Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: T69BpYCNpn0YctrAbwTXxb7DwKUQ7+r5nqkhxTIWLtE=
Subject key identifier: 18:0C:4C:51:62:C6:6B:51:30:A0:EB:47:1F:A9:25:79:A0:11:A6:49
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 01975F4B2CD708FFCD12D968BB0E47E709D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 026D
Signing time: Wed 11 Jun 2025 14:00:51 +0000
Manifest this update: Wed 11 Jun 2025 14:00:51 +0000
Manifest next update: Thu 12 Jun 2025 14:00:51 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: 9fsDnK8qedaSS8AyejAT2UMzrRKEXjkUosmB+/jFhRg=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4b:2c:d7:08:ff:cd:12:d9:68:bb:0e:47:e7:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Jun 11 14:00:51 2025 GMT
Not After : Jun 12 14:00:51 2025 GMT
Subject: CN=180c4c5162c66b5130a0eb471fa92579a011a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:b2:e0:a5:57:f8:7c:49:47:7e:e1:75:1f:
f2:b8:96:d9:64:e1:20:af:8f:7b:c0:75:5d:3c:7e:
ac:99:c0:28:32:a0:64:07:90:4f:ed:bf:64:44:e2:
df:55:e8:51:db:a5:32:5e:14:0e:63:a0:d3:94:37:
bd:90:af:3c:01:ec:85:1b:25:17:fc:5f:21:43:c5:
aa:aa:e3:45:c9:b0:38:2a:93:b8:df:dc:58:f5:fc:
00:a6:ad:61:8a:25:d4:db:5f:c6:44:16:86:10:e4:
ad:07:53:00:07:b1:2e:07:0f:87:35:3d:c0:65:9e:
49:60:ff:5d:70:54:43:e3:00:f7:27:27:34:a1:ce:
12:b3:2e:6c:04:bb:bd:7b:3e:c2:02:54:f7:a3:76:
4a:aa:de:4e:e1:94:fd:96:c5:02:6d:d7:5f:32:63:
9f:f1:44:0e:19:05:24:90:2a:62:3d:97:bb:bd:39:
92:39:96:2f:b9:15:d2:6a:25:11:71:7d:28:db:de:
ce:54:e4:7e:31:fe:c8:aa:c9:2d:2a:8a:4f:23:4e:
43:08:2f:6a:8c:ef:36:71:e4:35:f2:a6:3a:0e:d3:
cc:76:6b:00:2a:63:09:52:dc:22:c0:45:de:c0:4f:
27:69:b7:15:d5:63:d8:0f:66:24:2b:8f:53:01:ba:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:4C:51:62:C6:6B:51:30:A0:EB:47:1F:A9:25:79:A0:11:A6:49
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:97:65:f2:c0:06:6a:b6:bc:1c:c1:c6:2c:84:78:ad:dd:
c0:57:05:be:cf:e2:df:9e:0c:41:29:b2:62:d3:15:db:c7:e2:
41:e3:81:16:ea:85:3a:59:32:1e:16:97:6f:3e:45:7d:da:96:
08:ba:a4:42:07:67:eb:82:f1:bd:55:c7:f1:b8:60:aa:07:42:
2b:30:f3:e9:28:1b:a2:ea:3b:07:fc:a0:0c:e5:fc:04:1f:c6:
91:5f:13:ee:e7:f0:b0:0d:40:35:eb:43:8a:88:44:3b:25:68:
69:ee:25:0e:12:69:b5:67:0e:4f:3a:3c:3c:4c:24:03:a2:dc:
40:ab:7f:10:7c:34:a8:8e:62:ba:85:1f:44:2d:23:10:0e:b2:
0e:7a:6f:08:c9:45:83:d7:80:d2:b5:43:3a:d4:39:8b:54:6a:
55:96:d9:6d:84:98:75:e7:dd:7d:d5:c6:59:23:17:ab:34:00:
40:a0:09:1d:a5:90:35:92:05:ca:f7:5e:28:7c:83:d6:18:b2:
ba:9a:ea:d3:a1:da:a5:13:3d:8e:47:41:ce:c5:1d:39:66:eb:
f0:de:5f:04:0f:29:52:28:bb:65:f5:67:ab:9c:ea:82:a8:06:
e4:d0:d5:90:87:05:af:8c:ef:58:15:6b:2e:69:3a:b7:85:c3:
44:c5:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:21:30 2025 by rpki-client