Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: yIX5QEVXrYKemBOyns9KkJn4itV/H/lNwkvU2CG6x7w=
Subject key identifier: 2E:D2:55:E9:1A:73:06:EE:9B:6B:DB:8B:F4:34:56:DC:B1:59:12:A4
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 0197597F8DE9A6C53679A0AA4027ABA40990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 026A
Signing time: Tue 10 Jun 2025 11:00:20 +0000
Manifest this update: Tue 10 Jun 2025 11:00:20 +0000
Manifest next update: Wed 11 Jun 2025 11:00:20 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: aHykv/8fy1XfUYqs376to/nbbiFVhoUQ9kzLvTz6AZY=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:8d:e9:a6:c5:36:79:a0:aa:40:27:ab:a4:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Jun 10 11:00:20 2025 GMT
Not After : Jun 11 11:00:20 2025 GMT
Subject: CN=2ed255e91a7306ee9b6bdb8bf43456dcb15912a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:77:a1:49:fb:e8:5d:4c:d1:b3:88:35:cf:
34:cb:5b:2a:fa:5a:83:21:93:69:b1:8c:73:cc:10:
9d:46:7d:cb:3a:79:84:02:5f:89:af:48:77:c6:c1:
41:84:96:7c:44:27:95:5c:78:5a:64:13:16:d4:65:
99:07:b3:ea:df:b9:67:ec:db:8f:1b:da:6b:ec:e3:
fa:35:d5:bf:21:8e:9e:98:e5:f3:f7:a4:89:59:10:
b5:ee:26:42:dd:77:2c:44:b9:da:5f:83:ae:9b:f0:
d2:b0:82:cf:5b:9e:b5:17:89:b5:34:dd:33:8c:1f:
fa:a4:2e:db:18:20:b9:74:1e:ef:c8:53:4a:7c:36:
44:b3:84:d0:3b:cd:8e:87:7a:64:58:2d:06:5c:99:
64:6f:2a:81:e5:54:24:bb:50:3e:5e:d3:b2:30:f3:
af:e5:37:56:f7:67:fa:90:12:9f:52:58:c2:d3:a1:
58:cb:26:c5:d5:ca:2a:06:02:c7:c9:09:33:ab:d1:
80:f2:a0:bf:b3:8d:3c:c1:84:5c:65:a5:bb:9c:fa:
ef:18:9d:93:4d:fb:99:b3:e2:20:b5:d0:5c:b6:d0:
45:b6:be:7a:b0:ae:2e:ed:c2:2e:44:e5:40:3f:2c:
d7:52:48:13:fc:0c:43:7e:c5:9e:c3:24:da:db:ab:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:55:E9:1A:73:06:EE:9B:6B:DB:8B:F4:34:56:DC:B1:59:12:A4
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:ff:ed:6d:bd:66:ae:b4:ea:8d:1e:3f:d9:18:25:db:c7:
22:ce:bf:d9:37:e9:e2:c5:a2:b2:96:a8:f7:c1:70:f3:7d:f9:
3f:a8:d8:ed:f1:bf:1f:c5:b4:27:34:78:0b:ef:a6:2e:62:50:
fb:78:5e:ea:25:b1:ac:9e:28:f8:91:93:45:c8:20:ad:79:33:
10:2b:34:7e:92:ea:15:a0:fa:81:96:52:6b:ed:de:c2:0d:58:
ca:91:99:4a:2e:ff:f5:09:1a:5a:81:d0:ea:90:71:bf:6a:d0:
19:52:f4:05:ec:41:7b:b2:f0:3b:05:72:d8:7a:9b:f1:e1:80:
01:3b:07:57:60:94:c8:d3:1b:2b:00:e6:12:8f:d4:3e:71:cd:
40:d8:85:d1:0f:77:00:4f:c3:85:5f:c0:45:c4:94:2e:2f:51:
1e:75:42:98:e0:ec:0b:b5:99:10:04:d7:1a:c9:e9:82:e1:ba:
18:2f:77:29:8c:3e:49:e5:e7:9e:eb:62:4d:b3:2d:ac:44:de:
05:f0:bb:23:b5:f0:cf:4a:48:0a:da:f1:bd:ba:27:47:fa:18:
20:d1:ca:3b:3e:fe:53:1a:21:62:02:30:03:a9:31:56:a9:8b:
7d:82:4b:36:d8:db:43:28:c6:80:d9:54:69:74:00:48:81:75:
c4:d0:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:25:24 2025 by rpki-client