Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: qbbivntXDn3rBzq+UqTQmZ26vM93ettP5udwfhqF9NQ=
Subject key identifier: 56:1B:12:1C:78:00:60:EC:24:8A:6A:4F:05:EC:95:AB:87:91:48:D6
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019676E8700DC811BED21A4A539910566DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 03C6
Signing time: Sun 27 Apr 2025 11:01:06 +0000
Manifest this update: Sun 27 Apr 2025 11:01:06 +0000
Manifest next update: Mon 28 Apr 2025 11:01:06 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: j/IcBwPDs7YAzKsQbSPidW/G1b/5uGscQrx0ODZexIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:70:0d:c8:11:be:d2:1a:4a:53:99:10:56:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Apr 27 11:01:06 2025 GMT
Not After : Apr 28 11:01:06 2025 GMT
Subject: CN=561b121c780060ec248a6a4f05ec95ab879148d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:af:29:2d:92:b5:a5:53:4b:60:43:1b:2b:
49:ab:6d:b7:99:72:89:85:09:01:8c:eb:40:a2:4f:
7a:6a:70:b2:c4:e0:75:5e:5a:87:b3:ff:be:88:c3:
da:65:8a:7a:9d:f1:fb:de:b9:5f:72:6d:db:3d:ca:
86:49:e7:33:25:c7:ff:1d:d0:d3:9e:e2:c1:a6:89:
94:9c:3d:14:4b:71:cc:2e:34:8a:7f:f6:1b:38:0a:
38:d1:98:74:bb:f0:ee:bc:75:bc:4c:77:a7:41:97:
14:13:e8:5c:32:2f:7b:09:f9:9e:07:f9:7f:05:7e:
43:b6:16:85:f8:b8:f0:da:45:db:f8:77:27:98:1b:
58:34:47:01:18:b6:0a:2c:a8:8e:3e:a9:e6:43:95:
0f:d4:32:71:4f:f5:00:29:94:49:9f:3d:f4:18:33:
49:39:18:0d:24:91:57:1e:84:61:a5:5a:60:39:45:
27:e1:11:8c:f0:3d:fd:29:b9:92:fc:03:71:3e:97:
a0:fc:49:76:70:58:5d:5a:e2:74:11:b4:c2:57:94:
6d:e2:cf:8d:0f:0d:3d:de:eb:94:40:45:f1:02:5c:
15:17:01:ea:4a:81:b0:6c:22:10:b6:4c:29:19:49:
32:ec:d3:f6:e9:f0:93:ba:53:b6:cf:5c:95:9a:f5:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:12:1C:78:00:60:EC:24:8A:6A:4F:05:EC:95:AB:87:91:48:D6
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:15:2b:4d:62:13:7e:28:bc:70:96:c2:c8:11:25:f7:31:
b0:7c:4e:08:11:0c:6d:94:5b:fa:23:a4:a5:45:af:0c:84:fe:
c3:56:c2:fc:bc:f3:d9:b4:a1:8e:ea:b7:39:e8:1f:d0:8b:47:
bf:51:fa:61:47:68:b6:93:c0:07:4e:4c:e3:32:0e:69:bd:fa:
90:5a:d0:6b:f1:c5:e8:7d:eb:12:c6:a6:35:1e:cd:98:22:a2:
52:1c:72:e3:9c:5c:67:00:6c:d6:08:d0:2b:af:c4:56:b2:ec:
98:ac:91:9c:6c:26:dd:dd:13:2a:c3:1c:3c:19:60:88:d9:e5:
95:c4:dc:e2:d2:91:fe:f3:71:09:61:88:79:e1:31:3d:01:d4:
58:c7:9f:69:a3:fa:61:e4:cb:71:a9:eb:4a:76:13:6e:d9:4c:
79:50:a4:a1:30:89:54:ae:b8:ad:59:ae:48:04:a8:cb:26:d3:
c4:2a:99:8f:97:ad:62:67:63:02:1e:56:4d:2f:f4:bf:a1:6b:
bc:ab:60:c9:5b:2f:84:04:28:12:61:19:9e:1d:4f:2d:48:b6:
22:20:68:b1:bd:d7:e8:6d:a4:e3:d1:49:c3:18:08:57:29:27:
ec:e7:d3:41:0b:3a:b1:78:a2:76:b1:98:1a:cf:a6:96:b2:95:
39:81:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:12:33 2025 by rpki-client