Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: 2AcbdFhFZrOp3e+oFf7AVffslTYPpw/mlJUhpqJ01Q8=
Subject key identifier: B4:4B:BA:23:96:89:87:EC:1A:CB:A9:5E:29:D0:8B:3D:76:32:7B:78
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 019A7112D3FF833C3024D1BA1B5983A07F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0D43
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: ebIwIX1x2KcjKwlUycikmt3Q99L5TVUDk5AZnLtiK+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d3:ff:83:3c:30:24:d1:ba:1b:59:83:a0:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=b44bba23968987ec1acba95e29d08b3d76327b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:77:04:b8:d7:b7:e0:d3:a7:d8:cb:22:5a:
78:1f:f8:be:e8:63:0c:79:46:ad:95:d2:b2:e4:80:
88:75:b6:b6:e2:c8:40:fd:ec:a2:83:d0:1a:b3:16:
5e:c7:57:72:37:b4:a8:40:dc:4c:9a:9e:9b:ea:9a:
a1:b9:b5:d0:1e:66:6c:ea:c8:07:6d:1b:22:e2:2f:
7d:01:08:08:df:50:29:2b:43:0a:13:47:95:25:7d:
85:86:40:bd:03:61:12:a8:b5:63:f2:a6:8e:d9:e1:
83:12:16:8c:cc:71:02:87:61:bd:0a:f6:51:17:51:
2a:5d:ba:9a:54:93:aa:d7:09:43:0b:00:be:63:c5:
1c:65:25:f4:78:89:b0:74:cd:bf:49:65:11:07:a0:
b6:24:2c:0f:96:81:ac:e1:22:0f:84:fa:d8:85:1b:
2f:15:7f:89:41:95:ad:2d:76:d6:bf:08:dc:32:4f:
7d:7a:ac:a0:55:ef:33:b0:5b:32:78:4c:b5:4f:f7:
47:64:99:98:d1:c2:ea:b7:16:7d:5a:e0:bd:dd:41:
f7:84:2d:ad:6c:2d:0e:3f:a1:c9:40:80:cd:4d:39:
23:fd:40:16:23:b8:75:4d:dd:29:3b:33:df:c1:0f:
8b:f0:db:b6:2b:a0:61:2b:1f:fa:35:16:d9:5c:bd:
3f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:BA:23:96:89:87:EC:1A:CB:A9:5E:29:D0:8B:3D:76:32:7B:78
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:ff:b6:12:fd:3c:60:7e:84:3e:9f:e8:ad:13:74:37:81:b8:
54:d0:39:75:e1:91:f7:80:0a:cd:25:10:e5:a7:44:0d:9e:ce:
3e:79:87:16:10:92:f1:dd:61:87:f0:64:1b:1d:aa:aa:bf:92:
75:67:26:9e:69:e6:fa:13:f2:f4:ac:9c:1f:0b:6e:b5:56:12:
15:13:ab:5f:9d:1d:13:48:fa:e4:52:12:2b:cf:9e:44:2b:05:
0d:ed:18:92:61:18:53:93:ac:b0:f0:f5:01:82:b3:e2:d2:ea:
9c:f1:c5:90:47:6a:66:f9:54:21:7a:76:40:46:06:23:fd:72:
0d:ef:27:cb:4f:87:bd:b4:8f:e7:93:8a:8b:f1:04:90:55:85:
4f:e5:d7:46:6d:d0:00:29:0f:3b:f1:7e:45:3d:1e:82:b0:b7:
29:76:fa:fb:e0:a1:29:3b:ab:8c:60:c9:2e:a8:2b:2e:e9:e3:
eb:bb:15:00:a5:d6:a5:c6:25:05:dc:75:1f:8a:d3:7d:e8:a8:
0b:c2:52:37:a4:9a:61:2a:5b:d7:7f:0b:fa:3b:01:cb:e5:70:
14:bf:86:f1:d3:b9:06:d0:bb:c6:b5:3f:93:db:c8:33:f5:2a:
82:36:eb:64:9b:e9:1f:7a:ce:ed:1f:c9:d3:b6:d1:ad:30:51:
ea:3b:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:07 2025 by rpki-client