Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: kUG9VMtyi2Jay92FZiB4Q+ukIlBraVH1yJxj8vzNKKY=
Subject key identifier: 4F:6F:D4:2F:FB:5A:DB:A3:29:DB:D0:51:CB:9C:88:92:3A:18:51:11
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 0196876E75B16006205F3A3BB3ECF325A7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0828
Signing time: Wed 30 Apr 2025 16:01:25 +0000
Manifest this update: Wed 30 Apr 2025 16:01:25 +0000
Manifest next update: Thu 01 May 2025 16:01:25 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: dyRmzRMSCQnoPiUB4OWCC5OS8wXrWreoN+BHSFY4Y+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:75:b1:60:06:20:5f:3a:3b:b3:ec:f3:25:a7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Apr 30 16:01:25 2025 GMT
Not After : May 1 16:01:25 2025 GMT
Subject: CN=4f6fd42ffb5adba329dbd051cb9c88923a185111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:1f:9b:ae:31:dc:bb:d5:69:05:2d:4a:3d:
1b:bf:9c:ca:55:76:22:27:b6:ba:7d:31:f3:94:ac:
f6:21:86:5d:9a:0d:55:ee:e1:35:6a:f3:1c:28:3c:
47:7c:93:e9:ca:ac:99:f5:d8:e5:68:f3:36:fc:2e:
7c:1e:b5:e0:10:32:7a:1c:d9:0c:48:21:cc:8e:3a:
68:f2:f3:54:8b:3d:d6:aa:5d:6b:ba:4c:3f:19:34:
8a:18:0b:d8:d2:d2:00:37:bf:4d:bf:3b:3a:29:8f:
bd:3c:29:a8:a4:d6:8b:3b:4c:82:ad:1c:f5:15:38:
43:5e:70:a6:7a:ef:ed:1a:08:2d:80:92:7a:c4:c1:
46:8c:0b:f3:1f:69:51:29:bc:02:ae:40:99:16:64:
3e:1b:57:28:f6:d1:e2:f8:1f:07:52:84:e5:1f:d3:
01:94:ed:97:f7:c7:3a:ea:6d:6c:23:9a:a6:e7:41:
cd:f0:77:ae:89:74:2f:6c:4c:38:27:86:50:40:7e:
22:7a:4a:4a:95:75:7e:b6:bf:fc:19:c2:32:78:1a:
9b:84:43:83:d4:2d:2a:54:57:57:9c:76:f7:76:31:
20:10:56:4a:ca:a0:86:88:32:0a:50:28:ba:36:98:
5f:3b:43:2f:6e:26:60:79:ba:d2:e5:3c:ce:11:ab:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:D4:2F:FB:5A:DB:A3:29:DB:D0:51:CB:9C:88:92:3A:18:51:11
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:c7:06:a8:32:95:f6:52:ea:4f:e9:38:c3:b8:48:23:2b:
eb:f8:7b:d3:3f:8f:b2:03:c8:cc:f0:e8:61:fc:e6:41:d0:04:
3c:d0:50:6c:11:f2:c7:56:04:aa:f7:09:24:a7:c3:c9:33:70:
b9:f9:d0:8d:4c:1e:6b:c1:e1:99:4f:5c:8c:1a:3d:a3:7b:3d:
a0:89:39:0c:8c:18:73:c3:22:9f:1b:1f:f3:8e:c3:0b:d8:05:
1b:45:18:c2:ca:c1:11:b6:af:04:92:85:7b:6c:2b:cc:c2:d5:
10:15:88:ef:68:a6:14:c5:3f:aa:fa:e9:0e:e4:28:a3:f8:39:
ab:27:bc:a2:c8:d0:4d:a9:13:09:b4:b9:d0:ce:f2:76:f2:4e:
8a:81:7d:14:67:b5:a8:48:0c:51:67:c9:62:29:a4:24:65:b6:
73:97:d8:8d:84:f6:11:f2:1b:85:ba:7e:07:7b:9a:3f:46:6a:
7a:11:6e:87:24:8a:01:0a:fa:fc:31:a5:56:e2:a5:87:59:81:
0f:98:1b:17:00:32:9d:40:7f:a1:12:64:3d:bf:71:67:48:31:
42:f1:6d:6b:6a:4b:b7:84:c4:ef:aa:fb:2b:b2:5f:14:d9:d5:
04:c6:b9:f8:b2:53:aa:48:fb:67:b3:84:02:71:00:9b:4c:30:
29:91:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:16:17 2025 by rpki-client