Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File: 91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier: fXnIAl8Yfyp56So6JphpDOkOs0hmKLSXjvH1ga8mh+o=
Subject key identifier: D7:18:58:5A:FC:65:15:35:45:98:07:5C:EF:60:2B:D8:44:01:38:4A
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer: /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial: 019A71B7E9E0BCB2FE294F7CF3097AD23E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number: 0A2F
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: 7DobkB9YDZRCFthUqh8EeCazT9A.roa (hash: wrSSktbEIiruaMGzjyB9HPAsqfXawT4rvBYdbF17ar8=)
2: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: lXozoLcKt8dySa3lpQueWRlU9x5yenzdv0u1RYBYn20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:e0:bc:b2:fe:29:4f:7c:f3:09:7a:d2:3e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=d718585afc6515354598075cef602bd84401384a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:dc:40:50:f5:aa:e6:c3:b1:b4:4e:9e:f1:
9f:7f:06:f7:20:57:9a:91:0c:f5:7b:26:37:96:57:
d1:e4:e2:d7:27:86:a4:34:ba:5f:d9:2c:dd:e7:e8:
ae:cf:5d:25:22:5c:ba:6e:b7:bb:9d:f5:b2:34:db:
07:4c:1a:c5:00:0e:ff:97:13:f2:c9:d6:ee:b3:db:
be:88:42:ee:10:a3:23:82:7b:c9:64:d1:3e:e2:b2:
66:61:93:60:3a:17:8a:0d:c6:96:9a:1b:2d:f4:d3:
3c:74:df:e0:35:4e:dc:48:64:9b:09:78:73:d6:bc:
3f:7d:a5:5e:a4:1f:06:b3:a6:f7:07:b5:5f:e5:05:
ab:13:bc:12:b6:9e:fa:56:7f:76:b5:62:b6:03:5e:
e5:f8:2d:31:9c:90:c6:2b:ea:be:86:e5:42:a5:c2:
10:b6:a6:0b:78:1c:c5:66:d1:6a:1e:1a:cf:e3:98:
66:c6:70:4c:3d:6d:8e:59:05:a4:3f:50:3a:2c:26:
18:e5:1c:a0:d7:ef:ae:87:6d:97:72:62:6b:b1:42:
bb:fa:56:2b:5e:92:d5:e6:3c:66:0c:ed:02:1a:94:
4a:52:17:a0:7d:7a:13:08:fb:03:9a:6c:f7:13:17:
c3:62:00:f5:a0:d3:c4:2a:83:32:1c:2f:ec:95:6c:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:58:5A:FC:65:15:35:45:98:07:5C:EF:60:2B:D8:44:01:38:4A
X509v3 Authority Key Identifier:
keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:73:84:59:37:79:26:e0:3f:d4:ea:69:e1:81:65:42:d0:87:
23:c3:e3:d9:00:67:cf:cc:91:81:1f:83:6f:28:e6:42:46:18:
7c:e3:30:b7:58:5e:2f:7e:10:46:94:58:99:e2:91:a0:b1:48:
1d:f6:ed:72:26:b4:0b:99:0a:93:c1:db:4f:1a:23:39:b6:45:
23:6e:c3:36:f7:93:2f:94:fd:d4:a5:5f:89:18:5c:84:3f:f1:
95:a0:b5:bf:e1:04:96:52:75:eb:7b:2c:eb:57:85:3b:7e:5b:
e1:d1:ec:78:85:ba:8a:6a:db:c6:04:01:11:cd:74:02:d4:fc:
00:17:41:c4:33:67:45:33:fa:e3:ad:9c:80:5d:3d:e6:45:3f:
8e:a9:9b:1b:8e:1f:fc:50:88:84:6e:e1:10:c5:a3:66:ed:c5:
7d:fa:53:ae:16:f8:10:76:83:18:b5:e6:86:89:db:16:a3:1b:
43:15:f4:43:f5:ea:b5:21:e3:59:67:74:93:fa:54:98:3b:5d:
4e:30:c4:16:f5:24:10:10:26:25:a9:c6:b8:9c:3f:2c:ad:81:
29:50:80:96:af:70:a0:79:90:bb:a8:58:6c:94:dc:d6:3b:2b:
20:ca:3f:db:b3:ab:a8:bc:ec:63:af:12:3d:c7:c7:a7:27:74:
c8:17:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:29 2025 by rpki-client