Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: Db0y5JUn9ZH51YMvc7L4R3+MwZ9nGqIw3vQr3TWHo7Q=
Subject key identifier: 7B:57:87:0E:43:F6:A3:23:3F:D5:39:8A:12:44:E1:14:F4:93:84:71
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019A4EF5856997F0B55D94AF36BD816794C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0A1D
Signing time: Tue 04 Nov 2025 13:01:44 +0000
Manifest this update: Tue 04 Nov 2025 13:01:44 +0000
Manifest next update: Wed 05 Nov 2025 13:01:44 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: GHxRPf2dio//hnrARSws95YVpFoNfFzH0HiEEMnTJ0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:85:69:97:f0:b5:5d:94:af:36:bd:81:67:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Nov 4 13:01:44 2025 GMT
Not After : Nov 5 13:01:44 2025 GMT
Subject: CN=7b57870e43f6a3233fd5398a1244e114f4938471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:46:91:e6:f3:9f:39:b4:f3:ba:bd:e5:37:
38:56:01:2a:7a:49:20:ef:37:f7:98:ff:e5:61:32:
9f:f7:13:f4:da:69:ec:89:a3:5e:8e:9c:5b:d3:78:
43:f5:be:a5:85:06:ad:51:e9:5a:74:be:2f:ab:c2:
6d:68:97:84:78:f1:bf:2f:c4:92:5c:fd:f1:f3:d3:
3c:61:d5:ef:cc:33:72:06:fd:54:5b:ee:9e:8d:8b:
d9:4a:b9:a7:3b:b1:18:42:2d:60:54:f0:b2:71:99:
61:e2:65:08:7c:99:7c:8d:c6:17:bd:d6:a5:ff:a6:
25:2e:4e:a9:b7:1e:e5:86:ea:be:06:c5:74:45:c7:
8c:51:48:6c:cb:d7:ea:4a:6e:ae:b5:59:85:cb:41:
57:bc:46:cb:cf:e2:32:98:09:3a:4d:eb:4a:1c:80:
52:8f:09:0e:18:08:95:87:50:38:bf:66:01:59:78:
e8:db:35:d8:2b:99:58:98:60:23:83:71:2a:22:ad:
b1:0e:54:45:4e:43:e7:56:d3:70:df:1e:3b:a5:cd:
c5:31:00:0b:22:d9:28:e9:ae:25:c7:f0:3a:1c:3b:
25:30:32:37:2b:50:87:91:84:14:b8:f7:a0:60:0f:
10:11:ca:6d:80:57:07:7e:47:d3:b8:51:d8:dc:a5:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:57:87:0E:43:F6:A3:23:3F:D5:39:8A:12:44:E1:14:F4:93:84:71
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:b3:9f:44:d3:c8:9c:e2:b0:4b:fb:4b:f0:d2:18:76:c0:
b0:b8:e2:ef:e4:d5:05:d3:d3:92:c6:ec:50:15:29:69:e1:9d:
c2:39:94:72:97:70:a7:7d:08:ca:9c:85:4a:9c:4b:bc:5f:c9:
e0:43:e0:22:31:a2:53:39:db:88:4a:06:da:f0:b6:d6:40:16:
f5:7f:80:b4:77:3f:7f:b9:36:7d:d6:f9:2c:2c:d5:4e:3b:10:
5c:5a:f5:9d:10:be:6a:54:00:07:cc:0e:3d:72:16:d4:58:cb:
8e:fb:45:9a:ab:2b:05:8a:c2:b8:e5:55:d5:09:bd:de:e1:ca:
67:50:dd:e6:51:60:89:cb:45:cd:ed:b1:ef:9a:d5:83:d1:31:
34:66:cb:8c:6b:b1:06:a1:8f:a0:44:74:1d:4c:71:05:c2:b4:
53:a4:4a:79:63:93:51:f8:80:17:21:0f:3c:03:a8:b8:20:1e:
01:37:53:d6:0a:69:3a:eb:31:8c:31:ca:15:5e:57:8f:ed:0d:
49:f8:1a:5e:10:01:06:7d:7d:ca:be:72:f6:95:ec:23:2b:db:
81:2c:40:64:c3:3f:d8:34:29:7b:df:dc:84:14:15:02:71:85:
02:83:44:98:a5:1a:91:30:9b:6b:45:68:17:e8:4c:b1:5f:6f:
e0:6e:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:42 2025 by rpki-client