Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: lA9Zr9u4ZmZ/T2yu1jwD/0LDfe4YaTfzZEpbp9vtJdE=
Subject key identifier: 15:F3:EB:4D:92:23:76:91:FD:A2:D3:6F:96:BF:B3:71:EA:2C:4B:CE
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0196439F5C78699856DC9344ECBF6B4791B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 123A
Signing time: Thu 17 Apr 2025 12:00:39 +0000
Manifest this update: Thu 17 Apr 2025 12:00:39 +0000
Manifest next update: Fri 18 Apr 2025 12:00:39 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: 3con8W3fVlhGX3ErgXC820RrP+Z28nYx9RQbxpb7heY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:5c:78:69:98:56:dc:93:44:ec:bf:6b:47:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Apr 17 12:00:39 2025 GMT
Not After : Apr 18 12:00:39 2025 GMT
Subject: CN=15f3eb4d92237691fda2d36f96bfb371ea2c4bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:68:09:61:6f:7c:86:68:ac:9b:a0:40:8e:
25:03:30:74:5a:67:f0:2c:96:bf:e4:d1:97:b1:d4:
85:c7:46:ae:5f:2f:f5:db:2e:1b:13:19:db:ab:3c:
9b:e3:65:0d:74:25:bb:6b:a2:6d:d8:64:05:08:23:
cc:2d:39:66:67:60:3b:e4:3f:1b:ec:e2:f3:a2:68:
51:ce:50:93:b9:38:0f:53:92:d9:50:b9:86:97:4e:
34:e3:07:0b:6a:c9:e0:0d:71:70:73:08:12:eb:0d:
21:ec:58:3e:90:7c:40:23:67:04:97:7a:f1:36:8a:
a4:a2:12:ed:23:0d:4d:77:24:41:29:32:cf:6b:14:
e3:4a:8b:89:63:39:0e:d6:26:1c:59:75:3f:ce:bf:
66:11:f0:18:3a:39:33:6a:b0:ba:da:e1:99:f0:ca:
c6:71:f9:57:6b:72:6e:53:13:14:4e:a2:26:a5:47:
b9:e9:ef:96:22:e3:1c:eb:a7:a2:96:9b:e8:26:37:
4b:33:49:8d:d8:83:74:e2:41:e8:25:28:55:d2:4e:
41:9c:73:11:ce:5d:65:ad:3a:f9:94:5a:75:33:bc:
4b:f6:b0:18:8a:31:63:5b:d7:62:31:0c:47:f1:52:
fb:e2:8d:c7:9d:03:dd:47:e0:3c:89:b1:c3:7b:8a:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:EB:4D:92:23:76:91:FD:A2:D3:6F:96:BF:B3:71:EA:2C:4B:CE
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:82:a3:b3:d4:40:a4:ec:5c:6a:02:9c:44:0e:ce:5a:bd:
d4:68:ae:58:a6:1b:df:08:f9:12:30:59:36:8b:eb:15:47:7c:
05:3c:5e:7a:bf:8c:1f:6f:e4:be:a1:fe:23:8e:9f:06:d3:39:
99:58:c3:1c:0d:ac:54:a6:33:90:c3:b5:40:10:5c:e0:f0:8f:
53:ff:39:f1:dd:ba:d4:e6:01:c9:54:39:b8:ee:5d:dc:6d:a1:
c5:04:b8:45:92:1c:dc:c2:37:bd:51:cc:2b:0a:a7:cd:9e:25:
b6:7a:4a:47:d7:18:b6:2c:d4:5e:3b:2f:eb:eb:91:68:e9:76:
bf:24:94:e4:d9:e2:fd:13:ed:09:53:11:d0:1c:0b:b5:26:4e:
e0:e4:b9:d1:de:45:37:7a:46:9e:e0:8f:56:99:1f:1e:c0:23:
7e:dc:87:29:a8:d1:7f:70:0a:f6:bb:b7:07:9c:97:b9:5f:79:
be:c6:66:e3:76:00:91:f0:24:eb:8e:c8:04:2e:70:01:25:3b:
92:78:eb:68:ea:91:22:c0:cf:4c:f2:f1:23:d4:28:ea:33:16:
b5:a2:5a:73:a9:b5:ad:77:5a:9e:cd:3b:26:73:d5:53:00:66:
74:36:34:da:35:e7:54:76:36:16:ff:f9:8d:d2:fa:fb:25:bf:
87:fc:d1:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDn1x4aZhW3JNE7L9rR5GwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw
ZGU5YjQwHhcNMjUwNDE3MTIwMDM5WhcNMjUwNDE4MTIwMDM5WjAzMTEwLwYDVQQD
EygxNWYzZWI0ZDkyMjM3NjkxZmRhMmQzNmY5NmJmYjM3MWVhMmM0YmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnBoCWFvfIZorJugQI4lAzB0Wmfw
LJa/5NGXsdSFx0auXy/12y4bExnbqzyb42UNdCW7a6Jt2GQFCCPMLTlmZ2A75D8b
7OLzomhRzlCTuTgPU5LZULmGl0404wcLasngDXFwcwgS6w0h7Fg+kHxAI2cEl3rx
NoqkohLtIw1NdyRBKTLPaxTjSouJYzkO1iYcWXU/zr9mEfAYOjkzarC62uGZ8MrG
cflXa3JuUxMUTqImpUe56e+WIuMc66eilpvoJjdLM0mN2IN04kHoJShV0k5BnHMR
zl1lrTr5lFp1M7xL9rAYijFjW9diMQxH8VL74o3HnQPdR+A8ibHDe4oriwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXz602SI3aR/aLTb5a/s3HqLEvOMB8GA1UdIwQY
MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt
NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi
LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaqCo7PU
QKTsXGoCnEQOzlq91GiuWKYb3wj5EjBZNovrFUd8BTxeer+MH2/kvqH+I46fBtM5
mVjDHA2sVKYzkMO1QBBc4PCPU/858d261OYByVQ5uO5d3G2hxQS4RZIc3MI3vVHM
KwqnzZ4ltnpKR9cYtizUXjsv6+uRaOl2vySU5Nni/RPtCVMR0BwLtSZO4OS50d5F
N3pGnuCPVpkfHsAjftyHKajRf3AK9ru3B5yXuV95vsZm43YAkfAk647IBC5wASU7
knjraOqRIsDPTPLxI9Qo6jMWtaJac6m1rXdans07JnPVUwBmdDY02jXnVHY2Fv/5
jdL6+yW/h/zR5w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:44 2025 by rpki-client