Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: H5O2DMZOg8CF0GPVF8x5gVH182Tnw0gTZd84COYWQ8M=
Subject key identifier: F0:F3:45:B9:88:7C:9F:8B:48:EC:2F:ED:D5:B5:1B:96:D4:D5:44:27
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019677560E0ECA200E8266B2DEEFF835D787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 12E8
Signing time: Sun 27 Apr 2025 13:00:50 +0000
Manifest this update: Sun 27 Apr 2025 13:00:50 +0000
Manifest next update: Mon 28 Apr 2025 13:00:50 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: RXf+i54x4trAKVRmDbLQONvkFQFO4GMBfjlEdr0PH6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:0e:0e:ca:20:0e:82:66:b2:de:ef:f8:35:d7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Apr 27 13:00:50 2025 GMT
Not After : Apr 28 13:00:50 2025 GMT
Subject: CN=f0f345b9887c9f8b48ec2fedd5b51b96d4d54427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:67:bc:aa:cb:c0:12:aa:84:e2:61:b9:c2:
c9:04:e4:8b:5a:ac:48:14:9c:c7:d0:55:e9:1f:6c:
60:05:08:ee:12:5f:c6:21:5e:0d:51:65:fa:40:54:
dd:99:26:c2:c8:6c:89:a2:e3:cd:d3:e5:e8:a5:5c:
93:c8:fd:d1:95:07:71:0d:d9:23:f0:e8:95:b9:73:
48:d5:71:79:69:84:b8:9f:fc:bf:00:8f:4d:d0:92:
e3:4e:54:ab:e9:ba:c3:03:9b:28:e2:bb:b2:0e:5b:
06:ae:11:ab:ca:84:a8:f7:04:07:73:0f:78:46:79:
84:4e:a7:f6:a9:e1:2d:27:5b:b5:af:dd:c2:e5:be:
09:08:8b:1f:07:b7:35:f0:87:c9:bb:24:7a:27:6b:
2c:75:27:29:1f:45:d6:97:62:e8:0a:14:70:a6:6b:
7b:68:b6:be:37:c4:14:d4:bd:da:93:90:0d:04:e7:
97:ba:16:c3:7c:2a:36:dd:b5:d4:06:f1:58:9c:d1:
72:24:4f:ba:11:a0:8a:d7:17:a1:4e:38:96:1f:4a:
c2:29:32:51:d4:50:c7:ed:06:09:4c:d1:76:84:92:
d6:e1:f4:3e:72:c4:92:74:63:9a:c3:26:a1:05:ba:
72:53:65:8e:c9:ee:89:08:3c:71:80:3c:8d:32:69:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:45:B9:88:7C:9F:8B:48:EC:2F:ED:D5:B5:1B:96:D4:D5:44:27
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e9:0e:8c:ad:1d:a0:86:b5:60:7d:a5:2c:e7:05:98:ce:37:
f7:2c:6a:40:d2:2d:18:4c:a3:8e:7f:90:29:cb:8c:3d:73:fb:
c9:3e:0e:36:4a:80:8b:c1:f9:88:4e:f0:f4:6f:7f:17:a5:0d:
7e:13:f6:a4:2e:0f:a9:b8:f5:84:42:04:e9:07:7d:e5:f5:b4:
4d:68:08:6b:62:84:77:a6:1a:01:5c:bb:eb:58:92:fe:20:5a:
d6:7c:bc:b9:e6:79:46:50:c5:9a:ce:dd:5b:0a:aa:4e:a8:36:
50:5b:f6:45:f2:c0:c1:b8:70:44:42:d6:b7:5c:42:66:23:03:
40:4e:fd:0b:ac:bb:3d:73:38:7a:fd:e2:fe:73:9d:79:78:08:
f9:69:95:db:aa:f1:fd:b9:62:18:bf:d9:38:fc:a7:a1:d6:2a:
e8:e5:7c:e9:46:bb:bf:8c:81:47:b7:0d:2f:30:19:6c:c6:44:
b5:dc:87:f4:f4:22:a6:f7:8d:99:25:2c:1a:66:89:1a:eb:42:
d6:96:e4:86:3b:fd:41:ad:d4:bd:56:4b:77:53:16:c3:90:f2:
34:06:a3:58:fc:88:dc:01:63:54:31:b6:ec:d2:49:a7:81:73:
67:e8:3f:82:48:8f:8f:bd:44:f2:02:86:c6:d7:fa:d3:a3:bf:
76:97:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:24 2025 by rpki-client