Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: BA8X/QzJRRvMzuXq7SOTh4A8FY7aF5uarlyNHoJQPmM=
Subject key identifier: 2B:4F:D1:FD:0E:B6:DE:C7:AB:9B:9D:BE:69:08:18:9D:51:8C:2F:10
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 019748FA18367925B18CC2519B45247503A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 02BF
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: 1NPufL+nTF1JAPG4pjLUu+rHHz3Po/MMuzZLPvmzzy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:18:36:79:25:b1:8c:c2:51:9b:45:24:75:03:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=2b4fd1fd0eb6dec7ab9b9dbe6908189d518c2f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:f0:ac:62:b7:87:4c:67:b4:fa:4b:f7:f1:
a7:94:4f:31:0d:cc:0c:bf:06:90:8c:00:e3:d0:97:
4e:58:8b:ef:44:65:0a:91:96:19:29:d1:5f:8a:8e:
09:25:5c:47:9d:ad:fd:54:d9:44:32:8f:d3:02:74:
18:a5:ab:43:ea:52:44:69:4e:04:49:e2:d9:f8:cb:
74:f4:f0:c0:5e:3d:7a:fa:1e:02:28:30:fa:2e:6e:
7c:a8:7b:4d:8d:73:9b:f0:46:2a:ce:2c:b0:41:a6:
7b:66:ad:fd:48:20:00:e9:6d:a3:4b:d9:56:d6:2c:
14:33:e4:dd:c6:3b:12:6a:a0:6d:97:01:ad:4d:d9:
03:a3:e3:91:6a:b6:55:33:ea:dd:59:d8:92:58:da:
66:bf:b9:83:b1:48:76:49:c6:7b:ef:5c:c7:05:ed:
33:d7:81:a7:c0:6c:3c:7a:07:d7:96:b1:4c:65:68:
75:1c:59:2e:ab:27:69:66:7b:f6:6c:3d:08:01:38:
44:af:30:8d:fd:57:ab:23:6e:e8:2c:8e:5a:f2:f2:
4b:65:c6:94:73:ca:23:14:90:59:d8:f2:57:80:37:
1c:92:b3:44:df:24:0c:93:e9:b6:40:32:bb:58:0e:
4e:1a:f5:0a:32:15:61:58:09:55:7f:e6:7a:0d:4a:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:D1:FD:0E:B6:DE:C7:AB:9B:9D:BE:69:08:18:9D:51:8C:2F:10
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b2:28:ff:71:a8:22:65:0c:28:6c:90:06:77:6d:db:86:1b:
0c:d1:40:16:d0:e7:0d:5b:65:84:09:94:10:55:be:bb:f4:12:
11:ff:7d:7d:56:53:05:db:2d:7f:cf:14:80:58:ba:76:57:9f:
61:ae:bc:17:36:90:f9:2a:75:91:5c:34:93:25:f6:24:1d:4c:
0e:0c:ae:cc:d9:4d:0c:b3:29:4f:03:6d:92:fa:4d:36:b0:89:
fa:25:50:35:4a:ca:ef:9a:3b:15:56:98:2f:d6:46:ee:24:ee:
d7:8a:c4:00:3b:5c:12:c2:f3:60:0e:3a:24:26:3d:74:b0:b1:
34:07:2b:41:b7:c8:79:3a:4d:91:01:b4:a3:63:e9:d0:5e:5b:
65:39:57:c4:6c:aa:d2:49:0e:c6:3c:79:d6:96:ff:61:97:1a:
86:d8:3b:0f:3c:c4:9e:ed:21:b2:98:fd:84:87:d6:d1:f2:a1:
59:70:72:83:d7:81:48:2a:97:b5:30:78:ff:96:af:53:dc:5c:
b1:06:c6:82:00:f6:29:c7:f2:4b:d4:f1:32:b6:6c:44:1a:44:
17:39:5b:74:db:9e:7f:b3:be:c1:c5:77:c4:46:d6:be:99:01:
c8:b7:89:02:ed:9c:b4:df:48:5d:03:8b:23:50:a0:9a:dc:f7:
85:f9:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:28 2025 by rpki-client