Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: 2xoQOkx6cq7htKuMUiulhu9ASfmK3pzY6rLKior8XFo=
Subject key identifier: A6:78:94:9F:30:86:B9:80:8E:CC:DB:5E:19:2C:A0:20:CA:40:85:A3
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0198D47241455D9D7EB2CD9E7E73F66EF2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 138E
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: U1gHOErJdwKAGOM4cWuK0tF8dInUVt8KzXs7fCiVx7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:41:45:5d:9d:7e:b2:cd:9e:7e:73:f6:6e:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=a678949f3086b9808eccdb5e192ca020ca4085a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:82:d5:b8:9e:27:50:96:0a:1b:3e:30:11:a6:
ac:a7:ca:9d:fe:5e:27:db:8e:be:36:82:fd:46:b5:
44:3d:32:38:26:f8:d5:de:4f:59:78:ab:a9:e5:cb:
71:de:71:a1:0d:a4:33:f7:fb:ec:2f:45:c5:91:05:
f0:e9:45:e7:38:e9:0e:83:eb:bf:2d:af:08:f1:d8:
4e:7b:cc:77:94:b9:7b:9d:ee:94:32:17:f9:f9:c2:
dc:9b:cf:34:5b:5a:cc:2a:6b:a6:37:18:e5:e6:ef:
55:01:14:57:1f:6e:f7:e0:95:02:f6:f4:dd:6a:85:
10:61:92:34:13:5b:8d:da:b3:a3:f3:4d:80:1d:b8:
ed:11:7a:7d:ce:99:ab:46:87:29:e3:5c:ad:79:9f:
3d:61:69:45:14:38:aa:bc:cd:f7:8e:20:a7:eb:88:
f9:63:11:04:fc:bd:57:f7:91:8c:13:f7:6b:a9:5e:
8d:1c:e8:54:7f:7d:2d:16:ab:cb:d8:6b:3c:02:58:
80:07:71:91:b3:6f:90:7d:f4:f3:fd:e8:fe:d3:f1:
e7:19:e3:9c:da:04:ea:e3:8d:d0:89:de:e7:2b:1a:
b0:fd:7d:3e:28:66:d0:0f:fe:62:32:31:98:02:30:
41:0b:c9:08:78:d1:c8:c6:96:e8:b7:1b:3c:e4:83:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:94:9F:30:86:B9:80:8E:CC:DB:5E:19:2C:A0:20:CA:40:85:A3
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:89:7a:1d:cf:07:30:30:cc:d0:26:17:9c:94:da:99:5e:bd:
de:35:3f:f1:29:a4:98:dc:4a:7d:46:73:6e:5a:6d:61:33:b4:
1d:73:47:8f:cb:a9:2e:2d:8d:c4:96:69:32:13:30:02:34:29:
60:38:ec:4b:e6:65:6f:63:29:83:1c:e0:e2:78:cc:3c:2b:c3:
da:67:f1:bd:d8:41:62:fb:47:44:58:9d:53:d0:e1:3e:da:68:
7c:13:9e:b1:ef:e6:fa:49:d7:9d:eb:fc:23:10:55:e3:66:a4:
56:cd:b7:66:80:1e:3b:92:4e:2c:a5:1f:e9:6f:c5:2f:6c:97:
13:35:97:da:d9:b8:6b:cc:7b:53:29:6a:b5:d9:1a:ca:17:0f:
49:ae:7d:0e:db:32:4c:62:ce:47:a9:e1:7e:23:19:7b:8d:eb:
aa:36:b2:06:4c:bf:de:27:fa:40:29:78:01:72:ed:ba:f4:68:
03:ab:f9:8c:5d:6f:01:71:8b:d8:23:84:f2:fe:55:0c:0b:3a:
49:a2:3e:dc:89:70:62:a7:61:1b:c7:85:9f:ed:11:f1:7b:72:
c3:d6:b8:f0:b8:c5:5c:bb:6e:20:47:88:d6:b5:ef:49:c0:04:
66:25:10:4c:ae:73:24:6e:07:23:1e:b8:1c:45:19:b3:7f:a6:
32:6b:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:45 2025 by rpki-client