Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
File: JR9CJP_ok-m4N4OaoKaKADgPVMY.mft (raw, json)
Hash identifier: EXBkCIJOnsMTREffKn2dyfBNcg33loECKM4qez1XYMk=
Subject key identifier: 16:77:64:ED:1F:80:29:72:2F:3C:28:81:5A:0E:A2:66:F9:FA:9A:B2
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 01967BA0465A3F91B9AE7A7EBDCDFF2B2DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
Manifest number: 1252
Signing time: Mon 28 Apr 2025 09:00:23 +0000
Manifest this update: Mon 28 Apr 2025 09:00:23 +0000
Manifest next update: Tue 29 Apr 2025 09:00:23 +0000
Files and hashes: 1: JR9CJP_ok-m4N4OaoKaKADgPVMY.crl (hash: QMlysuYZZxIpTVi4bYrLpnYSbAfg2XwEqZxq4ArfxyI=)
2: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (hash: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:46:5a:3f:91:b9:ae:7a:7e:bd:cd:ff:2b:2d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Apr 28 09:00:23 2025 GMT
Not After : Apr 29 09:00:23 2025 GMT
Subject: CN=167764ed1f8029722f3c28815a0ea266f9fa9ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:ad:29:c6:91:45:bc:5d:db:08:e8:5d:88:
e9:a0:9c:a2:2a:47:85:3e:1a:d0:6f:24:bb:b7:37:
79:3b:a5:59:00:f6:3d:a5:ef:2b:c9:f2:82:40:55:
f7:1c:d4:2a:76:63:e6:0f:57:b3:0a:49:8a:3a:8b:
c8:2c:a0:41:dc:c4:1b:80:cf:db:f0:5a:d0:c5:ba:
c3:c9:01:d1:11:17:ff:74:88:31:bd:3f:88:c7:b8:
cd:20:3b:b2:c6:31:4a:1a:23:0e:76:4f:d3:3f:2c:
ff:5b:ca:32:39:3f:3a:f6:02:c9:b3:34:05:78:82:
3e:14:e9:9c:de:50:17:ee:8b:38:39:43:99:c9:9f:
aa:b8:b4:e6:18:8b:f8:2f:84:d7:a9:d4:d2:2d:47:
ab:f5:bf:ef:6f:f7:3e:2e:b1:a9:af:21:86:09:aa:
ff:4c:d6:71:ab:5e:2e:88:44:cd:3b:46:75:32:36:
a9:8d:78:e7:bf:7e:96:be:f1:30:70:10:f6:50:c5:
b4:15:45:73:6a:21:27:c9:1a:3a:9f:db:54:c2:47:
df:09:0f:12:6c:fe:d7:88:57:ba:94:ff:9d:cb:49:
c1:bd:a7:89:59:e2:e3:73:2c:75:26:db:8f:d4:fe:
ec:58:ec:00:6c:b3:8b:3c:8d:c4:85:06:89:c4:1e:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:64:ED:1F:80:29:72:2F:3C:28:81:5A:0E:A2:66:F9:FA:9A:B2
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2c:b8:98:4a:09:28:a6:82:7b:88:c3:4e:c6:f2:71:a2:0a:
56:77:8f:6e:78:eb:c2:12:b5:e3:52:36:46:78:54:33:dc:55:
bd:21:73:90:60:2c:fa:8c:5e:fc:53:41:82:42:21:a5:95:1b:
77:76:45:7c:14:9e:8b:af:8d:65:93:8d:07:95:88:40:13:50:
2b:b8:99:79:67:13:a3:20:5b:35:bf:43:20:ef:31:a1:b1:a9:
89:2d:7a:3f:1e:4b:66:6f:2c:4c:3b:58:b0:5a:8f:d2:1f:a7:
54:e7:3f:7b:ad:f5:8b:43:b7:40:a7:05:77:e8:25:36:0f:4c:
d6:74:57:a0:96:b4:8b:4c:98:be:02:12:38:6f:d7:55:d4:76:
3d:9b:0b:d8:e1:b9:9f:42:f6:66:97:c9:a8:38:0a:2d:c9:eb:
e5:76:d0:ad:eb:82:44:da:63:cc:98:f8:3a:88:02:50:3f:e1:
f5:de:ec:a5:b7:6d:b7:c8:ff:c3:17:e3:c2:10:03:bb:92:eb:
dc:46:69:0d:f6:bb:6c:18:93:36:5a:cc:3d:4c:c9:5f:e8:ed:
8e:92:9b:6a:e9:43:ec:ae:53:96:54:56:fd:ae:45:5b:2d:c1:
ac:bf:2a:12:5e:00:b3:33:03:3e:9b:4f:e9:4b:35:6b:fa:35:
36:fd:fa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:12:36 2025 by rpki-client