Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: iVWoG+Bfkp34aec3xT/q9RhQSFlZdS7fCvtJlpSKOn8=
Subject key identifier: 86:D6:12:D9:F1:12:9F:79:10:1F:17:52:55:07:D7:A6:90:61:6D:C7
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 0197B8FCE2FEEE8C3EBC6C01C1676618F0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 02F9
Signing time: Sun 29 Jun 2025 00:01:10 +0000
Manifest this update: Sun 29 Jun 2025 00:01:10 +0000
Manifest next update: Mon 30 Jun 2025 00:01:10 +0000
Files and hashes: 1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: Rau+FHWYySQONPQAhTOb07vK8LhcCIicA3VyEaCI2zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e2:fe:ee:8c:3e:bc:6c:01:c1:67:66:18:f0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Jun 29 00:01:10 2025 GMT
Not After : Jun 30 00:01:10 2025 GMT
Subject: CN=86d612d9f1129f79101f17525507d7a690616dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:69:11:d6:3c:75:c5:0c:62:e8:98:aa:44:
39:4a:03:08:df:2d:d7:09:9e:00:91:9f:4f:eb:b2:
ff:fd:b8:dd:ee:c4:80:65:b0:e3:a8:8b:92:ca:c8:
f4:86:a6:7d:bc:79:22:0c:d0:2a:63:14:4b:a5:b4:
da:fc:bc:66:8c:a9:47:1b:ed:2a:14:f0:e6:03:64:
a3:3f:29:a6:b5:8e:53:56:8a:b3:30:9d:3b:13:4c:
ee:82:08:d0:53:ea:58:f5:15:47:31:00:1a:5c:56:
9b:ec:c7:c4:b0:8c:4b:41:cd:2c:31:94:ce:5a:ff:
fa:b3:5a:a9:09:fa:f3:76:a8:27:e6:a0:3b:81:95:
39:86:f0:ca:53:f6:86:a9:57:75:3f:2f:4c:cd:ca:
0d:4c:33:57:3d:41:1e:4f:3b:3e:65:5d:ae:ba:9d:
98:dc:f7:75:80:41:76:f1:f0:15:f0:4b:df:85:f2:
e0:51:27:c5:51:e0:83:21:ab:47:4b:27:a6:a1:7a:
5c:a2:be:31:d7:ff:c2:59:d1:68:5a:0c:6e:79:f5:
72:01:36:34:11:ca:3d:0b:28:80:3b:49:d9:c0:7c:
44:4c:4a:b3:1b:88:1c:9d:b2:35:ee:4d:ab:05:bb:
37:ed:d9:5d:62:5a:c0:4c:63:81:68:a4:af:71:4e:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:12:D9:F1:12:9F:79:10:1F:17:52:55:07:D7:A6:90:61:6D:C7
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1d:ca:26:55:39:8b:22:c3:21:07:74:1c:dd:48:c4:4b:65:
22:83:73:2b:9b:c4:93:ed:f1:97:a9:50:f3:c9:2b:ab:71:cf:
0e:6c:93:b8:99:7f:4e:41:24:f9:2b:ab:f5:fd:0e:59:40:da:
bf:d3:dc:80:56:68:33:a4:96:94:cc:9c:1e:b3:ff:8d:ad:5f:
31:bf:93:c0:5f:1f:f2:b3:ef:9e:88:a6:2c:1f:a8:4e:03:d3:
27:3f:da:a3:99:9d:3d:89:9a:b6:f3:d3:02:8f:35:25:a8:ea:
5a:a3:42:6d:af:b6:e2:ef:96:4b:8c:20:06:33:bf:48:2d:3b:
0f:8f:64:a7:74:9d:ef:b5:cc:b8:ff:dd:eb:41:4f:f9:9d:72:
1a:a2:7b:03:fd:2e:9b:a7:9b:ea:f7:5f:6b:b5:db:de:cb:1f:
cc:dc:ab:53:21:25:2b:79:a2:45:eb:21:46:54:60:66:14:d5:
a4:19:04:89:2d:0d:00:8c:a7:37:ce:85:73:76:ad:0d:69:05:
30:23:91:4e:58:d0:36:68:19:f8:83:f3:e6:90:6c:61:cc:9c:
50:25:ca:4e:58:ae:15:8e:07:c3:36:d5:bf:9a:be:79:11:6a:
08:9f:42:5d:3c:4d:3c:a5:56:3b:c8:04:ae:3a:97:2c:40:5d:
81:bf:4c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:14:52 2025 by rpki-client