Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: 8GZ4nuvCSs29Nrahge61/xKvEdMImAOpB4cW0CwLw7Q=
Subject key identifier: D9:DC:B1:9A:5A:95:1E:94:88:21:F7:32:F5:53:8D:77:13:F5:AF:75
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019746674026121B88A07FA8CEACCE2CF7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 12C0
Signing time: Fri 06 Jun 2025 18:01:01 +0000
Manifest this update: Fri 06 Jun 2025 18:01:01 +0000
Manifest next update: Sat 07 Jun 2025 18:01:01 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: KSpnqaF0Yg5mln4iTbSTyaF7Hpi7Du0RiTKaTSDHdS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:40:26:12:1b:88:a0:7f:a8:ce:ac:ce:2c:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Jun 6 18:01:01 2025 GMT
Not After : Jun 7 18:01:01 2025 GMT
Subject: CN=d9dcb19a5a951e948821f732f5538d7713f5af75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:0f:7e:66:62:66:54:e0:f1:43:49:84:99:
dc:ee:e3:a9:fd:82:5d:db:93:bc:9f:7c:80:ce:bd:
3a:45:e8:27:ea:74:04:c6:a9:06:d0:01:0a:49:2d:
0d:93:11:92:7e:4b:8b:ec:55:55:01:b8:5c:5f:73:
a3:9c:90:13:e7:f1:db:74:00:8b:3a:25:c9:79:eb:
3f:d2:25:78:4e:58:29:20:40:a7:50:75:4b:10:f6:
50:45:b3:c3:52:d1:79:53:7b:bc:cc:8f:f4:cb:29:
f2:d5:e7:02:dc:1a:69:33:c2:8c:6d:47:cb:e9:d4:
21:f3:d4:92:fc:63:b9:33:19:84:c4:73:cc:46:d3:
ad:04:66:c9:be:7b:51:9c:8a:ba:d0:d8:9a:73:bf:
eb:a7:16:e6:ca:dc:52:4c:6a:eb:89:a3:be:a0:df:
6b:01:05:11:f6:af:e3:ad:81:31:f0:b7:ce:87:61:
26:64:50:89:10:4e:b6:e6:b4:22:74:e7:5d:01:66:
6b:78:af:e1:af:7c:d5:57:fd:30:c2:a4:a4:82:1a:
5c:36:6d:8f:cc:22:95:5d:b1:da:d3:59:0a:18:9d:
52:74:d2:df:be:9d:12:3c:85:c2:16:8d:72:60:30:
b7:32:59:ed:53:9e:75:2b:05:95:72:27:48:52:c5:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:B1:9A:5A:95:1E:94:88:21:F7:32:F5:53:8D:77:13:F5:AF:75
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:37:93:d3:90:bd:f4:1d:ce:5b:ce:98:6d:3a:bd:0a:3a:
03:b1:51:34:be:16:04:57:49:cf:60:33:15:6f:16:32:58:cf:
0e:60:bf:52:35:5f:d1:d5:05:0b:a1:53:7e:26:fd:b6:83:55:
17:10:12:e8:89:da:71:c8:b4:c0:82:a3:17:3e:04:0c:93:08:
e2:7d:f7:a8:cf:5e:72:01:de:55:54:f8:dd:2a:37:a7:42:69:
f0:f8:9b:69:b9:ca:1f:73:27:8c:a2:91:69:27:81:40:92:72:
c4:cd:7e:17:fe:f7:c8:c4:f4:5a:3e:7b:d6:8b:a9:8a:3e:7c:
b3:1f:90:7f:66:25:f2:60:b6:40:10:90:06:fb:dd:dd:be:f4:
a9:f2:e2:96:67:f7:96:a6:c5:25:e5:69:c8:9d:e1:10:12:27:
62:b5:99:a4:ab:34:4f:88:c2:7a:31:90:d7:7d:17:9e:0a:b1:
56:8c:d0:d3:d1:cf:8b:d0:df:64:98:97:69:f9:61:25:fd:ba:
7d:f1:fd:4d:22:bd:e3:1a:55:ae:9f:27:22:0e:a3:bb:d9:87:
5a:52:95:7e:eb:bf:d7:c0:02:34:0f:3e:81:06:a6:99:6b:a0:
91:62:0b:99:dc:5a:e4:9b:f1:4b:8b:95:39:33:8c:66:86:90:
11:ad:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:50 2025 by rpki-client