Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: zY3wOd2JPGoztU8PdiWrIH86h2ILWslvKS0hjdX/NRA=
Subject key identifier: 0E:E2:95:88:C3:33:14:FF:B2:11:34:E9:43:2B:FB:81:23:EB:A6:47
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 0199FC8F19D613CF2E2FC073A6E008458F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 0426
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: sKgEXtvFt6sAGiL5FMY3b2vW5y4.roa (hash: Hc7ERUptFpk0ScrKHtUKGbi6CWLPw5nk1Svns8TFiak=)
2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: Z+QwfM0a6k9I7XmpZAuuhTproQRCG1ROBmONo5z+OrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:19:d6:13:cf:2e:2f:c0:73:a6:e0:08:45:8f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=0ee29588c33314ffb21134e9432bfb8123eba647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:38:71:06:bc:75:c6:66:77:f0:ba:49:44:
70:a3:00:27:64:df:7e:ac:25:63:7c:18:13:78:07:
bf:e6:e3:a4:1f:d1:7b:50:ad:f4:13:04:66:73:70:
e1:4a:26:70:b3:84:77:cc:a5:ba:90:b5:3c:08:b2:
07:99:2e:e1:f5:ac:f9:06:22:f2:c9:a9:28:2b:7b:
77:a6:db:e0:80:5e:33:0c:88:47:b2:6e:13:8a:3e:
a2:a7:2a:f3:6b:b8:5f:64:99:ec:ed:d9:ea:c7:be:
ea:a0:7a:66:23:ab:32:a2:ba:fc:2f:f9:2f:ec:39:
5e:62:e6:72:05:f6:be:fb:87:b6:f4:8e:1b:1b:a0:
7e:4a:ce:ee:df:84:cd:b4:96:31:b1:a2:59:b2:e7:
b3:6c:e0:46:54:de:34:00:95:92:64:a8:ea:31:82:
d6:13:d7:b1:47:38:f6:24:ef:b5:2a:f1:03:85:f9:
15:72:93:73:c0:b7:02:4a:54:3f:de:e3:37:4c:88:
09:b1:14:03:b1:0a:24:93:bf:8c:48:a2:65:06:14:
80:c5:a7:dd:4c:1a:71:fd:5f:2c:04:a2:03:6a:72:
14:8d:96:58:7a:3d:d8:39:ee:a2:06:26:c4:b3:bf:
1a:58:ab:30:f4:54:19:d2:60:09:f9:38:3c:82:8f:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:95:88:C3:33:14:FF:B2:11:34:E9:43:2B:FB:81:23:EB:A6:47
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:92:31:3f:35:49:c4:68:40:0d:39:8d:8f:6f:ad:a1:9c:
94:59:cb:bc:39:e0:45:99:50:89:54:61:56:91:ee:37:d0:84:
52:31:80:80:62:3d:a0:39:96:60:21:df:97:21:1b:d3:c5:55:
65:0f:bc:87:dc:ef:fe:81:7e:db:bd:74:e5:9a:bb:04:13:93:
f4:6e:62:53:0e:1c:67:09:38:8b:c1:18:7a:7d:99:77:97:14:
80:ab:20:5e:25:73:ef:32:e1:7d:8a:2e:37:bb:9e:5f:3b:ec:
e3:6f:43:14:97:d8:7c:aa:48:23:b7:d9:a3:d9:1c:de:e3:d7:
cb:67:f5:c3:70:8e:42:ba:10:e1:61:0c:6e:73:18:a4:a5:13:
02:70:77:14:cf:e2:e9:c7:97:d5:c8:38:17:d2:ee:2a:5d:20:
86:d8:c0:94:10:b3:1d:b5:ab:31:e5:8f:80:e8:79:18:c7:0d:
13:f1:35:f2:4e:60:47:d3:70:bc:7c:f0:d9:c7:08:ca:f3:a7:
a2:5e:94:50:59:2c:96:e7:54:cc:e1:08:ef:e9:d8:48:b9:a8:
a3:3e:10:e4:36:8e:da:66:d9:33:b7:51:09:b3:c3:3e:ca:a4:
ad:30:cf:57:e0:6c:2b:ab:39:df:00:94:6e:74:76:42:43:cc:
32:06:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:58 2025 by rpki-client