Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: OYg3a2Kdx5Qv1IXK2ODO6zcrhfEEBNkS+rQTeaZCtdw=
Subject key identifier: 3A:A3:F1:4C:A9:BE:C6:96:F5:A9:32:C6:58:E3:35:F9:23:E2:DA:94
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 01976C9905DCFE4807DB83BD4FF0D91FABAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1367
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: AhMIxou/b1/SFcKGCxNfyIQJjw3SHWHmt1Qk/XCntLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:05:dc:fe:48:07:db:83:bd:4f:f0:d9:1f:ab:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=3aa3f14ca9bec696f5a932c658e335f923e2da94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:62:b2:92:c4:25:ca:9a:2a:79:aa:35:5b:
11:c8:2b:a4:36:b5:6d:49:ad:2e:7f:cf:71:ff:73:
64:79:4e:84:26:64:ee:36:22:4e:fd:c2:58:c1:51:
52:77:cf:f5:2d:64:1c:c9:ed:13:56:6f:e2:52:5b:
b2:0b:42:dc:d7:1a:58:3f:fb:b9:48:2e:3b:7d:48:
1b:3f:2e:d5:98:b7:ea:08:ea:26:ba:39:7b:b9:f4:
a0:44:e3:eb:9a:09:61:e2:72:7d:4d:16:52:d2:ce:
6e:db:12:9e:2a:45:26:c9:82:1c:2d:ce:e9:0e:69:
d1:2c:35:0e:36:fb:52:13:b4:ba:3a:d9:9f:e0:47:
82:a5:9a:6b:65:8e:3b:61:0b:79:26:44:9a:d2:cf:
12:51:7b:cf:8e:3b:a9:e1:3f:68:0f:6d:66:15:8b:
c3:a1:40:73:e5:ed:d4:c4:83:0a:6b:34:97:ae:91:
61:3d:a1:b2:25:19:4a:cb:00:e9:f3:f3:2c:4f:ec:
22:5f:23:70:41:49:36:e0:ee:d8:0c:4d:6d:40:2d:
ab:56:96:59:57:ba:84:5a:33:10:a6:4c:c5:44:ff:
73:03:bf:9f:5e:2a:e5:24:94:75:7e:72:7c:60:b4:
61:a1:4e:ef:c0:4b:64:52:1b:e8:ca:bd:91:3b:3b:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:F1:4C:A9:BE:C6:96:F5:A9:32:C6:58:E3:35:F9:23:E2:DA:94
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0c:db:6a:6f:e4:ac:40:dc:ad:75:5a:7a:41:3d:93:84:52:
3a:55:0f:9e:fd:3b:ed:4a:8f:f0:ff:ee:97:46:b6:f8:3c:a2:
8c:06:99:d8:d1:55:41:26:ff:91:25:03:0a:87:6f:c9:c2:4d:
28:a1:f8:8f:80:e7:19:51:0e:ea:56:fb:aa:bc:3b:4b:ab:e9:
e0:de:be:3b:22:63:5e:ad:47:45:8c:76:d9:fd:7d:8a:c6:82:
0a:28:b8:6b:e5:b8:d3:c4:78:82:09:01:b7:9b:37:9e:39:d6:
4f:45:8d:16:77:fa:ac:f8:6a:34:49:00:49:9b:af:97:6c:d9:
ac:34:f5:83:8c:99:79:67:be:7d:78:dc:98:06:87:e4:c6:00:
2a:76:31:e2:09:4d:14:69:a4:23:87:18:a7:72:2c:1b:6c:36:
f3:17:06:0f:dd:83:9b:1b:85:0c:5e:e2:29:34:5e:25:6d:6c:
f3:2b:33:57:ca:24:3b:9c:78:4b:36:26:c5:56:82:ad:62:3e:
7e:41:da:e0:ba:31:8b:69:73:a3:e4:cc:32:d3:c9:c1:ea:52:
49:de:36:00:48:c1:d8:6b:b7:a1:dc:2b:96:2e:5d:11:fd:08:
a9:a6:e0:ff:d0:29:43:28:26:92:5e:11:7d:c6:50:3e:10:5d:
cb:97:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:49:27 2025 by rpki-client