Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: 71MxFCJ4xE6Y4I3zI4+QQrSrkV6AWW/StCWAiY2nuow=
Subject key identifier: 8E:78:8F:2A:2D:53:F8:26:BD:3B:9D:72:31:73:AE:E8:4F:4D:65:9F
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019894B7487D98B084968E2F23B40CC18447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0938
Signing time: Sun 10 Aug 2025 16:01:36 +0000
Manifest this update: Sun 10 Aug 2025 16:01:36 +0000
Manifest next update: Mon 11 Aug 2025 16:01:36 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: cLzDsRaqYKPpKgl7ltudzKTAWLM2Pb1qQRgNRKDKRBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:48:7d:98:b0:84:96:8e:2f:23:b4:0c:c1:84:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Aug 10 16:01:36 2025 GMT
Not After : Aug 11 16:01:36 2025 GMT
Subject: CN=8e788f2a2d53f826bd3b9d723173aee84f4d659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:51:4a:52:92:c1:9b:ae:db:34:37:90:49:
f9:76:e3:07:d2:96:fc:97:83:1e:6f:80:f8:96:2f:
37:73:1e:db:fd:bd:9b:c7:84:58:12:c1:14:83:2b:
00:76:82:b9:29:b2:81:e7:84:ed:5c:07:85:40:d1:
cf:18:41:e2:7a:41:08:6f:b9:a7:74:0e:17:dd:32:
da:2a:35:1d:ee:70:a7:1b:5f:64:89:5c:6d:78:56:
9a:04:85:0a:8c:8e:95:d5:47:97:c3:71:aa:e4:95:
71:af:9c:22:c0:40:53:37:88:17:35:be:14:fd:46:
e9:98:b1:83:7f:51:5a:e2:31:6d:d6:49:b5:07:12:
8f:34:2e:ae:29:98:1d:25:48:14:18:66:86:d7:22:
ea:04:ad:dd:53:bb:98:56:0b:45:9a:27:29:64:fe:
96:0a:37:47:32:fb:ab:95:b4:b5:0b:11:79:3f:43:
74:02:65:0b:67:3f:46:96:5c:c1:e5:6d:fe:a5:86:
8c:59:93:ff:ab:af:a1:4f:b0:be:1b:dc:84:3d:7e:
13:7d:87:8f:71:d5:0a:c5:6b:f7:b6:72:f3:ae:6e:
c9:04:1e:46:02:c7:8d:04:f3:c7:85:2c:75:95:ba:
90:d0:d8:9d:44:ed:89:a9:6c:a3:99:42:e8:8a:e6:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:8F:2A:2D:53:F8:26:BD:3B:9D:72:31:73:AE:E8:4F:4D:65:9F
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a0:a6:51:58:f5:1d:a2:db:76:7d:73:c8:3b:58:a2:09:09:
61:8b:17:29:8a:6f:25:50:76:55:fe:04:ef:ec:bc:e5:fb:59:
f3:d3:89:50:5d:e3:b5:d8:8c:f3:26:5d:3b:79:06:4b:c7:3d:
73:f1:45:33:cb:39:03:d5:b8:7b:9d:bc:68:a6:fe:f0:de:1e:
67:dd:fb:47:fa:39:f1:cb:35:d5:1c:f3:3c:8d:5f:c4:a9:3d:
0d:56:b5:9d:19:09:1c:ff:06:3a:cf:8a:e0:76:00:7c:4c:53:
f9:06:ce:b0:20:be:bd:17:56:95:99:d1:d5:a5:74:5c:9d:c2:
f5:0d:e3:ec:0b:31:f8:b6:61:27:7e:86:72:d6:ba:eb:7a:d0:
68:22:b4:02:d6:1e:85:8c:df:34:d7:25:59:ee:2b:70:92:12:
4b:6b:96:d0:fa:2b:01:59:4a:73:e4:2a:a6:c1:23:da:8b:be:
c6:29:1c:8a:28:b2:ff:b5:ad:47:0d:63:7b:e5:c1:2c:91:99:
34:78:e8:41:4b:8b:56:0f:b5:08:10:e0:d5:d6:4b:3a:73:a5:
a5:48:eb:9d:95:79:f2:5e:6f:cb:f4:99:9c:45:2b:15:66:ff:
f1:1e:b1:40:0e:79:30:74:ce:0e:93:44:f3:ae:dd:ff:b3:53:
12:bf:98:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt0h9mLCElo4vI7QMwYRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NTNhMTliNWRjZTFkNDE1OTM1MjIyOTQyNmE5ZmRiN2Q5
ZjlhM2IwHhcNMjUwODEwMTYwMTM2WhcNMjUwODExMTYwMTM2WjAzMTEwLwYDVQQD
Eyg4ZTc4OGYyYTJkNTNmODI2YmQzYjlkNzIzMTczYWVlODRmNGQ2NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fZRSlKSwZuu2zQ3kEn5duMH0pb8
l4Meb4D4li83cx7b/b2bx4RYEsEUgysAdoK5KbKB54TtXAeFQNHPGEHiekEIb7mn
dA4X3TLaKjUd7nCnG19kiVxteFaaBIUKjI6V1UeXw3Gq5JVxr5wiwEBTN4gXNb4U
/UbpmLGDf1Fa4jFt1km1BxKPNC6uKZgdJUgUGGaG1yLqBK3dU7uYVgtFmicpZP6W
CjdHMvurlbS1CxF5P0N0AmULZz9GllzB5W3+pYaMWZP/q6+hT7C+G9yEPX4TfYeP
cdUKxWv3tnLzrm7JBB5GAseNBPPHhSx1lbqQ0NidRO2JqWyjmULoiuajzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI54jyotU/gmvTudcjFzruhPTWWfMB8GA1UdIwQY
MBaAFPdToZtdzh1BWTUiKUJqn9t9n5o7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQt
MTBmMDA5M2VhYWUwLzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mZmUwN2MtMTZmMC00OTk5LTg4OTQtMTBmMDA5M2VhYWUw
LzEvOTFPaG0xM09IVUZaTlNJcFFtcWYyMzJmbWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6CmUVj1
HaLbdn1zyDtYogkJYYsXKYpvJVB2Vf4E7+y85ftZ89OJUF3jtdiM8yZdO3kGS8c9
c/FFM8s5A9W4e528aKb+8N4eZ937R/o58cs11RzzPI1fxKk9DVa1nRkJHP8GOs+K
4HYAfExT+QbOsCC+vRdWlZnR1aV0XJ3C9Q3j7Asx+LZhJ36Gcta663rQaCK0AtYe
hYzfNNclWe4rcJISS2uW0PorAVlKc+QqpsEj2ou+xikciiiy/7WtRw1je+XBLJGZ
NHjoQUuLVg+1CBDg1dZLOnOlpUjrnZV58l5vy/SZnEUrFWb/8R6xQA55MHTODpNE
867d/7NTEr+YHw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:51 2025 by rpki-client