Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: COuz2Q151jmzeYiksXKWRZxb7FLbfHf+fJCkkM0JXTU=
Subject key identifier: CD:B4:97:82:DE:2C:22:13:FE:1C:7D:57:51:3C:8B:92:7F:8D:26:46
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 019A503DA265220EA0E86A898834215DD753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 14E6
Signing time: Tue 04 Nov 2025 19:00:07 +0000
Manifest this update: Tue 04 Nov 2025 19:00:07 +0000
Manifest next update: Wed 05 Nov 2025 19:00:07 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: xh4kJRIAH1nQ+d5Dq6P15/yd2RLbbom0h0O4DdvtmM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a2:65:22:0e:a0:e8:6a:89:88:34:21:5d:d7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Nov 4 19:00:07 2025 GMT
Not After : Nov 5 19:00:07 2025 GMT
Subject: CN=cdb49782de2c2213fe1c7d57513c8b927f8d2646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:81:dc:dd:ad:c7:00:fe:ea:01:6f:72:56:
6d:c9:e4:62:2b:cd:86:40:d0:01:2b:89:0b:d3:c4:
c1:bf:55:32:27:a2:56:bc:a3:78:75:ae:39:6c:75:
14:e2:b7:3f:09:02:d5:f8:7f:5d:73:e1:04:2c:33:
be:df:36:05:73:4e:7e:36:f2:66:54:ce:c2:d8:e0:
04:a9:cf:8d:bb:d3:4a:e6:4e:6c:57:b4:3d:b9:5f:
c6:53:2d:6f:44:c4:a5:97:33:d4:7b:b8:9d:27:b2:
65:18:16:91:7e:97:70:e8:ec:84:97:e0:95:4b:c8:
fb:5d:ad:a9:28:cc:b1:90:c4:e4:26:08:88:d5:f0:
f3:78:a9:d3:8c:fd:ba:ea:21:c0:21:32:3d:13:9e:
ec:20:23:89:16:65:d9:af:d1:24:7c:3e:c1:af:bc:
f0:c9:28:f5:00:63:b4:38:30:67:57:60:4a:c1:43:
e6:04:a2:76:59:9e:d5:d8:af:22:fa:20:c4:00:e9:
ae:1f:eb:60:cd:5f:87:09:7d:a9:c9:03:50:ac:45:
95:e5:d4:fa:2c:a7:12:e3:b8:7c:71:a3:f1:c2:5f:
4a:12:9b:49:fe:ce:b9:64:47:a2:1a:bb:57:8b:18:
7c:b4:3c:1b:1c:8d:46:af:2d:44:b1:64:b6:74:f3:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:97:82:DE:2C:22:13:FE:1C:7D:57:51:3C:8B:92:7F:8D:26:46
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:09:eb:dc:c7:c8:e1:43:56:f8:a6:59:e8:d5:54:82:7a:4c:
61:ce:a0:23:cb:52:57:24:b4:85:d3:87:1b:8f:31:1e:a4:56:
20:19:37:57:1c:71:d1:3d:f6:3f:8f:3f:d3:83:4a:76:54:0c:
74:4b:1c:da:29:62:5b:ad:81:b9:e7:fa:6c:6a:e1:25:21:01:
cb:00:83:f8:75:a7:cd:ad:3f:cf:18:71:e2:dd:dc:f6:0b:8c:
f5:1f:8c:4d:97:66:fb:c6:80:ff:48:ce:c7:4b:3a:96:e4:48:
fe:03:13:3c:21:30:a6:b6:16:ab:39:cb:aa:06:a7:f8:94:7e:
42:c3:43:4c:1e:78:18:46:16:f3:2c:0e:57:7b:91:8d:3b:25:
88:62:21:12:e8:4d:d3:31:19:75:4a:31:76:cd:86:e6:0c:1d:
30:b3:5c:7a:6c:6c:f4:5e:b8:35:60:25:fb:cf:a7:2d:19:81:
c4:68:f0:e5:bd:8e:1c:83:1c:e9:2d:c0:c6:fe:6b:70:48:fd:
82:f0:c3:06:d9:c6:41:f4:51:e0:0e:66:bd:a9:0e:b4:7f:39:
b0:ca:c4:9b:10:d7:86:e2:72:db:32:59:d2:c5:c4:6b:4c:7f:
8e:bb:15:24:de:4b:41:ad:08:18:d0:46:d6:ef:05:98:54:7d:
bd:38:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:28 2025 by rpki-client