Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: OsGJenrbl3sjD1AUst3OFHFr/ifZgSiIiNHTCQBYiVI=
Subject key identifier: C8:DB:13:7E:60:40:27:35:DE:63:2A:3C:70:11:9A:EB:3E:28:11:C1
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 0197B7EA21813E7D1EA78636218585AD419A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0BDA
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: 17VDih4oHwUHCx2AJrcoqtSoDngxo/o1mKHk27Mt5Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:21:81:3e:7d:1e:a7:86:36:21:85:85:ad:41:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=c8db137e60402735de632a3c70119aeb3e2811c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:72:90:23:b0:82:5a:2a:b1:c6:91:fb:63:
74:cc:f0:43:f5:f6:c1:5e:78:a1:27:50:7a:18:da:
b1:12:2b:6b:ab:64:f0:f6:3f:34:7f:5c:70:2e:0d:
52:00:45:fc:33:4b:23:99:ec:5e:3a:71:64:0a:8c:
74:9a:ae:95:07:43:02:4a:3f:43:5f:b2:bf:08:78:
3a:a8:7d:ed:0f:4b:b4:e7:1c:ef:68:37:9b:db:6d:
ba:72:61:b9:56:6f:b5:41:f2:b0:b2:df:0a:3e:df:
e1:bc:f1:6e:cf:66:a9:28:24:31:3a:1a:ac:f9:f2:
b5:db:10:ff:b0:80:da:93:b4:e6:42:d3:53:40:f4:
d8:7c:9c:fb:28:f2:da:af:2a:ea:ff:15:ed:b0:c7:
24:d5:75:25:04:3e:a8:28:a1:0d:48:b4:69:77:eb:
12:d7:38:92:0d:97:6f:14:45:53:14:14:a9:c6:16:
67:14:fa:be:26:c1:17:66:dd:ce:8c:60:61:73:11:
90:09:bd:bc:0e:15:8f:a1:ec:c5:f9:90:3e:fd:ca:
e8:9d:6b:4a:03:26:c0:39:26:75:66:ec:6b:39:6b:
8b:08:ab:31:f7:1c:f2:f2:57:71:dc:43:c4:ed:98:
d7:6e:4f:13:cb:c7:96:a6:42:08:11:08:38:a0:14:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:13:7E:60:40:27:35:DE:63:2A:3C:70:11:9A:EB:3E:28:11:C1
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:02:ee:aa:b8:47:ac:e9:ef:9b:76:c6:51:96:5d:ee:e0:c4:
79:92:37:a7:90:60:df:dc:6b:ad:9a:a9:01:98:5c:87:ed:72:
d5:e2:f9:c8:f0:73:82:c2:b3:98:52:cf:8a:b2:fb:1f:37:92:
7a:4e:a9:f1:7d:7d:48:0d:2f:fa:62:32:fd:13:18:4d:64:9f:
70:e4:7a:df:1e:50:4a:a1:88:39:fe:b3:01:c8:ac:5c:80:cd:
20:f6:4b:15:af:60:96:96:02:ab:18:c0:bb:d1:39:81:6b:21:
96:fd:e9:0e:0f:1e:5e:9a:96:fa:3f:70:79:af:38:06:fc:90:
f7:89:f5:7d:c8:3c:a4:91:3b:a1:0c:89:34:80:2d:3a:06:40:
10:42:bc:c3:19:77:56:e4:e7:4a:54:52:59:33:ba:1b:48:22:
65:5b:d7:4a:87:6f:32:a1:8a:7d:ce:6d:7b:c3:77:2f:52:73:
95:2e:b8:80:f3:0c:53:4c:e9:1b:22:67:e3:fc:f6:a4:04:0f:
ed:77:1c:18:df:4f:29:6d:7a:c6:93:61:6b:15:d8:bd:3a:f1:
62:a1:6a:22:b6:8d:20:47:25:af:7c:31:ca:33:0b:e7:a4:d2:
f5:4b:6c:4c:38:ac:dd:6b:66:7d:4e:38:f9:e4:e4:54:a6:17:
f2:e2:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:15 2025 by rpki-client