Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: gmzNiKUj6x8yDJPngcN6SISGQNwS8fOab6sxy76BrSU=
Subject key identifier: 7E:3D:F2:57:46:D2:E0:3C:56:D4:0D:E1:C3:AE:02:02:85:13:25:7E
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 019653B767B84AD6CA9BCF5336BB4ED2022B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 0240
Signing time: Sun 20 Apr 2025 15:00:50 +0000
Manifest this update: Sun 20 Apr 2025 15:00:50 +0000
Manifest next update: Mon 21 Apr 2025 15:00:50 +0000
Files and hashes: 1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: ARZn4Zy0w48ZCQJDSATap6E+9LptsTKylf5mSJwPFP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:67:b8:4a:d6:ca:9b:cf:53:36:bb:4e:d2:02:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Apr 20 15:00:50 2025 GMT
Not After : Apr 21 15:00:50 2025 GMT
Subject: CN=7e3df25746d2e03c56d40de1c3ae02028513257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:db:60:ea:b6:98:31:55:0b:45:d8:8f:3b:
de:98:32:16:80:40:df:d3:60:19:7b:f9:c5:da:32:
47:32:05:5f:8a:49:97:7b:3a:c6:d9:e3:f3:80:5d:
7f:c5:d7:a9:5e:b4:f9:19:a5:3c:f2:61:70:8c:05:
e6:f1:c6:41:75:47:b4:21:4c:fa:51:64:ab:91:6c:
1f:2c:3f:9c:b9:3f:55:9a:8f:c4:57:0c:e9:d3:2d:
2d:84:82:b2:cc:c7:78:3b:38:6b:9a:3a:6b:c9:d1:
88:d0:e7:76:ce:1b:fe:31:25:84:b3:91:88:70:fc:
28:e4:80:5c:fb:f7:f7:e4:85:c4:6b:f3:1a:fc:4e:
98:38:cb:4c:88:4b:a8:22:f3:8a:9b:0d:45:81:36:
c2:70:f8:98:a3:96:b3:49:73:f6:41:7d:b8:07:80:
81:9a:06:15:ce:14:ac:13:4d:8f:22:c1:31:af:cd:
84:ab:6b:5c:01:68:69:77:7b:79:68:1a:a8:4b:ca:
41:54:d7:5a:03:ab:08:b2:3b:29:0c:b0:7f:b5:14:
97:1d:1f:4c:97:0e:46:32:99:79:99:f0:3e:d4:30:
ac:16:0f:1f:17:7c:07:b1:c7:4f:66:a7:ec:55:f4:
25:54:af:8e:46:44:ce:ac:dc:3f:66:53:f5:29:61:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:F2:57:46:D2:E0:3C:56:D4:0D:E1:C3:AE:02:02:85:13:25:7E
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1b:cf:64:d4:b4:dd:c7:b1:7a:12:7a:c3:d3:fe:a0:a3:f4:
61:4f:52:a0:f9:86:7a:05:64:14:15:d4:fa:29:31:ea:56:f6:
e6:d2:8d:3f:46:b9:a9:28:a4:94:33:fe:34:dd:e1:65:60:8c:
5c:f3:f9:a0:14:74:10:8b:b6:21:01:cd:21:57:6b:67:03:a6:
79:c0:f1:ae:5d:fa:e1:29:0d:5c:1b:8c:4a:b8:07:09:9f:06:
96:2c:39:30:f5:43:a6:ac:1d:ae:2d:43:87:14:30:c6:c1:24:
69:e7:f1:6f:3e:9c:fc:b4:e4:0f:ed:44:bf:91:ab:ce:43:96:
e3:f3:c7:ae:39:bb:38:44:88:d1:93:cc:75:c9:fe:52:1d:83:
98:5b:32:2e:cd:17:3b:69:6f:3f:d1:65:90:a0:cd:b5:09:71:
2c:6a:68:c5:73:d7:f3:b2:09:af:9b:f5:a6:11:c3:96:a3:6a:
df:e3:57:8b:26:fc:de:02:15:94:ec:b7:f7:32:4e:fe:2a:5a:
74:87:f8:66:fb:5f:fc:66:7b:43:8e:02:1b:1e:6a:86:dd:1c:
55:af:e9:a9:79:b4:1a:51:25:71:63:87:53:d0:6c:2f:17:d5:
bf:00:16:6a:4c:22:4b:30:82:07:39:fc:42:dd:ad:45:d2:6e:
91:d9:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:32 2025 by rpki-client