:a8:39:10:1b:89:b3:3f:3a:74:92:f9:d2:35:ea:
ca:eb:c8:4f:b2:9b:58:c1:e4:a0:e0:17:3a:c5:e1:
c8:8d:b5:b1:68:09:da:6a:fd:b4:41:1a:18:43:24:
01:26:a4:36:9e:45:98:00:f4:51:f5:c1:22:82:a0:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:B9:9E:85:29:0A:00:47:83:5A:FD:9E:C1:C3:8B:20:0D:A7:D0
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:37:06:2a:6a:56:6b:bf:84:b8:3b:eb:e2:1f:84:08:01:
b6:6b:b9:0c:27:e9:0d:59:da:0b:21:3d:36:10:93:9b:f6:f2:
d9:c0:a5:39:75:4a:d5:f5:25:da:06:6f:7a:59:46:ff:9d:8f:
92:3a:0e:71:66:b1:32:4f:c9:5a:79:f3:77:cb:b7:07:cd:1b:
da:df:b8:6c:5c:e4:c7:d9:51:5e:db:0a:e1:16:6c:1a:0c:ef:
0b:38:13:5b:3d:60:b5:aa:22:87:88:e4:cc:55:a1:3a:a1:c5:
df:16:4b:32:f0:d9:c0:aa:ea:49:39:49:80:0d:d0:6f:18:4e:
69:7a:a6:c7:31:78:79:b3:79:7c:2e:99:73:78:aa:6f:ad:e6:
82:23:94:23:b4:9b:23:97:27:a2:87:87:4d:1a:bc:3f:81:72:
5f:79:62:29:2e:dc:14:c2:bd:fb:42:07:67:a5:8a:8b:59:b9:
d6:e5:05:32:0d:2b:26:63:cf:07:1d:be:f0:09:ea:7b:55:c4:
03:91:16:8e:89:2e:6b:ad:6e:d8:9a:78:9b:5c:b1:0c:61:49:
b2:21:4d:1b:54:43:ea:7e:e5:e3:a1:53:b1:13:f7:76:4d:0f:
06:4a:32:40:e8:00:ae:54:62:09:16:2a:3e:ac:6c:40:2d:e2:
9f:f7:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:01 2025 by rpki-client