Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: 8q/pZ8esepxmCBpl3WWQHXbEdDSAD8kGrIudJYH/M/w=
Subject key identifier: 55:17:02:94:BC:25:D4:4C:4F:F7:CE:02:0E:61:F0:49:30:A5:FF:A9
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 0198D54E6F4EBB406F72E3A3377547963DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 0500
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: LXqoN1mIckQHIYngo/Wn6+QbqtgxXFWQpEJcYO4iWNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6f:4e:bb:40:6f:72:e3:a3:37:75:47:96:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=55170294bc25d44c4ff7ce020e61f04930a5ffa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:0e:8c:db:ca:eb:25:04:de:44:b1:3a:7e:
ea:36:6a:c6:86:48:45:20:06:9a:56:85:d4:8b:ff:
df:10:ec:c2:70:16:cc:6a:a9:75:c3:3d:ba:ba:03:
28:57:c3:96:cb:dd:87:6d:27:9f:83:d9:64:32:44:
13:75:f6:6c:4b:3c:98:d1:f5:37:55:27:64:5c:b2:
4c:61:e0:90:fe:8d:53:45:b1:8a:f7:13:1d:38:52:
38:ae:cc:85:26:5f:01:d9:53:23:31:80:e7:58:06:
ea:2d:47:b0:34:78:06:5f:c4:f6:4d:0e:be:ce:74:
fd:4d:48:f7:d3:97:81:31:23:a5:cc:63:61:5c:de:
b2:48:f2:5b:2d:6c:26:2d:d7:62:92:a5:05:d1:3e:
da:25:3d:9d:6a:c9:5b:5f:0b:e3:0a:73:82:76:70:
ca:4e:e3:20:dd:c9:c2:cf:b5:da:95:32:7b:98:a5:
05:56:ee:45:b7:eb:82:20:d7:4d:8e:7f:0f:7c:ee:
fb:15:8e:b8:94:b1:06:a8:8f:d3:40:be:55:d5:4c:
33:ea:d4:6e:33:06:31:41:70:13:33:3b:ee:a1:0a:
53:aa:01:67:19:3e:d5:58:2b:dd:3e:da:a9:b7:3a:
92:03:81:9d:e9:b7:9e:b2:f6:bb:84:6b:6b:b1:23:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:02:94:BC:25:D4:4C:4F:F7:CE:02:0E:61:F0:49:30:A5:FF:A9
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ea:12:65:5d:0c:20:81:e7:e9:2f:c2:aa:53:27:40:27:f8:
b6:14:6c:19:e8:f3:6f:c4:ac:32:4d:23:79:5e:37:dc:20:b3:
7d:1c:12:f6:a7:5e:b3:8a:47:25:54:8b:18:5a:6d:f3:17:12:
40:23:71:54:85:55:2e:7e:d9:d8:1a:32:de:97:98:90:27:cc:
e9:9c:e8:ca:ef:c0:d6:e2:e9:3e:00:38:28:ec:c1:c9:50:33:
38:1c:e7:7d:df:0a:d8:75:45:e1:d8:4c:7a:13:c0:5e:a5:eb:
28:87:59:a6:eb:6f:8f:ab:41:3d:c4:9e:e3:af:73:b0:30:48:
d1:47:0b:d4:0f:57:0a:e0:51:ae:6d:cd:4e:9d:0a:91:43:0a:
b6:62:29:b9:2a:85:9e:46:a5:93:1e:7f:2f:57:c3:ce:a0:ee:
73:df:c7:eb:36:22:59:cb:7f:ed:75:af:f9:56:9c:b2:87:97:
84:d5:60:87:8a:91:6f:8e:01:b9:43:a1:40:9c:ed:10:84:9f:
64:4f:93:ad:12:f7:96:af:ee:c0:7e:18:83:be:cb:15:0e:12:
9e:a9:22:a8:68:e4:5a:ff:42:82:3d:0c:a6:9e:88:ae:21:1c:
d3:8f:8b:2d:95:0f:a4:e1:09:91:de:b8:a0:d5:bb:98:a7:b7:
cb:34:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:50 2025 by rpki-client