Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File: navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier: DOzn/PfmNvZj6kp5UpoCsh0UcoL8MNvSpbej8vjqj9k=
Subject key identifier: BA:5A:09:5E:A5:37:AE:E7:C0:6D:EB:F6:0C:50:EA:F4:D1:F4:58:8B
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer: /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial: 01963F5490BB3E7B280FC56B175CD1FE1D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number: 12CB
Signing time: Wed 16 Apr 2025 16:00:28 +0000
Manifest this update: Wed 16 Apr 2025 16:00:28 +0000
Manifest next update: Thu 17 Apr 2025 16:00:28 +0000
Files and hashes: 1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: rO4k4D6rg/3+6BTXLVgfN2FNFKAQ0l1z1s91N+N1+L0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:90:bb:3e:7b:28:0f:c5:6b:17:5c:d1:fe:1d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
Validity
Not Before: Apr 16 16:00:28 2025 GMT
Not After : Apr 17 16:00:28 2025 GMT
Subject: CN=ba5a095ea537aee7c06debf60c50eaf4d1f4588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:4a:17:72:fd:0b:62:16:8e:c0:de:0f:3d:
3d:da:c2:f8:63:ee:7e:1e:57:3b:ae:52:8a:d0:47:
bb:95:8b:1b:cb:a2:96:57:15:c3:61:34:3b:57:49:
06:bc:39:0a:84:39:b7:04:f7:14:70:bd:59:d9:f3:
82:a3:4e:fd:eb:2f:3b:d9:e2:2d:2d:e1:7e:5d:38:
69:61:12:a0:36:30:d9:0c:d9:e2:f1:49:ae:52:21:
23:d1:43:a7:1d:c9:83:9f:3e:d1:fa:81:78:58:08:
d4:4c:1f:cb:24:94:0e:5d:1b:5f:04:4c:e8:d4:ff:
06:ee:ee:44:a9:70:42:c0:36:49:a3:43:f9:76:28:
fd:ec:6f:c0:1e:77:11:ba:11:b1:2c:ab:51:0b:e3:
53:89:6d:b3:d1:98:31:45:60:34:6c:7f:76:68:b5:
99:ef:d3:07:29:1c:76:b3:ad:eb:04:b4:76:6f:a3:
0f:69:e0:37:46:1d:7a:8b:7c:a2:9d:eb:e1:64:a3:
ae:a5:b8:e4:62:85:43:17:5d:e0:d9:ec:b9:31:59:
a8:54:08:f1:e1:b4:65:9a:2d:35:a6:7e:6f:e4:ec:
2c:a9:42:46:21:28:01:9e:cf:ca:73:22:8e:0d:c1:
cf:d3:46:4d:6b:c9:45:4a:12:f2:57:46:a7:ad:d7:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:09:5E:A5:37:AE:E7:C0:6D:EB:F6:0C:50:EA:F4:D1:F4:58:8B
X509v3 Authority Key Identifier:
keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3b:ab:55:a6:3a:0d:69:cf:e7:de:89:29:1e:95:1a:41:52:
c6:ea:ba:1b:e8:11:34:b1:85:a4:c7:2f:5b:ca:02:ef:4f:74:
07:80:1d:25:30:8f:7f:06:4a:3a:7f:1c:1c:a6:96:65:4b:3b:
50:4f:01:70:00:37:92:3f:a7:95:c5:04:82:36:8d:05:ac:e0:
d0:cd:f3:e9:e3:f7:d1:70:68:18:93:3e:d0:15:14:77:52:2b:
a3:63:3d:19:cc:8e:7a:63:60:7d:d3:86:1d:1e:5b:ff:c8:75:
54:e9:f7:8c:98:10:1e:93:dd:1c:6a:fe:8b:88:76:01:95:2c:
8d:b0:7d:d2:c7:c1:ee:72:bf:58:18:a6:92:eb:08:5e:f4:bf:
1a:57:af:48:80:f4:8d:c0:fa:47:09:58:1f:7e:7c:12:b2:50:
82:e9:49:c7:e3:14:93:65:c8:50:cc:0c:08:c2:7b:22:65:49:
55:e9:40:26:95:bb:00:45:db:4d:4f:59:0f:70:e1:5e:f6:b9:
97:09:40:f0:66:07:d9:3c:09:8a:77:b4:28:0f:48:cb:da:cd:
fc:ca:26:47:7f:ca:d8:eb:bb:ef:13:e3:60:2f:d2:9a:04:09:
13:59:48:7d:ae:01:51:33:77:ea:30:e6:45:27:3c:de:fe:13:
23:ff:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:12:52 2025 by rpki-client