Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
File: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft (raw, json)
Hash identifier: FLjCWwufMxCOPRSKB4fC5mLVpVErfd5TPim4cO509ck=
Subject key identifier: 47:77:C5:73:BD:8A:1E:BA:EB:DE:A4:68:C5:F8:50:4D:E3:BF:5F:4F
Authority key identifier: 25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
Certificate issuer: /CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Certificate serial: 019A72937FDDAE59CD68D0618998F836FD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
Manifest number: 05D6
Signing time: Tue 11 Nov 2025 11:01:00 +0000
Manifest this update: Tue 11 Nov 2025 11:01:00 +0000
Manifest next update: Wed 12 Nov 2025 11:01:00 +0000
Files and hashes: 1: JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl (hash: GXTKB1s61Z74Xj6BNDdjRA4z6YZo8ueaXd14fwYu3wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7f:dd:ae:59:cd:68:d0:61:89:98:f8:36:fd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a008ff66d456e43efdc1196b17d8443d2397f0
Validity
Not Before: Nov 11 11:01:00 2025 GMT
Not After : Nov 12 11:01:00 2025 GMT
Subject: CN=4777c573bd8a1ebaebdea468c5f8504de3bf5f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:a6:5f:88:d9:f4:cc:06:89:da:fa:5f:03:
0d:08:40:01:16:15:85:f2:33:1a:cb:28:bf:e7:32:
4a:34:7d:c9:d3:76:ef:78:22:8a:7e:03:ea:e7:8a:
2a:48:92:1c:e2:8d:41:b6:e0:dc:50:3f:9b:e8:08:
bb:ca:db:04:ae:40:ca:47:bd:c8:4a:42:82:87:a2:
99:6f:49:8f:cd:5e:2e:c6:24:4b:f5:47:12:f4:b4:
f0:26:5f:bc:10:22:5d:e7:99:13:57:d2:da:e6:e9:
9e:86:9a:fc:df:19:b9:b2:bd:b7:63:11:f2:28:1d:
ab:6a:e4:72:8f:1e:b2:de:2a:31:bd:a5:a0:c9:7a:
17:01:eb:09:18:80:35:90:69:ee:b5:c8:cf:2b:17:
c1:27:15:69:9d:e4:26:ee:f6:7d:46:42:c5:27:ea:
48:cc:d6:83:36:1f:59:eb:48:cc:01:bf:68:21:c1:
6d:79:9d:31:11:1c:94:df:bf:b0:1a:4c:de:87:dc:
68:d7:24:11:cb:65:01:50:fa:77:b6:6b:16:91:c1:
31:c5:5e:87:8e:5a:38:43:11:5d:b2:36:1b:88:e4:
0b:e2:d2:f1:58:1c:d6:27:88:13:97:9e:c2:90:75:
a0:cd:4a:cf:ac:5d:df:06:62:2d:29:7a:df:5e:fa:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:C5:73:BD:8A:1E:BA:EB:DE:A4:68:C5:F8:50:4D:E3:BF:5F:4F
X509v3 Authority Key Identifier:
keyid:25:A0:08:FF:66:D4:56:E4:3E:FD:C1:19:6B:17:D8:44:3D:23:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e3b4d4-2501-4a5e-9f24-fbfef7461010/1/JaAI_2bUVuQ-_cEZaxfYRD0jl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a6:20:33:51:70:7b:84:32:2f:36:75:c4:36:f1:4f:ec:5a:
d0:ef:93:ed:28:40:c7:c0:da:eb:8c:8f:86:b2:52:79:b5:56:
f5:4f:dd:a3:a2:71:32:72:53:0f:7e:6f:5a:fb:a0:db:25:ae:
a8:d6:19:a4:aa:7c:18:9c:17:4d:8b:ac:64:13:e9:63:10:44:
3a:47:4d:0f:d1:7a:3a:48:2a:3b:7b:c5:41:fd:73:cf:d3:b9:
94:14:b2:4e:b8:a9:6b:b1:e2:26:79:c3:d3:c4:86:0a:24:14:
b5:62:9a:75:dd:cc:9f:c7:94:84:e5:0b:1c:85:04:e3:42:a5:
66:63:01:4d:76:af:d4:95:08:87:a9:e5:45:1a:f4:59:1c:d6:
38:38:53:3e:30:87:d0:ce:06:93:c4:85:a8:de:6c:cb:ff:9f:
1b:6e:5d:8e:b4:dc:53:55:e9:60:c7:19:4d:f5:d8:22:74:c0:
95:7a:0a:5b:00:ac:7d:65:81:3c:b0:e7:58:43:5d:9f:a3:66:
d7:be:51:7b:1e:2e:bf:dc:59:94:01:db:9a:78:07:4e:b0:88:
a7:e7:01:64:94:39:b8:2f:59:03:87:aa:7f:dc:e2:85:f5:99:
eb:35:5f:2f:c6:72:e8:c2:b0:9d:68:de:c1:d5:9d:e2:13:ca:
90:2f:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:56 2025 by rpki-client