Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: fxxV1BoOVdrUxV0tyEz88x2Ukok9szQL10bjbjeDYTw=
Subject key identifier: 60:4D:3E:4F:82:0A:CD:52:7A:27:75:A6:61:8F:E4:DD:FF:74:D7:AF
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 0197B6A0587BBD7E3C2249E8AB5B0F38BF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 12F5
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: LZyz3HhFOtHMvgfp3wt6FXugEbK8U42i5Jj1n/xSL50=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:58:7b:bd:7e:3c:22:49:e8:ab:5b:0f:38:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=604d3e4f820acd527a2775a6618fe4ddff74d7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:7c:5f:be:81:6c:54:0b:30:bc:1a:6a:c4:
1e:b8:b8:e7:92:50:96:b5:50:ae:fd:1f:61:ce:88:
ff:ed:02:ac:ec:9d:8d:94:a6:ed:39:36:41:52:e1:
ca:a6:77:ce:81:3f:58:10:0c:00:03:af:69:bb:59:
8a:96:da:93:12:22:da:a3:92:08:22:62:46:98:3b:
01:ba:54:1c:2d:8a:00:fd:ca:2e:00:af:1f:b5:19:
fd:1c:7d:94:81:e7:4a:14:be:de:d2:29:6f:7d:46:
2e:62:a5:dc:be:d8:a2:ce:ac:94:8c:9e:71:64:92:
8f:8a:72:7c:a5:5b:07:32:d2:9e:22:78:79:d6:05:
f2:75:98:1f:87:c3:70:52:c1:e5:96:28:61:74:32:
7d:46:3e:05:fe:c5:30:19:c1:79:69:95:60:32:14:
81:ab:5a:fd:f4:3a:24:31:69:88:24:40:21:6f:9d:
54:dc:87:b3:43:2a:67:53:e1:68:e4:60:ca:9b:d5:
54:ae:67:76:b1:af:02:bf:b8:b7:06:9c:ec:d5:1b:
45:e7:e7:85:19:44:58:da:67:7a:6e:0c:83:3a:1d:
0a:aa:30:b3:c4:8c:3b:a9:e1:6a:95:60:bd:52:33:
62:5a:cb:ab:9d:a2:d4:13:5e:21:94:36:2c:1e:69:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4D:3E:4F:82:0A:CD:52:7A:27:75:A6:61:8F:E4:DD:FF:74:D7:AF
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:33:ff:84:2c:c1:be:cf:16:5c:62:4b:d1:ba:dc:40:1d:67:
39:38:75:91:87:b6:11:9a:cb:8d:a1:57:70:92:1b:08:a1:63:
00:62:a8:59:58:3a:8e:70:3d:35:3d:78:23:91:d2:a9:2a:fb:
1f:8d:5e:dc:2d:cf:ab:8b:63:18:ad:bb:06:0b:63:3f:02:99:
4f:3f:92:47:c8:81:6c:4b:f4:04:11:b5:a0:9b:1a:55:f2:d4:
ad:95:aa:fd:cd:cd:43:f7:62:9e:14:cd:b1:4a:19:89:6d:b6:
b5:93:5a:86:66:f8:cf:26:64:92:33:5d:aa:82:b4:86:3c:2a:
3a:72:70:a8:51:9d:c3:e3:5b:a3:58:67:b9:eb:1f:1e:8d:a6:
9a:04:09:3b:3c:cd:0f:6c:d5:17:d6:2d:93:05:83:14:3b:61:
2b:4c:28:4f:7c:5d:aa:12:e0:15:06:2c:7d:d4:31:75:69:b8:
e2:cc:bd:e5:fb:7b:41:7f:7d:0e:94:0d:1e:c8:f2:2a:0f:58:
86:ff:86:dc:40:73:2f:d0:53:84:49:9b:fd:23:a2:e8:5a:bb:
02:b4:f6:2c:3e:1c:f0:3f:03:67:72:92:91:27:a6:5e:e5:bd:
e2:e6:8c:32:2e:92:18:12:e7:cc:2a:4b:ad:21:0c:4e:3a:4c:
5b:17:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:28 2025 by rpki-client