Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: HYaTAJ7cQJbIw837jsVRXRiJyrD6LcFbnRUp9+/8z5E=
Subject key identifier: 40:40:DB:FE:61:D4:1F:9D:D6:72:7F:A7:70:8A:2B:7C:F1:59:61:0B
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 019753B4748AC1E6A62884A156CEDECCB0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 0267
Signing time: Mon 09 Jun 2025 08:00:24 +0000
Manifest this update: Mon 09 Jun 2025 08:00:24 +0000
Manifest next update: Tue 10 Jun 2025 08:00:24 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: DHTVP70yrvS9Jy/1wTmlm75TerIVgGHRtVaPa4S/oHg=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:74:8a:c1:e6:a6:28:84:a1:56:ce:de:cc:b0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Jun 9 08:00:24 2025 GMT
Not After : Jun 10 08:00:24 2025 GMT
Subject: CN=4040dbfe61d41f9dd6727fa7708a2b7cf159610b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:c9:5c:72:48:fd:3f:c7:c8:fe:9f:35:f5:
37:23:6d:af:03:a1:f3:50:01:d1:23:2f:60:dd:e2:
80:f6:fb:ad:4a:59:6c:96:0b:ae:19:b4:d5:e0:96:
f7:3d:f7:fd:ac:3a:91:39:8a:68:12:98:ca:10:66:
ab:ca:91:d5:a4:ba:cb:9f:2c:c8:d1:55:20:08:89:
7f:c8:9e:cf:89:b6:27:e1:32:cd:3b:c2:07:ba:d8:
48:29:d0:bb:a2:ca:37:44:7d:94:5d:03:cd:1e:e4:
26:d1:93:52:5d:aa:ea:38:b2:3a:31:2a:30:e8:4f:
62:ed:a3:df:41:c3:86:0d:7c:a2:67:9f:93:3b:82:
68:6c:5a:00:76:fd:b7:23:88:dc:c6:1f:f2:9c:94:
6b:13:5e:49:a8:0b:a0:7d:bc:ac:79:85:66:19:b3:
2b:57:58:1e:74:86:40:b5:a8:d5:49:99:eb:af:60:
7c:7a:6f:bb:72:5b:a0:5d:87:b8:b6:c3:d1:0f:1b:
d8:49:2e:23:98:07:7b:4d:ef:9a:fd:03:0d:74:85:
aa:3a:84:e1:2f:d4:55:7f:dc:c5:c5:31:21:4f:86:
1f:dd:c4:6f:9f:fc:6b:05:76:78:9a:09:fb:7a:96:
2d:80:93:90:3a:c2:57:a0:c7:44:d4:38:68:1d:34:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:40:DB:FE:61:D4:1F:9D:D6:72:7F:A7:70:8A:2B:7C:F1:59:61:0B
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ba:48:18:22:42:41:00:20:75:cc:1d:0a:14:b6:88:52:da:
32:f5:72:06:2d:58:85:da:b9:ae:18:b9:34:76:18:29:7d:fd:
13:f1:39:af:db:db:e9:20:ba:29:61:dd:a5:25:4b:9b:71:a1:
cb:40:25:dd:f6:33:5a:ed:ba:e3:dd:75:ec:ac:66:a1:9e:1d:
fa:e7:b6:ff:41:6d:a3:27:0e:26:a1:67:41:55:98:aa:32:82:
c3:7a:1b:ba:57:c1:0b:59:06:97:9b:f1:e7:50:8f:ab:67:e3:
fe:a6:0c:db:19:e2:67:63:76:eb:dd:a1:a4:6a:56:40:43:e1:
7c:98:c9:8a:0c:9c:f2:12:2a:45:e5:ba:ed:ff:64:cf:30:a6:
40:88:99:79:fb:71:1d:41:e6:61:87:ac:e5:04:a4:32:a0:57:
6a:5b:84:5f:6c:3e:33:33:b0:6d:2a:8b:71:c3:62:59:ed:0b:
39:8a:ca:21:fb:3b:18:14:49:7f:cb:10:59:cc:42:0f:c0:e0:
7e:47:41:8d:6e:b7:03:b1:2f:30:72:f0:ce:2e:f8:39:b2:39:
cc:c8:2f:17:62:5d:0e:21:f6:d8:22:9d:c0:46:5e:f3:84:25:
59:71:7c:eb:b6:7b:45:86:35:1a:1e:0e:99:c8:d7:0a:42:dd:
54:23:f6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:28:02 2025 by rpki-client