Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: n1SyfTwggYLRNZfeaPAJ0/441vVZl4FwsoVtRJqiswI=
Subject key identifier: B4:5C:F8:46:BC:F4:9B:4C:5A:10:9A:AE:C2:AA:4A:E6:BA:2D:66:BD
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019773E4FB006D08F96DE466B84042DDA658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 0449
Signing time: Sun 15 Jun 2025 14:01:15 +0000
Manifest this update: Sun 15 Jun 2025 14:01:15 +0000
Manifest next update: Mon 16 Jun 2025 14:01:15 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 2NVf6pMwgrxISjzvNwWiTqwTNYLPIbhYTEtS6AAVW+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:fb:00:6d:08:f9:6d:e4:66:b8:40:42:dd:a6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Jun 15 14:01:15 2025 GMT
Not After : Jun 16 14:01:15 2025 GMT
Subject: CN=b45cf846bcf49b4c5a109aaec2aa4ae6ba2d66bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:74:c6:2a:f9:73:77:ea:29:04:18:a4:dc:
85:bd:d2:a3:bd:0f:b5:7f:a3:56:0f:a9:55:fb:c0:
16:3d:05:99:28:2a:d9:dd:37:0c:38:b1:72:d1:9d:
1c:eb:3b:b3:56:a3:d8:43:06:31:00:50:cf:28:d4:
86:67:ef:5a:37:71:fc:97:0d:af:ef:9f:fa:85:18:
6f:ec:ab:43:06:7c:23:67:86:b2:35:17:ad:dc:6c:
d3:29:65:d4:38:a1:6a:50:84:13:2a:57:cc:62:61:
e9:f6:1a:3f:20:3a:14:b6:42:b4:f7:d7:15:a4:27:
19:d8:fc:53:aa:35:a4:fd:8c:17:91:46:92:7f:00:
ff:b7:d9:47:da:15:f5:c1:78:fb:1d:d6:30:2b:f6:
3b:cd:f7:3a:89:d9:61:5b:89:30:90:3d:89:71:75:
b6:1c:ad:08:18:89:65:65:72:1a:eb:e9:14:20:fc:
6c:1f:a5:b4:88:d9:6e:f0:a0:45:3a:7e:ff:0a:d0:
01:30:cf:9e:e8:9c:9d:35:b9:d6:73:40:17:28:27:
dc:41:35:e2:ad:b9:29:9c:85:0d:5d:f8:e8:82:c4:
ea:b6:c9:e2:ed:47:a0:dc:e1:86:e0:65:d5:5e:21:
7b:01:76:6c:b7:98:7d:46:52:af:6f:ca:55:15:5d:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:F8:46:BC:F4:9B:4C:5A:10:9A:AE:C2:AA:4A:E6:BA:2D:66:BD
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:53:62:18:b3:35:a0:74:45:69:10:98:b0:5a:62:66:0c:5e:
4e:fc:54:a3:e1:8c:74:43:fb:9b:a6:03:81:0a:88:83:b4:64:
39:e9:2f:da:ee:b1:b1:30:15:df:ae:db:a5:1f:e5:94:23:54:
2d:ec:0f:9c:81:ca:37:e1:13:dd:2d:c3:d1:6f:62:b4:8a:8a:
cc:fe:60:91:ab:8a:1a:d0:e3:7f:50:e9:f4:db:73:41:e1:61:
d0:9c:3d:81:b4:76:e1:75:18:da:e5:2c:68:02:f9:a7:e3:49:
8e:b6:dc:fa:19:b2:f4:c2:ed:e9:67:a9:bc:eb:fe:ea:5e:77:
3e:cc:fc:95:40:e7:76:f5:72:19:ce:2f:e9:7c:80:37:a3:ac:
54:45:81:ef:49:82:fb:79:57:8a:a4:81:4f:0d:2a:91:9f:72:
74:2c:20:1b:08:3c:5c:ef:d5:71:29:74:d0:f0:26:9f:a9:3e:
2b:f7:60:6f:8e:c8:bc:0c:09:3c:26:d9:89:17:eb:4b:29:9b:
5f:31:0f:37:18:55:86:46:c5:cb:ec:7c:aa:7c:81:b4:6a:e6:
11:45:d5:d4:1c:e5:bd:32:6b:78:25:41:c2:89:cc:18:28:cf:
27:1f:51:7c:66:54:65:d7:3f:8e:fb:34:8e:d4:4c:f1:36:59:
1e:25:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:44:22 2025 by rpki-client