Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: J2fC7WwzdYp0zBJ3bbXBFBlgrQ/Eep/Z+4qmQt6OapU=
Subject key identifier: FB:EB:B6:17:07:C8:67:73:0A:E5:55:7E:97:8A:66:C3:08:83:C8:9D
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 0199FB45C85B962551E52818CA23C71BB449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 14BA
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: C4AyFBlK410bCW1lIhwyT/udMOWDAnzcWyczAsX2sp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c8:5b:96:25:51:e5:28:18:ca:23:c7:1b:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=fbebb61707c867730ae5557e978a66c30883c89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:bd:d1:57:84:3f:ed:75:d3:06:d7:2a:86:
f7:61:ec:8e:d3:61:6d:8a:46:7a:34:a6:13:07:9d:
d2:34:6c:11:61:32:c7:bd:ac:92:29:1a:49:45:55:
bb:c7:ec:83:73:5c:05:e5:d3:8a:68:58:0d:f4:fa:
85:a0:90:5e:ce:0b:8c:a0:2c:08:f6:12:30:64:e9:
b5:9a:73:6f:b6:fa:f9:1b:d1:90:9b:f0:5d:0e:d8:
18:e7:42:f0:59:d1:69:34:4d:24:ff:70:ed:32:27:
e4:0f:39:77:48:5e:84:c7:33:be:88:e8:ea:de:a5:
d6:15:ee:b9:42:15:04:67:c6:90:e2:30:50:6b:ca:
ff:ec:01:8e:00:95:69:80:7c:8d:0a:53:82:fc:bb:
e9:13:bb:29:53:98:1d:6b:9e:36:7a:3c:db:2b:f6:
15:ca:4e:b4:0f:11:32:8b:e3:c6:0b:30:3f:13:04:
09:02:13:0d:ec:1a:f9:28:a6:2e:1d:b2:a0:74:9c:
e4:30:49:3c:b5:5d:dd:d0:bb:79:3e:44:ad:1f:f1:
6f:fc:0f:c2:70:c4:30:94:fe:5d:8a:67:e9:b5:fa:
20:35:89:3d:8b:70:ff:a0:12:95:fc:c1:39:a3:da:
27:1d:e7:91:2b:12:03:55:db:90:af:a3:7f:55:a7:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:B6:17:07:C8:67:73:0A:E5:55:7E:97:8A:66:C3:08:83:C8:9D
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:43:8b:7f:f6:9c:0c:58:ae:95:06:ca:dd:be:b4:32:e6:
50:0d:77:38:7e:6d:40:dd:47:ec:5d:6a:c0:37:ed:51:1b:7e:
d5:37:92:f4:10:16:9f:16:d6:ab:28:47:b5:9f:39:f1:9e:14:
cf:1c:10:dd:f3:db:ed:65:bd:b3:1d:63:a0:c1:b1:2c:3f:32:
18:71:6b:d8:a6:04:85:c1:83:eb:b5:0a:e0:c0:eb:02:2a:6c:
cd:b9:e6:8a:df:27:f2:8b:4d:09:d4:46:28:9d:cb:88:7a:9c:
06:0f:b0:35:57:d8:b1:db:37:98:90:0f:c9:e6:5b:6c:b3:02:
d5:24:06:57:fe:70:c9:00:4a:b2:85:1a:17:d7:c6:4e:b1:39:
00:1e:06:1d:ce:47:23:85:2e:e6:56:73:ce:f6:e5:21:60:0a:
ec:d7:a2:91:cf:31:b4:dd:11:eb:65:49:a9:24:98:f5:78:c7:
51:23:e9:68:1a:74:22:0a:ec:d8:03:ca:8e:28:80:d8:ba:0f:
ca:d7:d2:a7:77:fa:a3:67:52:21:d8:ab:34:5f:d6:2a:3d:b1:
a2:f2:8c:0e:9b:c8:b1:e5:ca:7b:8d:f5:f3:62:b5:35:14:49:
30:9e:f3:33:42:bd:65:df:ef:65:33:e1:cd:87:d0:2c:ef:2a:
37:4c:fd:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RchbliVR5SgYyiPHG7RJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4
MzYxZGUwHhcNMjUxMDE5MDcwMTE4WhcNMjUxMDIwMDcwMTE4WjAzMTEwLwYDVQQD
EyhmYmViYjYxNzA3Yzg2NzczMGFlNTU1N2U5NzhhNjZjMzA4ODNjODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05290VeEP+110wbXKob3YeyO02Ft
ikZ6NKYTB53SNGwRYTLHvaySKRpJRVW7x+yDc1wF5dOKaFgN9PqFoJBezguMoCwI
9hIwZOm1mnNvtvr5G9GQm/BdDtgY50LwWdFpNE0k/3DtMifkDzl3SF6ExzO+iOjq
3qXWFe65QhUEZ8aQ4jBQa8r/7AGOAJVpgHyNClOC/LvpE7spU5gda542ejzbK/YV
yk60DxEyi+PGCzA/EwQJAhMN7Br5KKYuHbKgdJzkMEk8tV3d0Lt5PkStH/Fv/A/C
cMQwlP5dimfptfogNYk9i3D/oBKV/ME5o9onHeeRKxIDVduQr6N/VafPfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvrthcHyGdzCuVVfpeKZsMIg8idMB8GA1UdIwQY
MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt
MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl
LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMNDi3/2
nAxYrpUGyt2+tDLmUA13OH5tQN1H7F1qwDftURt+1TeS9BAWnxbWqyhHtZ858Z4U
zxwQ3fPb7WW9sx1joMGxLD8yGHFr2KYEhcGD67UK4MDrAipszbnmit8n8otNCdRG
KJ3LiHqcBg+wNVfYsds3mJAPyeZbbLMC1SQGV/5wyQBKsoUaF9fGTrE5AB4GHc5H
I4Uu5lZzzvblIWAK7Neikc8xtN0R62VJqSSY9XjHUSPpaBp0Igrs2APKjiiA2LoP
ytfSp3f6o2dSIdirNF/WKj2xovKMDpvIseXKe43182K1NRRJMJ7zM0K9Zd/vZTPh
zYfQLO8qN0z95w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:34 2025 by rpki-client