Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: coAqG+Y7RAfdvJS0OSENowa3PmO9KwfjlM7WWQbFaj0=
Subject key identifier: E9:D7:01:56:ED:3D:2E:76:2B:57:2F:6F:5E:E7:2B:BC:8F:51:D8:E0
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 01951134D4B42C6C63C6AE47D221CD0C7265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 0199
Signing time: Mon 17 Feb 2025 00:00:29 +0000
Manifest this update: Mon 17 Feb 2025 00:00:29 +0000
Manifest next update: Tue 18 Feb 2025 00:00:29 +0000
Files and hashes: 1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: PtbMmSVFR3GvbI5fFCAYam/QK6SBl7arpn3gsNCuq2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:d4:b4:2c:6c:63:c6:ae:47:d2:21:cd:0c:72:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Feb 17 00:00:29 2025 GMT
Not After : Feb 18 00:00:29 2025 GMT
Subject: CN=e9d70156ed3d2e762b572f6f5ee72bbc8f51d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:b3:31:f8:da:3f:6a:f4:2d:05:24:dd:7e:
35:ba:cb:7f:0a:06:3c:0d:49:59:ed:37:8d:45:5f:
94:37:6b:e4:d2:60:76:04:80:68:18:a8:f1:45:52:
c1:7e:a7:96:be:51:19:45:a1:d7:7d:d1:1a:c5:49:
0a:8a:5e:ca:02:bf:23:b3:37:20:12:03:8f:c5:ec:
8b:bb:2b:d7:a0:c3:3b:b0:6d:c7:57:10:2d:18:70:
a0:0a:60:06:c7:9f:ee:b1:7f:a6:99:98:bc:da:c9:
4b:50:6b:f8:d5:66:4a:42:5c:98:7c:1e:7b:df:0f:
8a:7f:7a:db:47:91:59:bc:2e:90:75:1f:53:b3:d7:
54:16:9e:d7:9f:c4:6e:eb:75:e5:4c:98:84:54:f1:
73:a2:a6:6e:33:fb:e3:4a:bd:bc:a9:b7:f5:fa:ab:
fc:6e:d8:e1:2f:20:f9:91:31:c1:9f:f4:27:63:73:
cf:75:98:8f:8d:9e:7b:03:65:b6:d8:49:8e:62:62:
e5:03:08:cf:68:52:ce:a4:ab:cf:ac:df:24:0c:31:
e1:e4:69:2f:ac:7b:53:64:ac:82:26:b9:07:e6:cd:
5a:fe:23:79:c3:29:90:55:54:25:43:ba:69:22:b7:
0e:10:79:a7:f2:29:86:13:07:de:5c:53:6e:cb:9d:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:01:56:ED:3D:2E:76:2B:57:2F:6F:5E:E7:2B:BC:8F:51:D8:E0
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:57:f3:62:68:dd:cc:94:91:67:2c:05:85:1c:0c:2c:d0:13:
3c:0e:a1:44:6f:95:97:a7:94:6c:9c:c7:a3:1f:99:fe:90:6b:
4d:42:7f:80:24:cc:a0:48:a4:bb:27:7a:a1:cc:09:cc:46:52:
a5:98:eb:95:43:9e:c3:fa:3f:3e:6e:b2:81:21:3c:99:e3:5e:
29:21:d1:c5:22:9e:44:0b:e7:5b:c4:a1:de:9f:11:e7:c7:35:
b5:f0:43:7c:18:af:01:84:8f:5f:a7:fc:af:b5:e7:65:f0:c5:
f3:6e:1d:22:ef:8f:bf:57:d6:09:be:07:7f:74:f4:0d:91:e0:
aa:38:59:d9:0d:5a:1a:cb:7e:d1:8c:2a:a2:19:be:71:41:b5:
ca:44:c7:da:29:da:bb:8b:11:4f:7a:10:83:0a:86:5e:31:16:
81:99:42:71:2d:b3:8a:ec:6b:84:f8:fd:e7:dd:ff:48:af:89:
e8:4c:08:e2:f3:e0:33:31:4f:eb:dc:fc:77:a8:b9:9b:71:23:
89:81:ad:d6:17:49:83:df:0b:3e:82:20:c1:47:3f:94:8b:03:
f5:a6:12:5c:7e:f7:7c:5b:60:fd:4c:71:e8:d9:60:0e:2a:14:
8f:3f:74:de:0a:a3:7e:2b:d7:15:24:e3:8a:b3:a1:27:ed:aa:
4f:6c:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:18 2025 by rpki-client