Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: 7DT0nWSsT4ntDzIkiqec4rFYrtSW/xrwrnRM7M4DMDg=
Subject key identifier: 49:8A:94:AA:76:C2:D9:E5:15:3D:C0:FE:E7:FE:48:F6:8B:47:3D:AC
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019A4DE177A7B0DA319A494266A0C4C1CC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 05C3
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: YgxtfauXCqKF+SJIjfWFMiHtABcsBdYqh577ypUijpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:77:a7:b0:da:31:9a:49:42:66:a0:c4:c1:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=498a94aa76c2d9e5153dc0fee7fe48f68b473dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:fc:0e:c1:48:f4:31:b8:11:ae:a2:b2:df:
af:09:e5:66:35:df:8e:ad:06:c9:90:88:ab:e2:9f:
d8:b4:50:3d:21:3d:87:09:8a:14:28:3d:d1:b4:2b:
a7:ce:06:26:46:af:eb:6b:69:e6:57:16:41:00:d0:
9f:e7:a4:1e:0d:0a:f6:40:b5:63:92:31:96:e4:59:
3a:9c:fd:73:fe:59:74:93:c0:3e:bf:f6:a4:51:dc:
bd:81:66:c7:3d:d2:ba:a5:30:0a:64:42:ec:fe:b1:
d5:e4:d2:7b:79:ae:26:4e:b0:d3:7b:ad:4f:07:4b:
89:be:fa:72:54:36:7c:12:a4:e5:e3:e7:f3:4f:4f:
07:1b:61:ea:e3:a2:36:2b:a4:31:c3:0e:cf:77:16:
13:86:0f:ed:ad:9f:68:31:17:b4:4d:1f:a7:28:f3:
9d:95:da:f6:45:bb:2d:d1:5d:74:86:02:c9:54:85:
50:4b:95:62:53:f8:5b:0c:cc:fc:7b:9d:78:ce:f1:
e5:be:c3:72:fe:97:cf:06:91:4a:30:91:64:52:f9:
46:dd:08:59:7f:e5:22:8e:6f:45:72:c5:fb:05:fc:
79:11:3d:b3:47:dc:51:df:ec:75:6b:a0:4f:02:1c:
5b:7e:5f:0a:4b:71:b4:75:4e:40:a1:46:a1:74:87:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:94:AA:76:C2:D9:E5:15:3D:C0:FE:E7:FE:48:F6:8B:47:3D:AC
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:53:8d:5e:69:41:87:43:4b:5f:cb:47:00:3a:6f:34:a9:87:
ad:f4:63:f5:24:e4:46:07:ae:8c:b1:ac:8a:56:06:b8:c7:1e:
65:ce:57:60:fa:72:2e:a4:ad:20:a8:0d:ff:dd:43:dd:57:77:
31:bd:18:92:58:1c:d1:78:2f:aa:e1:49:d0:2b:0a:de:3a:8d:
c7:19:d5:8f:56:f5:49:75:b6:5f:71:a8:08:ea:e6:ac:65:26:
ab:42:74:a1:9b:56:4f:55:f9:64:4e:35:42:fd:35:57:09:8e:
8a:bb:fe:cd:22:4a:f3:0e:22:45:80:bc:2c:74:24:f3:8a:ea:
4b:57:e9:4f:a3:bd:c8:ab:1c:f0:88:3f:22:ca:26:28:52:c4:
70:82:d2:50:0e:57:4c:27:e3:05:35:e7:67:ee:93:0e:aa:a7:
ad:f9:11:3f:61:5c:45:9f:87:c9:b2:d5:37:a7:7b:ab:f5:c5:
63:d2:8c:b3:6b:d1:af:99:83:73:12:96:ae:e2:00:16:8b:cd:
18:81:bc:a7:d2:4c:10:d2:79:64:ff:73:f8:3d:03:9c:9f:b4:
19:62:07:34:64:14:47:bc:68:3b:0e:ff:ac:06:81:56:d8:d4:
fc:93:36:97:61:2e:0b:f7:0f:27:a0:e8:69:17:e6:63:ab:aa:
6c:52:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:08 2025 by rpki-client