Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: w2hvrd6npR/YAp26IG+0pm0sjC/BQYnF223HJnuoyFY=
Subject key identifier: AE:F8:8F:41:A1:EE:E5:79:F8:B8:22:7A:07:EF:76:5D:73:29:28:9E
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 0198D4E0A3D74AB8B071E984C3839301FE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 038C
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: F7SFRxrSxAfxUk/uJUmmlwK3O2W7s7axhz/SxpCX/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a3:d7:4a:b8:b0:71:e9:84:c3:83:93:01:fe:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=aef88f41a1eee579f8b8227a07ef765d7329289e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:0a:7a:5a:f9:9a:93:a3:f3:22:3b:4c:75:
f2:b8:1d:32:b5:8b:28:ef:0d:31:5b:21:de:9e:63:
aa:37:1f:b8:e5:b6:1a:4c:c0:ce:55:5a:16:76:c0:
07:01:34:88:64:b9:82:d8:6f:e9:9f:07:ed:50:6b:
78:e7:cd:cb:26:a7:54:fa:5c:d3:db:1e:48:a8:57:
b2:fe:b4:b9:7c:00:b1:24:6d:91:73:b7:c9:b3:aa:
6c:9d:00:2b:f6:c0:e2:16:85:d4:9d:cf:40:be:21:
e8:0c:ea:b1:40:1f:b4:49:62:c0:12:43:b9:be:51:
e2:e9:25:56:2e:50:5a:0d:fe:fc:e3:29:14:ac:09:
45:82:ac:b5:8c:b6:bd:c4:98:7b:99:cb:db:6f:c1:
04:40:31:09:f5:cc:4a:22:6a:66:7f:64:00:37:a8:
c4:34:73:0e:db:52:72:6f:41:be:63:dc:8b:fb:4f:
03:50:94:c0:b5:f5:a4:b6:f8:6c:27:95:b3:2b:17:
5b:fb:48:f3:d1:83:13:27:2f:6e:f2:35:69:a3:20:
4c:9a:55:33:a5:9d:38:c9:07:0c:6e:84:be:bd:27:
e1:ac:c1:31:d5:27:4f:5a:72:14:dd:42:79:0f:09:
6e:7f:c7:25:08:14:79:8b:0b:57:c0:92:fd:2b:89:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F8:8F:41:A1:EE:E5:79:F8:B8:22:7A:07:EF:76:5D:73:29:28:9E
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:67:c3:51:a6:fa:79:86:4d:05:a5:7a:be:56:4c:47:f0:28:
31:d8:93:5b:80:e2:8d:50:87:a8:00:a1:68:dd:d9:03:8c:7f:
c1:c7:30:5b:a1:35:5a:db:7d:26:19:fe:3d:04:8f:9a:e3:be:
61:25:a2:13:46:b5:dd:a1:44:fa:c1:ff:f7:32:11:9b:5e:2b:
3f:d4:ea:ae:1c:fa:73:f2:3e:f7:58:0e:03:ed:58:ca:d7:80:
02:1a:ba:47:c2:c5:1e:b6:a4:72:c4:30:78:8e:b0:e1:37:d8:
02:f1:a8:c5:49:e2:9c:ff:96:7d:25:ff:2c:a1:a7:82:4c:bf:
af:af:84:4f:d8:ab:94:df:ab:7d:fa:f7:0e:a6:23:c2:af:f8:
c4:8e:cb:6c:47:41:eb:3e:a2:7e:dc:2f:79:f7:57:5a:24:ac:
d9:43:eb:fa:2c:e3:20:07:2d:53:5e:b9:3e:47:cc:b7:09:0e:
df:c8:ea:51:23:4a:24:a2:19:aa:53:c0:af:3d:97:22:79:b3:
c5:13:73:cb:e6:b9:71:d9:ec:93:b0:b7:5c:ad:55:4e:5f:fa:
37:3f:9a:ed:3f:87:b0:50:fb:e6:d1:6e:05:b8:59:1e:31:1b:
b9:c9:9b:9c:a3:15:6b:7d:35:2b:1a:01:87:8f:24:a1:b2:fd:
c8:be:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:54 2025 by rpki-client