Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: fibIkf7yZQX1qyF5np+ai5OoVrB+ov128mr/3RQv5IY=
Subject key identifier: FF:44:F2:C0:CF:E8:7E:CD:EF:9B:45:9A:57:40:9D:62:EC:F1:33:BD
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 01965E71E1118BBA751B8B04F6B5D2457361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 01E8
Signing time: Tue 22 Apr 2025 17:00:43 +0000
Manifest this update: Tue 22 Apr 2025 17:00:43 +0000
Manifest next update: Wed 23 Apr 2025 17:00:43 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: HfdbtO0AA9/7q/T0+VJtucbPTpZCrw9eL+2lMBJcqMo=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:e1:11:8b:ba:75:1b:8b:04:f6:b5:d2:45:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Apr 22 17:00:43 2025 GMT
Not After : Apr 23 17:00:43 2025 GMT
Subject: CN=ff44f2c0cfe87ecdef9b459a57409d62ecf133bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:ad:5f:94:af:dc:1b:22:3c:4b:fa:4f:94:
cf:9d:3b:f9:52:94:61:b3:28:5d:9b:77:50:8b:48:
92:84:11:a3:b2:c9:72:8a:80:83:0a:90:52:a6:5e:
fb:ee:07:e4:07:12:45:e1:38:9a:5d:6e:8a:19:26:
ec:c8:9e:3a:58:a3:65:9a:19:98:34:f8:69:ee:62:
72:41:90:14:ad:ae:cb:c4:7a:7e:82:94:97:0e:84:
1c:c0:db:e9:ac:af:a6:9a:ba:c3:d1:8d:ad:74:8f:
ff:4d:c2:28:72:da:67:a2:1b:82:eb:68:6c:f3:a9:
02:4c:24:0d:cf:5b:f4:41:b7:51:cb:09:e4:71:4c:
f6:18:08:ba:78:1a:9a:18:ea:a7:2a:2f:05:f7:94:
71:85:9c:a6:31:fa:08:73:79:55:1c:2b:91:cf:9d:
54:54:3b:48:36:d6:50:d9:22:ce:ff:85:7e:29:d3:
5c:eb:3f:69:64:ec:b3:de:4a:9c:e8:db:c5:82:06:
93:7d:4f:9a:05:6f:a1:69:57:ba:a6:43:cf:0b:99:
9d:2c:15:5d:9a:bd:99:fc:96:eb:62:ef:04:00:ae:
41:76:37:49:34:84:24:1b:34:ee:2d:a0:a6:70:41:
28:35:d0:e9:bd:cb:0b:d9:fc:63:15:03:99:58:4b:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:F2:C0:CF:E8:7E:CD:EF:9B:45:9A:57:40:9D:62:EC:F1:33:BD
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:60:72:50:60:aa:f6:da:2b:c9:f4:51:25:a2:9e:a6:c8:09:
24:f9:a7:96:8b:26:26:18:eb:dd:ab:09:19:e9:4a:7b:d3:aa:
06:55:a2:9b:e2:ec:31:be:65:79:d6:75:e6:5b:db:2a:e3:85:
83:a5:7d:bc:b7:26:e9:4b:5d:98:5b:88:74:d3:3f:22:5d:99:
95:07:6f:e8:27:85:92:86:a3:7b:77:3f:52:8a:38:29:fd:9a:
a7:85:2a:6c:09:f9:01:90:3e:56:43:75:b0:82:a4:f3:fc:33:
f9:39:14:46:f5:1a:57:39:75:7e:2a:d2:91:da:81:82:c0:7c:
13:35:a9:50:7f:2e:dd:fd:09:b5:a5:28:d6:fa:19:57:fb:26:
20:cc:54:33:5d:d8:3c:ef:5d:14:ae:93:7d:ee:9f:e0:82:94:
ea:d1:bb:fc:66:d5:1d:38:d1:ae:54:15:b9:31:87:63:2d:0f:
cc:94:10:a0:da:2b:e2:a2:c4:1d:89:92:97:96:5a:af:68:a7:
bb:f0:ab:8b:86:94:62:f5:76:30:b5:7c:07:53:24:cc:b2:21:
f0:fb:9c:07:96:5a:ff:dd:d7:fd:28:db:a4:95:08:cc:0a:88:
04:7d:36:b7:0d:1b:6b:57:3c:58:7f:95:dd:76:3a:55:f3:e4:
00:f8:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:22:17 2025 by rpki-client