Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: 7qavP/W46pkHSjnBovgTZNQGuu+aK0/VUY6rZvY7b2o=
Subject key identifier: E6:73:04:90:9E:57:35:4A:91:BD:1B:19:35:06:3B:17:CB:2E:16:B7
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 0198D6601FDD0456FBEDB5068C135C652C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 095A
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: U5t8tfkBJ43yNZfKG346o+xBmU2rLn9KE3RIuaqqTAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1f:dd:04:56:fb:ed:b5:06:8c:13:5c:65:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=e67304909e57354a91bd1b1935063b17cb2e16b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:39:eb:4b:96:90:a5:ef:b5:bb:d7:5d:95:
a8:9d:3d:e2:e1:68:84:c6:59:0c:6c:db:8c:bc:4a:
0b:01:36:06:e7:97:f6:32:a5:90:52:03:b0:5b:07:
e3:10:e1:85:05:a7:3b:f2:d0:11:24:97:d2:44:31:
e8:0b:48:85:c9:76:7f:b8:a9:ae:7a:14:6a:90:39:
26:fb:dc:db:76:39:ac:9a:db:1c:e3:9f:89:c0:7d:
22:8c:25:16:a4:ba:5a:cc:6e:50:ab:e9:8b:54:dd:
9d:01:59:e0:92:aa:02:0c:e7:e7:ec:fd:97:ed:18:
60:0f:98:d8:f5:fb:fa:d3:1e:00:23:f7:4b:a6:03:
e2:11:92:20:eb:98:1e:6f:af:a8:ab:8b:dd:a0:27:
a8:fe:06:7b:6f:79:ae:8b:da:98:fc:d9:8b:bb:06:
51:f6:b1:76:7c:b3:d4:e9:16:df:b8:f6:d4:d8:88:
e4:14:27:3e:6e:77:f1:3d:d1:19:2b:fb:bf:a0:15:
a9:04:7a:18:4a:b0:9b:85:ee:d8:71:05:33:1b:f1:
4c:f8:e9:44:54:6c:67:ad:bf:1b:fb:dd:7f:9f:06:
ee:5a:f6:35:b2:aa:db:b0:a3:1a:ff:75:51:9f:49:
d5:4e:22:52:31:05:c3:57:75:12:12:ec:6e:bc:ad:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:04:90:9E:57:35:4A:91:BD:1B:19:35:06:3B:17:CB:2E:16:B7
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:57:f7:96:68:fc:a5:09:d7:11:4b:33:f0:e6:bd:a4:81:9c:
41:ac:da:53:3a:94:27:73:3d:01:de:b2:85:68:01:67:31:b4:
18:ec:fb:bc:bf:49:dc:a7:ec:f7:d0:98:9a:ed:9e:ac:f1:77:
3a:cf:63:0f:93:0a:87:4d:64:1f:b6:73:a6:36:3f:8d:14:48:
87:e1:11:10:35:1f:b3:82:48:10:f7:e7:9a:7c:b5:1d:ab:5c:
16:e9:95:db:aa:bf:c6:87:01:53:08:e6:6a:a6:1e:38:0d:c1:
be:11:b9:1f:7c:b2:06:7a:f2:bb:89:98:57:e0:42:11:d2:d1:
bd:cb:14:d2:c2:7b:98:17:d7:6e:6e:a8:21:d4:a8:6f:ce:c5:
03:2b:3c:e4:27:b5:cc:91:d7:64:3f:c1:aa:ea:bd:61:b0:b3:
1c:d3:12:4f:c6:0d:5c:9a:d1:c7:7a:40:f5:67:03:61:c6:34:
a5:96:ad:25:0e:2e:ae:01:98:fa:75:94:da:12:a4:c0:9b:cc:
c5:dd:28:30:cd:91:07:ad:dd:3f:f2:3d:40:04:84:8d:3e:1e:
19:ee:35:f4:99:bb:4c:c7:27:92:11:30:e6:1e:8f:e2:0f:6d:
17:f6:f2:9d:be:8b:92:f4:bc:95:5f:26:00:b1:b3:92:7c:dd:
10:fb:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:49 2025 by rpki-client