Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: 3Y3whyeB0T9K90LRsCGcJ4bgEhtFrmwXlQ7fC9i9dVs=
Subject key identifier: AD:DE:60:28:38:9E:B8:7A:25:4E:8F:17:26:B0:89:EA:72:2C:9A:9D
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0196ABE82EDA8F187A46AFBE7A1989CAC853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 1270
Signing time: Wed 07 May 2025 18:00:42 +0000
Manifest this update: Wed 07 May 2025 18:00:42 +0000
Manifest next update: Thu 08 May 2025 18:00:42 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: +NtvXssJrzVny0Pq3pMlrucyHm78Ojk3a9t+v7fnK1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:2e:da:8f:18:7a:46:af:be:7a:19:89:ca:c8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: May 7 18:00:42 2025 GMT
Not After : May 8 18:00:42 2025 GMT
Subject: CN=adde6028389eb87a254e8f1726b089ea722c9a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:94:6d:42:b8:27:da:56:b2:89:7b:7d:95:
ad:d2:cd:73:63:a7:1a:48:5a:10:97:d8:36:7d:9b:
82:8c:02:5f:b9:ee:79:48:0e:39:40:9c:10:ac:04:
b2:70:8f:ad:21:fb:90:c5:02:34:f4:61:b3:ca:e5:
f6:5b:93:b7:31:de:92:2c:e5:1a:f7:e2:36:88:a1:
b8:85:11:f3:52:49:54:da:02:85:9b:e5:0f:c7:8e:
07:13:4b:f4:10:a9:28:77:2e:a6:9d:60:83:d2:e2:
b1:8c:a9:c8:3f:45:b1:5c:be:44:d7:11:a3:73:c2:
7e:54:d3:91:b7:60:19:73:05:c0:a8:45:ba:0e:4e:
ac:aa:ee:7b:7d:52:73:56:ba:35:04:4a:1a:e8:7a:
ba:9b:e1:86:f0:3c:d2:21:29:9f:bf:0a:1b:23:5c:
56:0c:dd:b8:79:bc:4a:a3:60:27:54:0a:89:d2:3a:
c7:85:2a:b5:37:d8:c1:df:b8:5d:a0:8a:f8:c8:b2:
f0:df:30:ea:5c:1b:d7:39:a7:44:b6:03:90:77:22:
72:f9:b6:a7:13:82:60:2e:20:db:59:ac:e2:15:a4:
cb:b9:72:8d:2e:f3:31:f2:95:cf:c7:5e:43:a2:18:
1c:69:5f:fd:34:e2:50:79:28:84:d8:83:55:46:84:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:60:28:38:9E:B8:7A:25:4E:8F:17:26:B0:89:EA:72:2C:9A:9D
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:78:a6:cf:8d:17:6a:86:74:cd:23:1f:2d:ae:a7:82:a9:7b:
d1:2a:43:5f:da:76:a3:ce:e2:61:86:ae:9b:ac:c2:0d:89:9f:
55:0f:3c:9f:b9:08:c6:77:c7:c4:20:2b:b9:f2:3c:94:4b:51:
f3:ef:84:ae:e6:3c:05:d6:01:ea:78:63:ee:a3:8c:af:14:38:
00:fe:7c:0f:3e:55:5b:e2:a5:8c:8a:8b:0f:23:f8:2d:73:c6:
c6:bb:37:75:8b:85:c8:86:52:5c:16:29:77:03:b8:1a:67:51:
a5:6f:c4:e9:d8:81:80:5e:30:59:ce:80:80:b2:3d:6d:b3:7a:
fc:70:63:ca:a1:43:b7:ce:ae:51:df:86:c7:8d:05:65:55:ff:
65:a7:e3:99:1b:9d:b0:c1:7f:c7:86:67:f8:2b:51:bf:2a:09:
93:20:2b:69:3a:15:10:4f:44:ff:ea:95:1f:bf:ed:bb:c5:e3:
d8:59:b1:ee:b2:ef:b7:f6:e1:09:c3:0a:37:fa:ef:0c:a4:73:
e9:0c:ab:e8:a5:31:2d:09:23:8b:2b:44:70:d9:8a:ac:68:a7:
45:b8:54:ae:a5:3d:f3:20:c0:e5:20:05:4e:69:ab:01:bd:9b:
e5:4f:58:21:e4:81:2e:75:13:9f:9e:a9:0d:fb:a2:55:27:6d:
5a:3d:16:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZar6C7ajxh6Rq++ehmJyshTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw
ZGU5YjQwHhcNMjUwNTA3MTgwMDQyWhcNMjUwNTA4MTgwMDQyWjAzMTEwLwYDVQQD
EyhhZGRlNjAyODM4OWViODdhMjU0ZThmMTcyNmIwODllYTcyMmM5YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGyUbUK4J9pWsol7fZWt0s1zY6ca
SFoQl9g2fZuCjAJfue55SA45QJwQrASycI+tIfuQxQI09GGzyuX2W5O3Md6SLOUa
9+I2iKG4hRHzUklU2gKFm+UPx44HE0v0EKkody6mnWCD0uKxjKnIP0WxXL5E1xGj
c8J+VNORt2AZcwXAqEW6Dk6squ57fVJzVro1BEoa6Hq6m+GG8DzSISmfvwobI1xW
DN24ebxKo2AnVAqJ0jrHhSq1N9jB37hdoIr4yLLw3zDqXBvXOadEtgOQdyJy+ban
E4JgLiDbWaziFaTLuXKNLvMx8pXPx15DohgcaV/9NOJQeSiE2INVRoQeVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3eYCg4nrh6JU6PFyawiepyLJqdMB8GA1UdIwQY
MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt
NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi
LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3imz40X
aoZ0zSMfLa6ngql70SpDX9p2o87iYYaum6zCDYmfVQ88n7kIxnfHxCArufI8lEtR
8++EruY8BdYB6nhj7qOMrxQ4AP58Dz5VW+KljIqLDyP4LXPGxrs3dYuFyIZSXBYp
dwO4GmdRpW/E6diBgF4wWc6AgLI9bbN6/HBjyqFDt86uUd+Gx40FZVX/ZafjmRud
sMF/x4Zn+CtRvyoJkyAraToVEE9E/+qVH7/tu8Xj2Fmx7rLvt/bhCcMKN/rvDKRz
6Qyr6KUxLQkjiytEcNmKrGinRbhUrqU98yDA5SAFTmmrAb2b5U9YIeSBLnUTn56p
DfuiVSdtWj0WBA==
-----END CERTIFICATE-----
Generated at Wed May 7 20:18:49 2025 by rpki-client