Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: vxNaD6NmBqN4rg3krFvD7wKlIBunHNrOrthD/qrbPpY=
Subject key identifier: 0B:24:2B:25:2A:0A:CC:84:DE:68:EC:F8:ED:F3:19:D9:8F:F3:37:1E
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 0198D5BBA1B315C26FFC704011738D6E264B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0C6E
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: hnd+jCnNCFshhgrLc/lRVtLa71Byi3Ufg31NpwxHsIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a1:b3:15:c2:6f:fc:70:40:11:73:8d:6e:26:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=0b242b252a0acc84de68ecf8edf319d98ff3371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:82:ee:a1:2f:d8:00:cc:42:22:90:c5:74:
35:91:88:9a:7f:0b:c9:d1:b8:2d:51:6c:3c:57:5e:
ea:54:27:22:4b:05:93:27:c6:57:86:1b:8f:60:39:
19:b2:e9:4e:f1:ef:38:71:df:f9:8d:88:d8:3a:80:
3f:86:b5:0c:2e:c3:bc:7b:02:f4:2b:8c:fc:45:9c:
39:97:2e:a8:37:77:1b:1b:f6:59:c2:f3:62:f5:eb:
e0:f3:c5:2b:87:7f:2d:60:41:be:62:ef:ec:9b:c0:
f9:4f:68:f9:bb:6a:ec:a4:b9:0d:21:4d:63:91:11:
7d:4e:46:21:62:9f:fe:c4:e7:0e:f3:ad:e4:13:31:
ea:86:ac:b2:66:03:a1:c1:ac:5d:d3:2c:01:8b:a1:
97:89:52:4b:a3:08:7b:5b:4f:c8:26:37:65:51:67:
98:91:68:ba:0a:0a:46:d9:3a:d1:e3:5e:2b:62:2b:
80:a9:7a:83:3a:20:2b:64:23:ee:ad:a5:65:93:d7:
07:9a:83:3f:89:99:bc:d1:f1:86:65:0a:ac:24:52:
a5:b5:84:4e:d8:48:06:3c:7e:8f:99:37:8f:b2:28:
e7:95:7e:00:cb:be:f9:e6:85:4a:1b:92:14:cb:dd:
ef:f7:8b:a7:b3:6c:f6:46:a6:56:1b:bd:b5:cb:65:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:2B:25:2A:0A:CC:84:DE:68:EC:F8:ED:F3:19:D9:8F:F3:37:1E
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7b:2c:02:e6:0f:86:73:ab:08:ff:33:13:29:eb:21:62:85:
92:c6:70:dc:ee:8c:33:de:ec:35:1d:7a:9a:40:a5:69:72:b2:
86:56:e5:e4:ba:b8:cd:c4:e9:12:e6:9c:fa:19:8e:10:65:42:
0c:22:6b:47:de:6f:10:b3:54:d7:9d:ff:ca:9c:b7:7a:39:79:
d2:79:2d:9c:7d:7e:7b:45:86:b8:fd:e4:45:c3:84:da:67:96:
d3:dd:21:16:67:4c:6c:c6:0e:dd:f0:76:5d:46:69:e4:e6:2d:
31:c4:be:3e:eb:fc:c7:87:26:e8:62:39:8c:62:ca:3c:e9:48:
d7:ca:5a:37:d0:80:70:c1:37:df:29:f2:71:4b:c0:e9:29:22:
7e:19:66:cf:35:01:ce:b5:fa:e1:0f:6b:c8:fb:ea:f1:c7:c6:
d0:70:1a:1e:58:18:79:df:22:74:46:93:ca:be:a5:de:50:8b:
ca:e9:ae:0e:f9:d6:5a:e2:25:98:da:1b:fc:f8:98:bd:1d:f7:
6b:de:28:86:05:bc:58:fa:14:ef:0f:ba:78:c0:2a:27:55:af:
57:60:41:eb:da:d8:62:1d:9e:63:36:80:74:19:03:cd:0c:29:
a9:a0:38:a2:e7:bd:53:73:2f:ba:90:41:50:8c:13:6b:c1:d0:
ce:55:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:06 2025 by rpki-client