Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: 4FPuvugirMI96S0m8JxjMhNjsPmBSRfdt1pgF56AYvs=
Subject key identifier: 68:46:45:20:00:3C:F9:96:CE:50:C2:05:2D:1B:7E:1C:1B:BF:BA:8A
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 0199FBEBDC2AB47D2847C1A692C999599CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 09F2
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: AKhQ4FLqD5w9WbEazMqNU9+tNq6JxA++xxWXr1GLLvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dc:2a:b4:7d:28:47:c1:a6:92:c9:99:59:9c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=68464520003cf996ce50c2052d1b7e1c1bbfba8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:e7:62:34:f8:f5:e7:53:87:43:a2:71:d8:
3b:19:ce:34:29:77:b4:d1:20:a3:3f:40:38:cc:d5:
97:4e:1d:74:08:20:ec:0b:ab:ae:f7:fb:54:a6:37:
33:c6:ad:c1:8f:e4:be:1a:29:d7:75:20:de:ea:e1:
1e:48:7d:47:96:be:21:f4:d7:7c:64:b8:9f:9f:67:
d6:db:6f:c9:16:5e:dc:53:5f:56:6d:df:ce:35:a1:
c9:58:38:e9:b4:48:ab:bb:36:39:a7:ed:2b:75:54:
33:22:dd:27:d2:03:be:50:c4:1a:cf:2f:9b:dd:82:
77:11:09:ba:40:94:c1:34:ac:82:6a:65:97:94:b9:
f5:66:2d:0a:1a:ce:b0:29:96:56:7d:76:d2:fa:52:
8f:fb:36:69:d5:e0:0d:49:cf:19:21:78:4e:77:54:
30:3a:9b:c7:d2:c8:39:a6:bc:13:e1:05:40:16:66:
e8:b6:a4:53:59:a2:a5:c5:38:33:61:42:37:3b:15:
3c:f7:16:7d:4a:d5:6b:8b:4c:e4:e1:bc:d8:2f:f2:
09:ed:1a:a4:8c:39:95:dd:29:ad:32:3b:0b:6b:44:
14:5f:76:0c:af:58:47:88:ad:a5:e7:37:ec:d0:ea:
af:d8:06:f4:3b:20:ce:42:9e:30:d6:4b:13:6d:17:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:45:20:00:3C:F9:96:CE:50:C2:05:2D:1B:7E:1C:1B:BF:BA:8A
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:1c:07:63:a1:ba:a6:c1:e0:dc:11:ef:b8:58:2f:fc:a5:
71:3f:a9:7f:ee:b2:3f:51:b4:0f:45:a8:c5:25:a2:90:2e:a3:
9e:a1:9a:ea:ee:b2:a6:a7:89:0d:e7:a0:c7:3b:f8:57:48:7c:
27:02:f8:d0:5a:95:bf:56:df:9c:db:0d:0a:3c:76:ec:46:31:
97:36:11:9e:f5:ab:03:0b:a2:21:dc:16:4e:f5:c8:70:3b:3c:
e1:04:07:72:56:e4:0f:0d:d2:0c:1b:1b:47:06:03:82:33:1b:
40:20:3b:e7:6f:41:37:01:a2:ba:5b:a8:15:d7:c8:4e:3a:a7:
ad:07:87:4e:32:2e:bc:1d:56:eb:9a:b9:fb:db:db:60:c4:17:
7a:05:4b:f5:6c:17:7a:54:d2:07:99:1a:db:51:a3:cc:93:ad:
97:c3:82:dd:7c:f2:09:2e:a5:cb:1a:09:0f:6e:a9:69:c7:73:
d1:09:bd:d1:42:ea:9e:fb:bc:95:9f:29:fe:93:bd:d8:5f:1b:
2d:03:5a:56:3c:bd:50:69:f3:d9:0f:19:ae:2d:ec:f6:5e:10:
87:5a:64:2a:d3:7f:db:6e:f3:46:1f:2b:7a:92:6a:09:06:a7:
6b:e7:81:7f:00:72:54:31:5d:8d:8d:98:e3:f5:d0:7e:58:99:
b5:0c:b4:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769wqtH0oR8GmksmZWZzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NTNhMTliNWRjZTFkNDE1OTM1MjIyOTQyNmE5ZmRiN2Q5
ZjlhM2IwHhcNMjUxMDE5MTAwMjQyWhcNMjUxMDIwMTAwMjQyWjAzMTEwLwYDVQQD
Eyg2ODQ2NDUyMDAwM2NmOTk2Y2U1MGMyMDUyZDFiN2UxYzFiYmZiYThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rbnYjT49edTh0Oicdg7Gc40KXe0
0SCjP0A4zNWXTh10CCDsC6uu9/tUpjczxq3Bj+S+GinXdSDe6uEeSH1Hlr4h9Nd8
ZLifn2fW22/JFl7cU19Wbd/ONaHJWDjptEiruzY5p+0rdVQzIt0n0gO+UMQazy+b
3YJ3EQm6QJTBNKyCamWXlLn1Zi0KGs6wKZZWfXbS+lKP+zZp1eANSc8ZIXhOd1Qw
OpvH0sg5prwT4QVAFmbotqRTWaKlxTgzYUI3OxU89xZ9StVri0zk4bzYL/IJ7Rqk
jDmV3SmtMjsLa0QUX3YMr1hHiK2l5zfs0Oqv2Ab0OyDOQp4w1ksTbReEDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhGRSAAPPmWzlDCBS0bfhwbv7qKMB8GA1UdIwQY
MBaAFPdToZtdzh1BWTUiKUJqn9t9n5o7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQt
MTBmMDA5M2VhYWUwLzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQtMTBmMDA5M2VhYWUw
LzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtIcB2Oh
uqbB4NwR77hYL/ylcT+pf+6yP1G0D0WoxSWikC6jnqGa6u6ypqeJDeegxzv4V0h8
JwL40FqVv1bfnNsNCjx27EYxlzYRnvWrAwuiIdwWTvXIcDs84QQHclbkDw3SDBsb
RwYDgjMbQCA7529BNwGiuluoFdfITjqnrQeHTjIuvB1W65q5+9vbYMQXegVL9WwX
elTSB5ka21GjzJOtl8OC3XzyCS6lyxoJD26pacdz0Qm90ULqnvu8lZ8p/pO92F8b
LQNaVjy9UGnz2Q8Zri3s9l4Qh1pkKtN/227zRh8repJqCQana+eBfwByVDFdjY2Y
4/XQfliZtQy08w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:46 2025 by rpki-client