Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: D1dsYpcy3gx+92IgPFzKjzPWREwNbPpLbtrj7semHeE=
Subject key identifier: DD:EA:80:67:08:EA:92:24:9C:C2:14:71:68:14:D7:2C:F7:7F:D3:8F
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 01984AE5C9A1728259C6D27B5F31BFFE3619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 02E7
Signing time: Sun 27 Jul 2025 08:00:29 +0000
Manifest this update: Sun 27 Jul 2025 08:00:29 +0000
Manifest next update: Mon 28 Jul 2025 08:00:29 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: RSRUDpsHEoUSNIXP0iO3RV31X/V1YEXcPMsOM89MQbg=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:c9:a1:72:82:59:c6:d2:7b:5f:31:bf:fe:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Jul 27 08:00:29 2025 GMT
Not After : Jul 28 08:00:29 2025 GMT
Subject: CN=ddea806708ea92249cc214716814d72cf77fd38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:b0:f5:f0:04:fd:6e:d3:02:1c:94:af:df:
7e:50:44:a1:bb:66:0c:93:cf:34:f5:fc:49:f4:20:
51:ba:46:c0:65:4c:3b:15:f7:48:8a:a1:c9:3a:f7:
24:e8:1d:0c:d3:5e:28:d2:08:98:40:b7:13:ef:ee:
f8:da:08:f0:64:ea:d3:72:b7:51:fe:25:91:73:62:
1e:9f:0a:60:37:a3:39:56:f9:3e:d2:56:8e:b0:7c:
b7:f8:76:44:1e:7e:c1:bc:f2:7d:7d:c6:b5:7b:cc:
ef:a6:14:92:1f:d5:10:e6:88:bc:dc:f6:04:a8:16:
e7:ca:c0:b0:2f:f5:e6:81:fe:c4:11:90:3a:c3:0b:
31:bb:a5:17:7c:19:09:e2:d8:87:0d:26:f3:91:c8:
a8:45:ae:81:ab:00:4c:ef:52:57:65:85:b3:8a:96:
65:96:44:f1:84:01:7a:97:b3:22:f0:51:b2:f6:57:
eb:69:16:f7:bc:2e:14:86:a1:e3:46:16:a0:78:6a:
1a:f8:dd:77:12:65:b6:86:6b:ef:4d:6a:ae:e1:f1:
57:48:69:0c:85:04:8e:c5:c0:54:bf:b9:36:16:27:
28:17:f6:29:9d:94:b0:8b:a9:1a:9c:c1:42:1b:56:
87:8e:10:7d:5d:fb:12:49:bf:06:58:15:a4:84:20:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:80:67:08:EA:92:24:9C:C2:14:71:68:14:D7:2C:F7:7F:D3:8F
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:67:6c:55:6e:a6:8c:79:96:66:60:04:44:db:2f:68:b3:
2a:29:ca:9e:7b:8e:21:23:13:62:88:ec:f9:e3:65:37:cf:18:
07:32:45:80:f0:27:9e:dc:48:60:06:88:2b:fa:f3:14:1a:0b:
02:e5:01:71:a7:87:36:c6:66:50:b9:08:41:95:c7:05:a1:57:
ba:8b:6e:c3:ae:df:4a:45:b8:98:e3:51:75:f8:92:6c:15:f0:
ed:5c:2f:5a:34:6f:46:5a:5b:e2:39:1e:50:95:68:2e:58:15:
91:f6:da:c4:a6:62:5d:cc:97:da:b2:40:93:81:ac:bd:22:f1:
27:95:36:29:16:dc:6b:eb:f6:8a:48:92:90:3b:b8:87:e4:10:
65:15:1d:94:ba:43:f7:64:6f:46:f0:25:c9:61:27:d4:ca:8b:
04:11:bf:9f:76:a9:dc:34:eb:6f:6b:0e:a0:43:8a:3b:b1:33:
74:f5:94:f2:e2:fb:8a:c2:90:2e:0d:fc:43:75:a3:d1:db:df:
90:30:a3:30:42:2a:ba:7a:92:16:47:1a:08:01:6d:a1:86:16:
a8:b3:0c:39:70:aa:cd:41:bf:7a:25:bd:51:f2:09:b1:c5:83:
ba:39:0a:49:5c:57:67:96:e5:2d:45:ca:51:7c:35:d1:12:e6:
f6:40:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:44:05 2025 by rpki-client