Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: g/2qXTyXNqCMpKYy/VE2IaILkZMhgp48/XTnjpLtANc=
Subject key identifier: F3:B3:88:2D:5F:D6:8F:D1:C7:23:5A:A6:6F:1C:DC:37:75:97:B3:E3
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 0199FD34152F8868FCF9436C43E15B631AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0D07
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: SP5qVEdm+VszoWff14BtBHOn2aXkDaivKvvlaTok8D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:15:2f:88:68:fc:f9:43:6c:43:e1:5b:63:1a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=f3b3882d5fd68fd1c7235aa66f1cdc377597b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:14:9e:1e:3e:59:73:0f:13:cb:f9:e8:ae:
48:4c:e3:96:40:0f:dc:0f:54:cc:e4:43:6e:e4:4d:
e6:17:91:4f:db:fc:9f:6d:f6:10:12:53:0e:da:6f:
ea:85:3a:b1:3d:55:e2:df:d2:f5:48:86:11:76:e6:
79:2d:f6:3a:19:6a:93:fb:5b:d8:61:9b:97:f7:43:
a0:52:f9:54:db:12:3e:27:99:8f:da:4e:aa:54:13:
9f:03:20:d8:33:e1:e0:d1:b1:1f:b0:c0:0b:2b:8c:
14:a2:b8:65:de:36:fe:b0:fa:f9:a8:52:23:c0:3f:
94:83:b5:92:2d:bc:0a:c1:62:f1:3a:7d:d3:a4:51:
40:f7:09:1c:65:48:bc:e4:0a:7f:01:27:5f:42:fa:
f4:69:98:b6:f8:aa:c5:49:2e:cb:f6:d4:2f:41:18:
44:a9:73:d7:1f:65:31:6f:46:ee:d4:86:28:e8:c0:
7e:b4:6f:fd:5e:4a:8b:38:13:d3:7e:49:2e:44:2e:
35:a2:f9:00:29:ad:58:29:d2:b2:8d:9a:ca:dd:a5:
93:12:0c:cf:6e:0a:fe:8e:37:57:ab:38:9f:e3:10:
2a:96:0a:09:9d:6a:11:a2:00:5a:f2:27:81:37:53:
66:62:d5:56:e9:a0:00:de:65:d8:a4:38:35:00:fd:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:88:2D:5F:D6:8F:D1:C7:23:5A:A6:6F:1C:DC:37:75:97:B3:E3
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f6:5d:33:af:bf:53:07:20:07:bb:54:fb:b7:e0:99:29:02:
da:98:37:82:20:15:51:1c:07:70:1b:d7:1a:68:f6:57:90:d0:
f9:e9:e7:8d:50:87:65:7c:4b:cc:2b:12:1b:34:20:a6:e0:de:
14:94:23:82:c4:57:3e:33:1a:50:12:1c:e8:11:97:18:68:5f:
f3:90:be:cb:7f:29:1b:e5:c9:98:92:e4:9a:50:40:da:ad:ae:
1b:9e:d7:9c:d2:a8:9a:ca:e9:2c:f7:f1:86:f1:9e:79:c3:f5:
3b:2f:be:e1:b9:ec:09:98:7f:97:68:ef:fd:2d:ee:82:5f:e6:
da:bb:9b:8d:ce:23:78:47:2a:c4:5b:6a:b8:29:46:f8:a6:0e:
b1:ec:78:44:b3:f1:36:cb:8c:ac:ff:81:5f:3d:c1:90:3a:48:
48:46:e9:3a:65:c5:c5:f1:9d:53:b3:37:db:94:98:99:12:01:
c1:4f:6e:ee:64:73:e7:3e:92:91:f0:40:76:d6:f9:ed:91:dc:
6f:20:3b:5d:e9:53:8c:8e:c3:42:9b:b8:e4:47:31:ae:d0:09:
ab:00:56:23:d9:ba:c9:4b:d9:90:47:93:a8:85:9e:2d:8c:be:
42:25:96:0e:fe:d6:3e:5c:97:39:3c:f4:85:95:95:39:a7:a1:
9b:d2:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:39 2025 by rpki-client