Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: D1UgseTspDYfr6yvySAp+xsORtgyfIb+CNckY4qLBcA=
Subject key identifier: 97:1C:EE:FA:74:14:23:19:37:DD:B2:3C:61:C7:4D:88:AB:1C:3F:FA
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 0198D65F851F7695AF9C43406F450F6132B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 138A
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: xF9gnnDtZd8cWL/nvSFGA0TSEO45EuwbNgDGfDl2dPk=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:85:1f:76:95:af:9c:43:40:6f:45:0f:61:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=971ceefa7414231937ddb23c61c74d88ab1c3ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:ba:9b:11:5e:7b:83:04:16:4d:0f:db:de:
a3:4f:8e:97:0f:22:fe:90:e1:84:ab:1f:41:b4:a0:
68:09:5a:fe:db:80:49:a4:76:40:c4:5c:c3:ed:39:
e2:53:8c:da:f7:6e:80:67:12:49:72:64:08:9f:2c:
c8:46:cf:a5:f4:3e:7a:8e:30:4c:46:27:d0:c7:95:
4e:4d:b6:e8:47:36:4c:a2:a8:7f:0f:e9:9b:24:a9:
f9:51:aa:16:a7:1a:52:59:29:da:51:3d:7a:4f:33:
00:86:5a:f2:4e:a8:48:57:a9:ce:ea:99:7d:5c:85:
e3:7b:07:77:ea:7e:c3:be:12:05:ba:40:50:f0:02:
8c:c7:38:86:26:13:13:a6:78:d9:6d:37:24:64:42:
0f:cf:3f:31:d4:47:ec:5b:55:e7:50:2e:20:a4:ca:
53:a2:f4:9f:03:e4:e8:6c:55:bd:85:13:5f:3a:67:
46:fd:12:57:33:f5:bc:80:02:c7:6c:70:cd:b2:dc:
c5:9f:38:96:c8:01:fa:f6:e7:d9:6c:e7:3d:ed:4c:
d0:0a:5c:ed:c3:3b:11:44:6a:2f:b2:28:01:63:b0:
af:a5:2e:95:90:c6:f0:16:d9:a2:02:c8:f4:93:f8:
a8:a4:90:49:64:e4:c0:b5:d2:50:3a:19:7f:d8:75:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:EE:FA:74:14:23:19:37:DD:B2:3C:61:C7:4D:88:AB:1C:3F:FA
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ea:d3:36:cb:79:23:40:96:e8:ee:f0:41:0c:53:9e:ff:2f:
f9:a5:79:61:68:c3:c1:2a:14:f5:d9:f2:b5:07:ae:10:3e:b1:
2d:a7:e4:a8:d9:71:54:fa:48:f6:ad:79:93:12:2e:9a:f4:c0:
f4:80:1b:0c:6d:72:bf:80:58:92:b7:c2:c1:b8:94:fd:c9:90:
6d:b4:41:70:a7:fd:de:9e:a0:33:96:22:e3:e2:6a:62:40:ba:
f9:89:87:4c:b5:d8:f1:95:0b:57:b7:13:4b:e1:5d:53:e1:f8:
6e:dc:7e:92:17:08:5f:cf:b1:e0:cb:54:5d:04:3b:c8:bb:b2:
8a:62:e7:ca:68:79:ae:ac:96:e1:a6:b0:58:b7:78:21:4e:29:
4b:55:31:56:08:4c:3d:14:62:8c:76:88:dc:a9:a4:25:f1:9b:
88:df:cc:f6:3a:d7:8a:6f:dd:c2:04:64:cb:87:e2:7f:64:79:
d7:3a:50:db:58:8e:5c:ec:cf:63:85:f5:7b:bb:6c:8f:c8:7c:
7d:5e:ca:a3:7c:a4:1b:03:e0:9d:91:8b:48:85:49:2a:0d:24:
b1:87:ae:e7:61:41:6e:c3:89:ec:e6:4f:7c:57:e8:9a:b0:cd:
cb:77:ae:a9:86:a0:91:46:5f:61:77:d6:e0:73:b1:f6:ee:ed:
99:ed:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:46 2025 by rpki-client