Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: XCu8/7bDjFmBVr3FESgindGmZ/C2y7Sgc+uwHEWG7Qw=
Subject key identifier: B8:76:59:06:AA:74:79:E9:7C:D1:12:7D:92:0D:EC:0F:9D:CD:C6:C3
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 01988BEABF3F86278FFECC34C5764622B731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 04DA
Signing time: Fri 08 Aug 2025 23:01:14 +0000
Manifest this update: Fri 08 Aug 2025 23:01:14 +0000
Manifest next update: Sat 09 Aug 2025 23:01:14 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: uv40b75P30j8fWrnmiTqQG6UUiI6Ok3XBwao+J4m40s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:bf:3f:86:27:8f:fe:cc:34:c5:76:46:22:b7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Aug 8 23:01:14 2025 GMT
Not After : Aug 9 23:01:14 2025 GMT
Subject: CN=b8765906aa7479e97cd1127d920dec0f9dcdc6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:3c:33:26:84:d4:42:15:62:0f:d0:a7:c8:
bd:a4:ab:03:32:e7:a5:3e:85:dc:62:28:f8:03:60:
50:cc:d5:6d:f4:2c:a5:a1:0d:a7:2e:ce:ff:b5:bb:
3a:e1:76:c8:cd:79:a0:a0:5e:53:02:3c:27:aa:a1:
46:25:41:ca:77:97:c5:04:ed:e4:91:c1:cd:de:0c:
7d:0b:78:52:8d:12:27:e4:a8:9b:5f:45:7e:c5:2c:
e7:d8:d4:18:45:7d:b0:33:73:0a:76:f5:9d:d5:07:
26:fb:97:c0:99:5f:60:44:d2:41:77:56:4d:ec:a0:
bc:eb:af:b7:45:5c:e4:df:92:31:d1:0f:f1:ae:18:
14:b6:f8:1b:ba:9c:c4:ac:10:7a:0e:dc:79:41:91:
14:0b:ba:d2:6a:71:75:e9:9d:69:90:c5:33:3d:dd:
73:7d:38:1f:07:98:ba:e3:e6:ce:15:2d:7b:1e:37:
d3:c8:62:b2:34:31:aa:b8:60:f4:42:ba:04:46:ce:
6d:0b:3f:96:ab:de:0b:e3:71:45:0a:6c:35:39:61:
43:a8:ae:e0:55:b9:07:39:f3:4a:c9:d1:f3:45:75:
2e:ba:ce:75:f6:87:d0:ae:55:da:ca:57:71:2c:5d:
20:f5:0a:2b:ce:d0:45:94:db:96:77:15:69:02:f0:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:59:06:AA:74:79:E9:7C:D1:12:7D:92:0D:EC:0F:9D:CD:C6:C3
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:af:4b:73:b0:99:a8:3f:bd:5f:8e:9f:bc:a8:b4:42:a2:
9c:84:ff:b2:4a:f2:54:ba:54:e6:83:f8:57:6c:cf:6f:ef:00:
0f:39:07:f9:0f:28:4c:89:5c:ea:3a:66:5e:d3:92:b8:c9:ad:
68:30:64:9b:74:d8:fd:6f:a4:d5:53:12:f4:9e:be:34:b5:fd:
ec:cb:0b:99:9b:5a:22:ed:4b:67:62:49:41:c0:f5:d0:04:b5:
3a:6e:bf:71:fb:45:44:e3:a0:66:24:c2:1d:b5:98:26:85:37:
1d:3c:87:4b:a2:62:8a:12:49:51:44:76:1e:5c:ee:af:c6:e2:
1d:54:81:4d:d4:27:99:18:b7:c8:f8:78:39:11:52:df:cb:51:
05:99:73:1e:03:60:79:e3:20:95:d0:82:3d:81:63:42:38:5e:
66:2c:73:a2:87:62:bc:fd:ad:2c:27:4a:00:f3:07:0e:16:73:
cb:86:cb:96:37:7e:b1:3a:17:52:2b:c0:6f:34:71:cb:6e:1f:
73:cc:de:20:1a:4f:c6:59:3d:73:ee:07:67:14:19:ba:51:55:
30:b6:34:1d:16:f7:3a:45:a9:15:3c:0a:89:ae:b0:ea:6f:2a:
ae:16:19:a8:b8:28:81:8f:60:45:85:e2:5b:0c:24:a6:c0:2f:
3b:fc:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:54 2025 by rpki-client