Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: +VV6wB8BwjC8BMy5K+REAzD3GokEuHLWCPwJGpvt77I=
Subject key identifier: E5:94:4F:C2:43:69:1F:75:94:7B:59:41:BE:F2:C4:A7:E8:3C:63:6E
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0197B88FC94D4E6C6FA61793FE4B27AAEF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 12FB
Signing time: Sat 28 Jun 2025 22:02:00 +0000
Manifest this update: Sat 28 Jun 2025 22:02:00 +0000
Manifest next update: Sun 29 Jun 2025 22:02:00 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: lMRygh1E/KkBfUyGRm2WK3yN+xQ8sDL9s/BjdwEe2og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c9:4d:4e:6c:6f:a6:17:93:fe:4b:27:aa:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Jun 28 22:02:00 2025 GMT
Not After : Jun 29 22:02:00 2025 GMT
Subject: CN=e5944fc243691f75947b5941bef2c4a7e83c636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:be:59:40:20:9f:27:1d:99:f1:66:3a:76:
ac:3a:3d:b7:df:10:a2:34:3d:76:f6:c2:85:b0:cb:
03:55:27:65:56:48:a7:86:c8:d5:17:14:a8:8c:55:
59:90:a0:1d:03:a5:12:e9:4c:48:0e:81:fe:f2:eb:
25:6b:65:d6:bd:66:c9:0d:30:38:b0:6b:08:d5:a3:
92:10:bb:16:c1:cb:e7:93:bf:09:c5:65:d4:40:d3:
c8:0e:ac:4a:c6:a6:57:46:98:71:4a:e8:dc:ef:27:
fe:59:4b:37:e6:75:70:0a:b6:bf:50:24:a4:19:84:
51:df:28:77:e0:c9:5e:30:bb:37:dc:2b:1c:03:7d:
5f:63:d2:f1:c2:cf:4c:e0:98:f1:4d:d9:2f:03:e0:
a4:c6:4e:00:db:b1:c3:0c:36:dd:0d:7f:4f:b9:65:
08:f8:8e:2e:0a:e4:0a:51:ad:1c:65:f1:04:ed:78:
40:e1:b5:be:8c:d0:95:61:e8:6a:9a:f5:11:1f:b6:
f8:6c:6b:20:8c:78:dd:0b:c8:50:6f:6b:8b:2b:fa:
a6:96:93:23:37:dd:05:1c:e7:44:04:1b:a3:ea:23:
65:d6:3e:5d:9a:9f:0b:54:7e:00:03:c3:40:6d:0c:
4e:b2:f9:54:13:29:6e:3c:cc:21:db:72:0f:d9:49:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:4F:C2:43:69:1F:75:94:7B:59:41:BE:F2:C4:A7:E8:3C:63:6E
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a4:a0:86:d2:71:ef:89:a7:40:95:23:17:64:fa:33:b1:8e:
31:07:61:16:1e:51:a6:57:14:ef:5d:b4:07:90:1e:65:c4:32:
65:9a:2e:7a:e4:a4:ce:96:34:e6:ea:09:14:82:38:7b:13:b0:
1b:1c:b3:aa:1f:2e:77:74:1e:c1:24:3e:63:c2:bf:4e:8b:67:
e8:75:7b:3c:04:d3:99:a0:27:e2:75:7a:d1:d0:f5:18:66:b4:
01:3d:b9:3a:a3:c4:2c:f7:43:dd:3f:c8:02:e6:d1:67:36:86:
07:61:bf:79:92:05:e4:a9:5f:d3:49:14:70:82:89:cc:f7:6c:
57:50:88:79:f3:49:86:97:11:ee:b4:87:33:56:90:cb:18:7b:
a1:a2:6a:cd:31:f9:b2:21:86:11:f1:30:85:3b:bd:bd:27:2d:
2a:6c:23:72:a2:66:87:75:3e:a9:31:56:15:46:31:f3:ad:53:
e1:53:c4:09:98:6b:27:9b:40:21:65:e8:6f:64:72:81:49:79:
65:00:74:10:ae:4f:1d:66:2f:57:6e:ae:ab:e5:c0:2d:d8:d7:
4f:7a:33:6f:bd:84:ea:22:b1:a0:63:3f:87:ce:e9:46:b0:e8:
d1:de:6d:bf:81:f5:7f:0c:d0:3b:a9:1a:88:6f:8c:3e:28:b4:
9e:e2:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:48:01 2025 by rpki-client