Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: 4+MiB9JhAH1aV5xFyoqUw0YMEs3TiyokX+I+3jnr+F0=
Subject key identifier: 96:7A:E7:28:A0:5A:A8:43:AA:CB:AD:B6:DD:DE:BD:97:99:88:65:49
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 0199228CD5C36A5CD7554BCFB0817F556E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 0528
Signing time: Sun 07 Sep 2025 05:01:19 +0000
Manifest this update: Sun 07 Sep 2025 05:01:19 +0000
Manifest next update: Mon 08 Sep 2025 05:01:19 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: 7Pb34QhS9R2rnyGArX/eil2Zux5TyVq9S6L587cWGWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d5:c3:6a:5c:d7:55:4b:cf:b0:81:7f:55:6e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Sep 7 05:01:19 2025 GMT
Not After : Sep 8 05:01:19 2025 GMT
Subject: CN=967ae728a05aa843aacbadb6dddebd9799886549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:91:27:24:a1:7f:46:4e:d0:07:7b:35:c3:
cc:36:cc:51:8b:2d:b2:69:4b:71:27:67:4d:3d:15:
25:05:60:f4:2c:d4:50:7f:9a:7c:38:ac:d7:e0:0f:
1b:53:39:4b:45:07:17:29:18:c4:2d:db:c5:e0:64:
0f:5d:67:7a:80:66:8b:69:b5:91:31:a4:ed:6c:40:
a6:82:61:65:04:0a:1c:22:4c:17:2b:f4:f3:40:b0:
dc:0c:a7:c7:e3:90:6e:99:07:40:3e:2e:04:ab:93:
ee:82:68:61:97:08:72:21:cc:0f:d4:77:d7:11:7e:
fe:76:6e:a4:f2:bb:5a:fd:b1:90:0e:a6:1a:68:39:
70:3c:2a:f8:e7:8a:10:0d:26:37:42:75:89:55:bb:
27:fd:30:1a:03:b3:66:17:ab:79:73:1f:22:20:7a:
bf:3d:b2:62:fa:ea:c3:dc:e2:62:79:15:bb:1d:44:
c7:02:7f:0d:78:43:26:2f:cc:02:df:23:35:de:8c:
43:4c:ff:a6:4a:b3:aa:ec:76:09:b6:9f:27:4c:ef:
4a:6b:83:3c:7f:83:df:7c:2f:d9:fb:47:6c:54:26:
73:63:09:f8:3e:53:a2:6d:41:f0:e3:d8:e3:7f:aa:
36:d1:90:e7:57:8d:69:bb:53:9b:b4:2e:0f:09:0d:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:E7:28:A0:5A:A8:43:AA:CB:AD:B6:DD:DE:BD:97:99:88:65:49
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f6:83:9a:37:24:7a:38:5e:fe:5b:61:ad:1f:34:0b:54:1a:
74:97:85:29:15:df:24:ab:10:1b:69:95:90:32:12:b7:ce:57:
32:5d:58:ca:ba:31:69:ab:3b:65:89:9f:5e:16:18:99:a7:5e:
d2:2f:01:01:3b:a2:c7:1c:a5:e8:da:98:0c:51:88:62:c0:f5:
c5:d6:27:f9:f1:7e:d4:f4:4c:88:1a:37:71:79:07:c9:86:a7:
f3:69:98:22:7d:49:84:f5:d9:14:60:93:d6:65:bb:4a:2f:57:
b1:d9:07:2d:67:f5:37:18:4d:66:51:9b:f5:46:a3:b9:28:d4:
f2:49:fc:b4:1a:47:37:a3:ae:42:6d:2f:97:bb:de:4b:1a:da:
c1:73:19:34:06:c7:28:39:74:13:fb:9a:17:00:61:00:00:05:
d1:82:9d:16:c1:f6:10:9e:1c:dd:2b:24:44:ac:9f:e0:d2:7f:
c0:56:31:18:57:39:c1:ec:c9:5e:b4:1b:4c:03:72:a3:3a:22:
a7:28:10:88:6a:13:44:f7:26:43:7b:27:bc:7d:dc:0d:b0:34:
67:7a:8d:c2:2b:a4:43:7a:6a:d5:82:88:67:92:3c:3a:cb:e8:
47:6e:16:ba:86:4f:c7:95:89:cc:0f:11:b6:b8:53:28:2f:71:
e7:34:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:22 2025 by rpki-client