Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: WPdOe+aR/dnAhyNmzuJhDcSzpzV+a+KWLb7hMn/4vJc=
Subject key identifier: 51:6F:7B:68:42:F7:D1:27:D8:AF:83:B9:BF:0A:20:11:D5:5D:FE:FA
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 0196C15E1A26DE18A65AC93AF63B66FDA059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0846
Signing time: Sun 11 May 2025 22:01:31 +0000
Manifest this update: Sun 11 May 2025 22:01:31 +0000
Manifest next update: Mon 12 May 2025 22:01:31 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: lMwglv5QkQUuMHgFWseR+RCTVGU/UeuQfs7hfEA2Rbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5e:1a:26:de:18:a6:5a:c9:3a:f6:3b:66:fd:a0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: May 11 22:01:31 2025 GMT
Not After : May 12 22:01:31 2025 GMT
Subject: CN=516f7b6842f7d127d8af83b9bf0a2011d55dfefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:5a:17:c1:00:5f:12:07:e2:24:4c:a1:94:
a8:76:84:8b:02:b9:a9:e3:86:9e:3e:73:68:26:d9:
61:74:cd:1e:e2:14:19:80:2a:9e:42:46:05:2c:8a:
06:f6:9d:0f:b0:19:ac:23:07:cb:c3:15:87:fe:bd:
63:d2:85:f6:e4:30:02:cb:fe:aa:14:84:5a:07:5c:
b8:44:3f:f3:6e:cc:bf:e4:4d:18:35:3f:03:8f:c3:
a1:dc:02:47:5b:91:58:9c:76:b6:67:cd:55:8b:c7:
7a:aa:6c:a2:4b:85:da:5f:c6:0f:0a:aa:1f:b2:c2:
3c:61:9f:fa:62:39:3c:98:76:bb:d4:fb:97:9a:13:
4e:e8:2b:35:51:00:d7:1e:c2:6f:20:7c:c0:90:95:
9b:44:a7:d3:5d:df:8d:96:e5:38:01:ce:5c:28:e2:
c7:a6:46:17:ec:45:d6:d1:14:76:41:c8:15:6e:3c:
bf:b4:d4:6c:cd:12:2c:ad:ed:44:f7:1e:6e:a4:9d:
8e:4d:3c:3a:45:6b:c2:5d:0a:19:ea:43:27:b6:65:
18:00:b5:2f:c3:b5:8d:37:27:f2:e2:50:73:32:39:
63:c6:b4:98:bd:e4:da:79:dd:7f:1d:31:4e:4e:97:
af:fb:74:96:e2:10:f2:ed:eb:71:d1:27:02:a3:13:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:7B:68:42:F7:D1:27:D8:AF:83:B9:BF:0A:20:11:D5:5D:FE:FA
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:c9:18:b5:55:4e:bf:76:38:b7:87:6c:35:87:a8:ea:4f:
7a:43:4d:7c:c0:27:5c:71:a2:86:a3:e7:aa:75:22:f6:2d:14:
95:5d:08:f9:ed:30:28:c9:fb:32:63:bf:57:5e:65:95:4f:79:
7c:ec:22:ee:19:96:c2:22:7d:05:20:71:0d:34:6c:0c:f0:1b:
37:63:40:83:2e:22:13:55:65:17:d1:4b:b8:39:9d:2f:ef:28:
d3:03:2d:86:d8:ce:14:79:27:17:e7:cb:24:40:f1:f5:c1:f2:
fd:d4:34:49:34:04:9a:3f:5b:e0:4f:f8:10:52:36:33:8f:14:
a5:f3:dc:3a:99:aa:32:2b:a4:8d:d6:9a:7f:6e:f7:17:4e:e1:
79:a4:07:d6:93:f8:ca:d0:91:44:65:85:11:f9:b9:d6:29:5a:
c1:e9:f5:92:b3:3e:51:04:0c:86:a4:68:4c:34:54:a2:72:68:
ee:fc:7c:21:26:fc:7c:cb:56:24:05:82:6f:20:74:b1:83:3b:
e6:65:4b:a0:27:17:e8:f5:e5:33:2e:a4:de:19:44:a0:95:56:
71:a8:c9:07:34:33:e2:0d:e6:ea:bd:2d:7b:51:fd:b0:2c:dd:
06:2a:7b:1f:16:c0:ae:ec:32:d4:2e:ad:48:9c:54:79:1c:46:
76:ee:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:01:12 2025 by rpki-client