Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: eI6e+WtBAaayTQukBdtucMUfx5xjx11/qyRd3maZSiM=
Subject key identifier: 93:BB:57:CB:3A:71:AD:05:13:83:B7:3C:E9:3C:B4:6D:FD:81:A6:DE
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 0199225598929A9872BD4EA7645C851DF49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 03B5
Signing time: Sun 07 Sep 2025 04:00:58 +0000
Manifest this update: Sun 07 Sep 2025 04:00:58 +0000
Manifest next update: Mon 08 Sep 2025 04:00:58 +0000
Files and hashes: 1: sKgEXtvFt6sAGiL5FMY3b2vW5y4.roa (hash: Hc7ERUptFpk0ScrKHtUKGbi6CWLPw5nk1Svns8TFiak=)
2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: WMElbc2GzU+Po8v5GOKGDdsoFo+ir+b1HMiZQN2AQkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:98:92:9a:98:72:bd:4e:a7:64:5c:85:1d:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Sep 7 04:00:58 2025 GMT
Not After : Sep 8 04:00:58 2025 GMT
Subject: CN=93bb57cb3a71ad051383b73ce93cb46dfd81a6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:b1:7d:0f:64:25:ef:d2:17:2d:4a:e5:26:
e9:0e:f1:b0:a5:35:ae:06:6e:7a:54:10:0f:3f:ba:
02:69:c1:0f:0b:47:23:75:c6:ab:de:7e:51:27:c3:
38:14:79:a1:04:87:dc:78:06:39:cf:4e:f8:0b:e5:
16:c0:5b:20:cf:f2:8f:20:c7:26:5b:d0:cf:f6:ef:
dd:0c:2a:ff:5a:37:24:aa:ff:80:3a:2d:fc:86:aa:
5b:27:73:57:83:b1:fe:9b:4f:e4:73:d2:00:d9:89:
e3:dd:b1:af:ef:88:3c:96:37:91:e9:b9:f4:84:86:
17:33:ae:c7:86:db:19:d3:1c:d4:13:cc:95:39:b8:
f2:b4:fd:4f:a4:bd:90:4b:aa:90:db:2d:91:91:80:
9b:65:0e:66:12:80:7a:ef:df:a1:ce:4b:ec:e7:f1:
e6:ff:d6:db:6a:6c:78:52:12:55:db:20:4f:9c:08:
f4:a2:58:c6:e9:79:5e:ef:b2:98:c5:5d:b9:cb:bc:
28:64:5d:c4:f1:39:71:51:e7:b4:03:6e:d0:de:25:
3d:16:39:08:da:5e:fd:67:97:06:be:bf:15:fc:82:
63:24:e0:87:3c:af:e0:4d:23:1d:bf:51:16:65:c1:
ac:b0:e8:f7:a8:a8:30:b9:44:2a:ba:b3:0a:35:79:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:57:CB:3A:71:AD:05:13:83:B7:3C:E9:3C:B4:6D:FD:81:A6:DE
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:a6:1f:90:25:d9:21:5c:75:25:9b:65:41:ac:d3:e4:07:
5f:9c:f2:16:d9:99:0a:a0:17:03:6c:60:69:10:8d:86:fe:af:
b3:2e:ed:24:b5:14:02:df:af:b8:80:e9:37:b3:cb:16:9c:a4:
da:b2:56:74:d3:c4:a5:05:40:a7:73:74:1a:06:0d:0e:81:b2:
7b:65:92:e3:88:34:ca:98:fd:a1:8b:9d:44:79:ed:a4:32:5f:
06:e4:2a:7c:de:37:a1:c2:cf:bd:2c:59:92:d5:6d:91:26:7c:
3a:56:e5:97:be:ad:f6:2e:d7:f1:bc:25:9c:d8:8f:df:2c:3d:
39:66:be:9a:03:b5:87:b2:89:74:02:93:d6:e4:0c:31:08:13:
53:b1:17:c0:e4:ad:e7:d3:bc:0b:26:1f:b4:39:ba:86:44:ff:
a3:73:08:94:7a:1d:0d:25:75:1e:fd:5d:9e:e6:eb:4c:78:e6:
fe:30:53:ca:9d:30:0f:39:e4:48:3e:f7:76:9b:8e:01:b5:43:
36:6c:1c:7f:eb:e2:e3:c2:ab:90:cd:3e:44:a3:5e:3b:e3:cc:
ba:9c:a0:88:73:17:9f:fb:e6:72:47:21:f9:c6:68:71:0b:c5:
82:4c:a4:65:a3:e9:5c:bb:d4:95:3f:76:37:75:85:a6:43:59:
e6:da:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:05 2025 by rpki-client