Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: zIaNsw8CAbx4nnDIZXB+Zpora0aZujQxk1RP41Xb9Z8=
Subject key identifier: 8D:71:0C:2C:96:15:CB:E9:3C:95:08:83:20:79:B3:D1:FB:42:A9:FB
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 0197B88EE843C90AF576988F1415642FD82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 08C6
Signing time: Sat 28 Jun 2025 22:01:02 +0000
Manifest this update: Sat 28 Jun 2025 22:01:02 +0000
Manifest next update: Sun 29 Jun 2025 22:01:02 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: BtZOv9eZ4Bu6+V7wHJ70QiH4/4X/UXv+3hqrSVwemWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e8:43:c9:0a:f5:76:98:8f:14:15:64:2f:d8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Jun 28 22:01:02 2025 GMT
Not After : Jun 29 22:01:02 2025 GMT
Subject: CN=8d710c2c9615cbe93c9508832079b3d1fb42a9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:ec:d7:60:87:7d:9c:21:82:23:44:cf:a4:
ea:a1:25:6a:e9:c3:b5:91:96:49:9d:fd:96:68:43:
e7:20:b5:2f:80:4c:1d:d5:18:1d:45:58:d7:a0:75:
e9:ff:54:7f:53:ba:af:6e:c8:da:0a:c4:56:49:df:
36:7d:d1:09:2e:da:92:aa:57:7c:66:56:7f:7f:78:
ad:c9:02:2a:50:57:b8:c4:7d:bb:d8:e1:d8:b5:f6:
e0:f2:43:71:2b:f9:20:62:59:18:3f:e6:01:f7:26:
5d:28:94:f2:87:fe:b4:e1:28:2a:1a:99:a4:e9:46:
3a:9f:df:43:99:5e:ba:56:b8:ed:41:cc:f6:cb:f0:
8e:04:c5:b0:d6:0d:c4:27:ad:db:33:76:cc:e9:2b:
35:6b:d6:f1:ac:c3:07:85:8d:c6:51:c8:3a:f6:11:
c2:01:d4:bd:49:29:2f:10:ab:60:1b:40:ea:4b:7d:
4b:b4:8e:48:72:ca:c8:96:26:b0:54:df:95:aa:18:
9d:71:61:cc:c3:29:70:46:29:26:0c:da:d5:84:62:
8b:bb:4b:19:0e:78:77:bb:c1:de:06:37:dd:de:04:
64:d8:68:57:89:b3:e4:f2:c2:79:b0:02:8b:42:b4:
fc:60:66:2c:ea:9f:1b:2c:0e:dc:24:69:11:61:3d:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:0C:2C:96:15:CB:E9:3C:95:08:83:20:79:B3:D1:FB:42:A9:FB
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:43:90:72:8b:2f:df:2f:0e:81:ca:77:88:81:94:5f:42:
8e:6d:66:c6:cd:30:ee:b7:7c:9d:f1:c8:90:20:c6:32:a9:2b:
c4:55:cd:e5:bc:8f:15:9f:4f:15:72:a0:c3:8f:15:c1:e8:af:
94:61:62:e9:5e:4c:69:96:7c:94:fb:f0:ec:26:a2:53:1d:26:
21:f9:ab:50:e8:10:ce:1d:18:78:58:d4:dd:f3:c7:36:ea:ec:
e4:94:23:96:1a:bd:15:ee:74:9d:e0:f4:52:fb:b3:c9:eb:a2:
c0:65:ca:86:3a:89:17:f7:b5:3e:9e:c3:47:3c:bf:7b:0b:ac:
65:98:5d:f9:f2:b2:50:0b:5a:60:8f:c2:3f:f2:ae:56:c0:ba:
c7:a6:a9:89:03:c1:90:bc:e6:77:5a:b1:0e:a0:f7:81:18:0d:
f8:7e:d6:84:6e:db:5f:da:73:7e:aa:f5:43:7d:db:38:e6:47:
70:63:ba:b6:bf:f2:40:e8:20:a6:4d:f8:fa:7a:3d:6f:a2:75:
fb:70:46:84:d5:ab:17:5b:6f:eb:e1:3b:41:41:0b:86:48:95:
2a:30:aa:da:59:b0:07:ce:21:cb:e5:91:c7:58:c8:ac:1b:ab:
28:e2:44:21:46:aa:3a:5b:8a:9a:27:07:f2:3a:11:73:48:50:
82:3f:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:47 2025 by rpki-client