Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: PgVWDj3HgT1IlVHrh1iP/SbNJN7lCfLGH5QyoZF382Q=
Subject key identifier: CD:36:19:B7:AE:EF:0C:8E:A4:E7:34:D5:9C:25:C7:93:61:F8:E5:FB
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 0199FEB47A56EDFA7F5D5A2C89DCD437751A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 059A
Signing time: Sun 19 Oct 2025 23:01:04 +0000
Manifest this update: Sun 19 Oct 2025 23:01:04 +0000
Manifest next update: Mon 20 Oct 2025 23:01:04 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: TP4afTZ6xssR9ougD/glM2UdOUlWfZ4SazU5sYt9qt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7a:56:ed:fa:7f:5d:5a:2c:89:dc:d4:37:75:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Oct 19 23:01:04 2025 GMT
Not After : Oct 20 23:01:04 2025 GMT
Subject: CN=cd3619b7aeef0c8ea4e734d59c25c79361f8e5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:11:43:49:99:4b:7c:50:1f:79:eb:68:99:
88:8a:0c:ff:03:c3:96:f7:fd:a3:8d:34:d8:7f:40:
92:6a:96:3c:4a:c2:5b:1b:4b:27:eb:21:9a:34:e8:
07:6a:e0:23:a9:57:bb:0a:36:23:af:09:e6:0a:23:
6a:81:0e:32:4a:54:78:48:13:98:f3:05:04:25:06:
20:01:94:b5:09:a9:4e:ff:8f:59:04:83:63:97:5a:
aa:fd:80:4f:15:da:c8:68:77:56:53:9c:85:84:aa:
6f:ec:0c:10:ad:22:f2:7b:d5:e5:78:96:24:fe:4c:
0b:81:e0:7b:9d:1f:75:85:b1:d9:db:e9:4b:de:a1:
4c:22:70:e5:63:d4:6f:12:06:80:36:c4:7e:63:70:
f6:10:00:3c:5e:5b:01:7e:14:68:31:dc:a6:5b:3d:
a9:84:25:e8:bd:80:1f:a3:07:2b:07:9e:10:06:db:
47:dc:a8:da:1e:05:80:56:9c:42:cd:29:66:c5:00:
4e:5c:7b:6b:80:ff:17:2d:73:95:fd:ef:ea:cc:5a:
4c:bf:5d:38:1d:1c:65:4a:b3:ad:cf:8b:10:28:1b:
13:c2:33:ef:11:10:90:82:c6:b1:03:56:0f:a3:1c:
a4:12:7c:e3:fc:65:19:c6:a9:14:83:44:1f:83:03:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:19:B7:AE:EF:0C:8E:A4:E7:34:D5:9C:25:C7:93:61:F8:E5:FB
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:31:e2:af:63:a7:87:0d:68:b4:8e:41:b6:af:13:47:f7:dc:
01:be:41:9e:7a:72:ea:08:84:da:1b:70:93:ea:7c:7a:73:e3:
4c:94:9b:d1:a1:9e:33:2a:c8:74:42:ed:56:58:69:b6:5c:71:
5d:24:95:79:3a:88:76:e3:26:1b:b1:eb:98:48:c3:c1:3a:9b:
e7:ce:58:0a:67:7f:47:0c:c0:5a:84:00:7e:8d:06:8b:12:7a:
1a:a6:60:0e:ca:7c:3e:08:a2:f8:ce:66:e0:51:67:b8:08:1d:
7a:bf:13:e7:a9:f4:d7:c4:e1:98:95:cb:e9:a3:92:fe:5d:ed:
a2:ec:d1:0f:b2:58:d5:7b:52:d9:02:48:f3:c4:8a:9c:0f:b3:
28:bd:8e:f5:7a:5c:4c:60:4e:e4:f8:c2:1c:c0:d5:6a:84:02:
b4:a1:a7:42:35:2c:8a:d6:6f:13:6a:5b:ad:6a:e6:09:0d:96:
e4:b6:78:ec:4d:3a:91:0f:8d:2b:98:59:88:b9:1c:22:29:40:
86:32:7b:8c:45:fe:8e:c6:b3:16:89:ff:4d:2e:a1:29:59:fb:
61:7e:bd:46:f0:79:df:0a:59:58:0e:ab:c1:f7:9f:e3:c8:79:
84:06:e0:48:b9:45:7c:b0:d3:55:56:eb:4c:42:d3:ba:e8:91:
bf:89:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:30 2025 by rpki-client