Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: 8Lvb0vDldER1ffbYXAYeqsSIwFX8ZalkgVft8GTTdeA=
Subject key identifier: D4:2E:C8:2D:CA:65:17:76:3D:19:01:47:42:6B:F4:3B:1F:19:F0:88
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 019A7112D30B928759F9E01628B125A12A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 0404
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: mgzXNCGU2T7HE0lAdwM5lLR8pjGaa1DG5Kfe17Kx9t8=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d3:0b:92:87:59:f9:e0:16:28:b1:25:a1:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=d42ec82dca6517763d190147426bf43b1f19f088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:e7:eb:06:3d:e4:5f:fd:65:ef:18:53:7b:
f5:53:b1:55:9f:25:6a:0c:b4:0b:a6:d1:c7:87:2a:
ef:1d:42:a2:77:4a:db:a3:1f:88:90:71:0c:60:23:
93:bf:2d:33:6b:17:78:9f:c1:30:16:d3:04:25:1e:
dc:08:2f:22:ba:7a:9d:ef:d9:7b:b9:e4:96:56:3e:
c6:c9:85:bc:91:20:1e:8a:51:91:7f:46:05:3e:25:
2b:9e:c8:f5:0f:b9:87:d8:c6:54:bc:73:57:59:e2:
d5:95:8c:13:7b:8c:4b:34:22:9d:ed:1e:1c:fa:20:
7f:51:a8:cf:7a:c5:7e:3d:7e:75:03:b1:af:d0:db:
d2:23:b5:08:55:ff:c6:11:a3:7b:1a:67:6b:41:eb:
85:f3:d0:fa:6b:9a:9f:9b:dc:49:fb:b5:76:db:f2:
b2:2a:ca:1a:61:18:4a:c1:34:5c:d2:52:eb:0b:93:
49:30:22:ba:9f:f2:80:82:dd:68:96:ed:d0:35:c4:
62:21:ec:58:f6:65:46:c8:63:d0:f7:ef:ae:1c:d7:
f2:c1:89:ac:2f:e6:44:6a:94:fc:dd:45:f4:3b:fe:
02:63:26:3d:7d:55:67:71:01:8a:83:2d:9c:38:a9:
d0:ab:24:38:39:92:ac:8d:20:84:2a:4a:37:3e:76:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:C8:2D:CA:65:17:76:3D:19:01:47:42:6B:F4:3B:1F:19:F0:88
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:da:2c:da:b6:11:88:e9:0a:a3:d8:49:d7:3c:de:44:0d:74:
43:24:35:29:38:3c:e5:00:ec:ed:b8:d7:eb:be:41:c3:98:79:
15:3c:38:3e:30:d9:f1:da:e2:29:25:e3:87:90:cb:e5:69:35:
a3:b8:7d:42:68:9f:f6:95:f0:bb:c4:8d:ba:7a:ab:00:23:de:
44:75:f0:47:19:91:02:67:19:4e:0a:ab:12:bd:e6:bc:33:2b:
ed:64:c8:0b:b2:f1:5e:87:ea:40:f5:bc:49:ab:52:ca:4f:54:
b2:ba:41:14:28:ce:ef:b8:e5:20:80:04:bd:73:b8:4b:23:33:
0e:15:c8:3a:34:16:9b:8a:34:26:da:f7:c6:11:58:40:f7:04:
55:a1:75:bf:21:fa:ae:48:e9:3d:6b:36:2f:3f:d8:24:3f:5e:
14:c5:19:c4:43:00:f7:df:36:34:17:6e:78:6c:4a:34:da:af:
a7:b8:cd:5c:30:be:5e:ed:77:19:87:d0:ba:d8:02:ea:e9:0a:
0b:4e:89:a7:1c:d5:e9:3a:79:1e:32:e5:0f:0e:52:b3:97:82:
1d:33:0b:11:17:3b:6c:f1:46:48:82:73:a3:91:b4:8e:e4:5b:
35:14:b2:e0:3b:32:97:4e:f9:4b:ea:85:c4:48:e0:8b:66:a3:
72:b0:21:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtMLkodZ+eAWKLEloSosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGY5MzViY2QwNDg2MjVlNzAxNTVjZjJjYzI4MjllMmMy
MDcyYTYwHhcNMjUxMTExMDQwMDUwWhcNMjUxMTEyMDQwMDUwWjAzMTEwLwYDVQQD
EyhkNDJlYzgyZGNhNjUxNzc2M2QxOTAxNDc0MjZiZjQzYjFmMTlmMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPDn6wY95F/9Ze8YU3v1U7FVnyVq
DLQLptHHhyrvHUKid0rbox+IkHEMYCOTvy0zaxd4n8EwFtMEJR7cCC8iunqd79l7
ueSWVj7GyYW8kSAeilGRf0YFPiUrnsj1D7mH2MZUvHNXWeLVlYwTe4xLNCKd7R4c
+iB/UajPesV+PX51A7Gv0NvSI7UIVf/GEaN7GmdrQeuF89D6a5qfm9xJ+7V22/Ky
KsoaYRhKwTRc0lLrC5NJMCK6n/KAgt1olu3QNcRiIexY9mVGyGPQ9++uHNfywYms
L+ZEapT83UX0O/4CYyY9fVVncQGKgy2cOKnQqyQ4OZKsjSCEKko3PnamiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQuyC3KZRd2PRkBR0Jr9DsfGfCIMB8GA1UdIwQY
MBaAFDgPk1vNBIYl5wFVzyzCgp4sIHKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2Mt
NmMwNzcxZjI1Mzk2LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2MtNmMwNzcxZjI1Mzk2
LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9os2rYR
iOkKo9hJ1zzeRA10QyQ1KTg85QDs7bjX675Bw5h5FTw4PjDZ8driKSXjh5DL5Wk1
o7h9Qmif9pXwu8SNunqrACPeRHXwRxmRAmcZTgqrEr3mvDMr7WTIC7LxXofqQPW8
SatSyk9UsrpBFCjO77jlIIAEvXO4SyMzDhXIOjQWm4o0Jtr3xhFYQPcEVaF1vyH6
rkjpPWs2Lz/YJD9eFMUZxEMA9982NBdueGxKNNqvp7jNXDC+Xu13GYfQutgC6ukK
C06JpxzV6Tp5HjLlDw5Ss5eCHTMLERc7bPFGSIJzo5G0juRbNRSy4Dsyl075S+qF
xEjgi2ajcrAh8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:56 2025 by rpki-client