
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: XybM9iXbAuugemlbGPtdtd3r3XqFG1o0IP7SekjAPj0=
Subject key identifier: 55:D5:99:AB:59:72:3F:12:AD:23:61:CA:D0:79:04:D2:A7:20:75:4B
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 0197B7EA4453FD302A684C4ADF0107A54742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 138E
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: Vfi1RpsP/KA5kDYujtVZEzagD35fYSBQYev3ydqT0xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:44:53:fd:30:2a:68:4c:4a:df:01:07:a5:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=55d599ab59723f12ad2361cad07904d2a720754b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:bc:81:d8:87:21:6f:1f:5e:f4:26:55:a3:
6c:19:4c:b2:bd:52:19:6b:4b:52:91:8e:78:1e:44:
e3:cb:5a:17:9e:3e:b1:e6:db:89:d8:fa:db:a1:0e:
62:96:b6:1b:8b:e5:9e:72:d6:2c:e3:26:af:7e:68:
b8:77:f0:d1:b2:92:0c:52:bf:e3:ec:1c:58:d3:e2:
a9:da:f5:e4:a0:cc:2a:bc:06:81:eb:08:11:79:68:
27:84:d8:92:e8:9d:4a:f9:15:a5:23:b8:1e:2b:ce:
63:e0:e7:a8:56:8c:1f:42:58:14:b9:6e:d3:c0:c5:
7d:8f:13:a1:0b:16:76:19:c9:c6:70:9f:05:a3:2a:
57:eb:e9:a4:c4:44:b6:64:e5:5e:82:42:3d:a8:0f:
50:8a:83:7a:59:ac:12:57:00:57:0a:24:9c:af:9c:
c7:ed:f8:2a:f9:79:98:14:7c:ad:a7:79:00:19:4c:
c2:a3:db:fc:a9:fc:bd:2b:63:8d:0d:99:ba:c9:21:
8a:a5:30:a7:92:4a:ed:c4:3a:54:d5:89:40:b6:10:
40:5a:48:d1:3f:db:55:f9:7b:0d:3a:38:f5:30:e9:
77:4e:78:36:de:d1:a8:d5:45:a1:02:4c:52:fb:9c:
8c:0d:c2:94:14:8d:ea:b6:6b:e3:34:b3:fc:dd:df:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:99:AB:59:72:3F:12:AD:23:61:CA:D0:79:04:D2:A7:20:75:4B
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:6a:58:93:8e:de:a7:8c:27:2a:9c:81:ac:33:64:e1:30:
bd:5f:6a:c6:76:00:59:09:ed:b4:e0:98:33:23:91:ac:bb:27:
a1:4f:10:eb:5e:b2:62:c2:67:60:c6:b2:df:27:fe:7c:cd:dc:
db:1d:cd:30:d9:4a:18:f6:e9:cd:90:7f:6a:9f:ba:ac:2f:20:
b4:ba:76:d7:16:f2:3c:3c:b8:32:a9:d4:01:be:9d:8a:cc:09:
7f:1b:fd:2b:79:85:9a:e8:6b:51:85:a0:48:42:f1:9d:2f:20:
c4:8f:62:1e:45:88:a1:47:d6:c3:53:dc:33:4e:84:1d:db:57:
7b:2f:6c:5c:aa:4c:41:cc:1a:63:1f:42:78:b9:4e:7f:df:11:
12:81:01:35:6e:12:7f:ae:e1:ff:83:14:82:05:04:f0:93:89:
51:19:db:b2:9e:f5:83:4a:71:0c:71:87:d1:62:25:29:a1:45:
92:c7:36:89:4a:d6:a1:5c:43:29:c1:f6:9f:e6:4c:99:a8:29:
08:76:1b:72:86:1e:e9:5d:03:63:b7:7e:65:68:56:6f:0a:a2:
c6:e6:02:4b:de:cf:ce:01:00:4a:b3:26:b6:ed:57:08:11:68:
1e:0e:19:83:64:c8:51:d5:5d:66:fb:59:0c:04:7c:8a:da:dc:
a6:25:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:15 2025 by rpki-client