Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: ifxzfddyuH08gg+g/OGKKcMDZ7nmsDaHGt5UPNvgTkk=
Subject key identifier: 33:C2:60:96:AA:0D:C5:07:AA:0B:C8:37:59:79:B5:19:34:FF:50:72
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 0197B77C7FB2000769FCF312F141C7400E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 046C
Signing time: Sat 28 Jun 2025 17:01:19 +0000
Manifest this update: Sat 28 Jun 2025 17:01:19 +0000
Manifest next update: Sun 29 Jun 2025 17:01:19 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 05jZa/Ju0dNf5V31UjrNowoT/TIm5s4d/hwkxQmE64Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7f:b2:00:07:69:fc:f3:12:f1:41:c7:40:0e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Jun 28 17:01:19 2025 GMT
Not After : Jun 29 17:01:19 2025 GMT
Subject: CN=33c26096aa0dc507aa0bc8375979b51934ff5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:f8:d3:0b:47:4d:7b:47:d4:03:df:4d:fb:
54:69:3c:e5:61:38:7e:ee:f1:b7:1b:f4:e9:04:cc:
0a:53:e7:31:62:bb:93:55:ba:b3:52:42:05:92:a3:
24:26:08:d4:b7:96:60:3e:f6:b3:c5:23:aa:65:a5:
44:1d:5e:14:01:97:d3:6e:f9:44:0a:de:19:9d:c2:
3c:42:7b:20:b9:c0:05:51:98:61:23:e5:c7:11:3f:
58:8d:23:0b:94:fa:bc:f1:67:32:e4:16:b6:fa:2c:
05:01:47:b0:92:58:e0:66:70:ea:95:60:a6:ef:84:
e0:02:26:d5:7f:17:c5:22:71:55:ce:60:d8:3d:37:
05:cb:63:42:3e:93:da:0b:bc:40:f1:b0:72:dd:fb:
dd:40:6d:05:f9:78:a8:85:b7:c7:c1:10:5f:e8:1e:
62:da:42:37:e9:6a:32:d7:48:9e:5a:8a:a6:4c:38:
65:12:99:53:aa:dd:e4:f8:22:60:3c:00:a3:a8:90:
70:0b:be:0d:ad:53:f7:98:e7:2c:78:05:03:57:cd:
d6:eb:73:66:7c:12:55:2e:f4:7e:f2:f0:e9:63:0a:
bc:8c:6f:4f:81:29:93:12:da:c5:14:94:47:4c:63:
e0:a7:3f:83:b4:4a:a2:4e:b5:c2:69:39:dc:40:f9:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:60:96:AA:0D:C5:07:AA:0B:C8:37:59:79:B5:19:34:FF:50:72
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7a:72:da:24:1b:3b:81:a1:29:71:2d:af:4e:af:e5:5c:bb:
ac:64:09:1e:d1:2a:d3:2d:09:2a:2e:cc:11:ae:19:26:d6:79:
d3:b6:c9:1c:63:ba:3e:98:73:02:ac:ba:15:ec:61:60:23:3f:
4c:bd:64:76:42:62:cd:0c:db:20:82:b6:1e:b7:ff:e4:98:1d:
b9:dd:98:b9:37:1c:ad:36:85:f2:49:d8:69:ad:79:23:dc:10:
28:1e:37:2f:80:cc:20:2c:20:a4:0d:f0:39:42:76:b1:e6:8a:
86:39:d7:8e:13:6c:e7:11:03:d3:71:81:f6:2e:cd:5b:8e:33:
74:58:a5:6d:66:8d:88:b6:43:ae:b0:8a:2c:cd:57:fd:aa:b9:
80:4e:14:f7:96:67:89:84:bc:32:93:1d:1f:73:e6:70:cd:62:
cc:ad:42:3c:6e:89:5f:81:a3:97:87:59:94:06:f7:1d:0b:53:
cc:b4:18:56:57:5a:d2:9a:3a:00:cc:83:e0:da:3e:6b:b5:d6:
e4:d1:6c:11:2a:bd:a8:0a:74:b6:54:23:7a:70:bb:52:52:5f:
3b:e3:fa:fe:87:91:f8:cf:0d:f5:ba:88:39:67:51:02:3e:5c:
c0:2d:bd:f4:e7:ba:c4:96:da:63:4f:70:d1:5f:88:96:c8:ab:
e1:52:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:52 2025 by rpki-client