Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: tFLoJYAnqswOW9g/uy+9hqMpz9Q6x44P4cwDARb5z7E=
Subject key identifier: 3B:17:C1:93:61:93:00:9A:B8:51:F7:94:2A:F5:21:EC:B7:4D:EE:6D
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 01974BC43ECB1E4C22843820AB4633CDDC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 1356
Signing time: Sat 07 Jun 2025 19:00:41 +0000
Manifest this update: Sat 07 Jun 2025 19:00:41 +0000
Manifest next update: Sun 08 Jun 2025 19:00:41 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: l5YV0dKiYgBCg2kjoUFC0QhBjcO7HjnwOPNyBbu5f/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:3e:cb:1e:4c:22:84:38:20:ab:46:33:cd:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Jun 7 19:00:41 2025 GMT
Not After : Jun 8 19:00:41 2025 GMT
Subject: CN=3b17c1936193009ab851f7942af521ecb74dee6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:50:b0:5c:66:20:94:06:47:ba:ba:9a:81:d0:
cc:bd:3b:39:f4:18:35:b9:77:22:7c:01:38:dd:2d:
6c:1a:90:da:84:11:c5:91:96:1e:29:6b:aa:3f:49:
88:65:1a:35:3a:11:6e:72:58:f3:54:ed:83:0a:ac:
d8:ae:87:d2:cc:78:ab:b3:80:e2:25:4d:0a:18:75:
80:5f:93:bf:17:2a:fa:a7:a5:51:32:be:a0:21:72:
b5:85:a0:cd:22:a4:37:bc:da:7a:8f:ae:d1:f7:d3:
65:99:83:18:5e:4b:cf:26:45:01:53:66:50:2b:0a:
51:70:53:b6:bc:d0:8f:b4:29:9e:0d:fc:06:8a:14:
a5:94:a2:bb:c3:5b:3f:72:17:25:56:bb:64:d0:f9:
c4:6c:05:e1:39:e4:7a:d3:38:d6:59:c2:0c:7b:10:
4f:4f:8a:0f:89:bc:af:7e:f7:c2:3c:78:bb:c3:0c:
b6:bd:47:91:aa:70:0f:98:82:c3:37:84:87:73:46:
d3:a1:26:47:ee:d4:90:40:d9:e2:6f:f5:30:54:df:
0b:20:bb:7b:4e:20:01:43:cc:e9:5f:cb:c9:6a:af:
1d:07:4d:b3:e6:5e:12:3c:bc:94:99:77:d4:56:26:
8a:9e:da:81:b8:7a:93:d4:7a:7f:d8:43:47:06:70:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:C1:93:61:93:00:9A:B8:51:F7:94:2A:F5:21:EC:B7:4D:EE:6D
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8a:ed:c6:db:f8:06:5e:e7:bf:fe:0c:78:79:0a:e6:80:4b:
40:89:95:03:26:95:e6:3a:fa:47:c8:30:ed:e8:4b:a7:0a:be:
d6:55:1d:cd:a1:b2:1b:43:bc:58:8a:38:26:b3:a3:e5:28:ef:
c8:5d:17:10:8c:c3:d9:62:33:b4:2f:30:b1:35:33:30:d3:33:
17:bd:71:37:e0:c7:01:9d:5c:66:5c:8d:bb:ca:c1:58:1d:76:
56:ce:23:6d:c5:dc:02:db:81:b4:83:59:f3:e9:a0:68:da:bf:
60:9d:83:da:31:da:08:10:00:d4:85:5a:67:63:39:cb:7c:e7:
2b:7d:2f:4b:3c:c8:f9:91:df:0d:22:55:de:b7:c6:42:74:06:
63:8c:f4:94:1c:4d:f8:4c:60:b3:87:5b:7a:42:13:ac:c3:37:
49:89:c7:91:eb:27:70:4a:8a:c2:14:22:bc:22:dc:4b:1d:05:
cb:4b:4a:d5:87:b1:40:f3:5e:d1:c3:b4:81:cf:23:5a:1f:49:
19:2a:8f:72:12:04:14:7d:4c:cf:00:2b:25:2f:12:b9:d5:20:
80:85:45:00:0d:2c:ea:36:ae:23:99:39:1c:d4:16:08:29:68:
ec:d7:dc:79:2a:3c:31:7e:e4:b8:9d:8a:a3:fb:74:7e:44:ab:
c9:53:c0:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxD7LHkwihDggq0YzzdxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4
MzYxZGUwHhcNMjUwNjA3MTkwMDQxWhcNMjUwNjA4MTkwMDQxWjAzMTEwLwYDVQQD
EygzYjE3YzE5MzYxOTMwMDlhYjg1MWY3OTQyYWY1MjFlY2I3NGRlZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FCwXGYglAZHurqagdDMvTs59Bg1
uXcifAE43S1sGpDahBHFkZYeKWuqP0mIZRo1OhFucljzVO2DCqzYrofSzHirs4Di
JU0KGHWAX5O/Fyr6p6VRMr6gIXK1haDNIqQ3vNp6j67R99NlmYMYXkvPJkUBU2ZQ
KwpRcFO2vNCPtCmeDfwGihSllKK7w1s/chclVrtk0PnEbAXhOeR60zjWWcIMexBP
T4oPibyvfvfCPHi7wwy2vUeRqnAPmILDN4SHc0bToSZH7tSQQNnib/UwVN8LILt7
TiABQ8zpX8vJaq8dB02z5l4SPLyUmXfUViaKntqBuHqT1Hp/2ENHBnB7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsXwZNhkwCauFH3lCr1Iey3Te5tMB8GA1UdIwQY
MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt
MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl
LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4rtxtv4
Bl7nv/4MeHkK5oBLQImVAyaV5jr6R8gw7ehLpwq+1lUdzaGyG0O8WIo4JrOj5Sjv
yF0XEIzD2WIztC8wsTUzMNMzF71xN+DHAZ1cZlyNu8rBWB12Vs4jbcXcAtuBtINZ
8+mgaNq/YJ2D2jHaCBAA1IVaZ2M5y3znK30vSzzI+ZHfDSJV3rfGQnQGY4z0lBxN
+Exgs4dbekITrMM3SYnHkesncEqKwhQivCLcSx0Fy0tK1YexQPNe0cO0gc8jWh9J
GSqPchIEFH1MzwArJS8SudUggIVFAA0s6jauI5k5HNQWCClo7NfceSo8MX7kuJ2K
o/t0fkSryVPAFw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:20 2025 by rpki-client