Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: 7eSO9bR7gFJSZyu9zlV/8x+PT5cH+61hncbdqC2uoD4=
Subject key identifier: 7E:96:A1:2A:5C:86:C6:B4:31:81:BC:41:F0:B8:84:B0:9F:AE:28:2E
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 01958C2969B3443FF14025AF094160A8E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 11DB
Signing time: Wed 12 Mar 2025 21:01:18 +0000
Manifest this update: Wed 12 Mar 2025 21:01:18 +0000
Manifest next update: Thu 13 Mar 2025 21:01:18 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: 9WI+SRYv7aql7ZR/v50tPxiL3NGnDZljmmhM9o4jFwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:69:b3:44:3f:f1:40:25:af:09:41:60:a8:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Mar 12 21:01:18 2025 GMT
Not After : Mar 13 21:01:18 2025 GMT
Subject: CN=7e96a12a5c86c6b43181bc41f0b884b09fae282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:dd:52:3b:cf:6f:1a:e7:29:71:93:2f:a6:37:
41:47:d2:97:15:d3:c8:42:e3:cd:21:de:8f:12:13:
fe:ee:21:8a:86:0b:ea:80:1f:af:ab:76:ce:e6:46:
e3:94:33:69:27:d0:fd:b9:54:11:44:7e:67:27:e2:
f9:8d:06:86:f4:72:b9:98:ff:e8:27:9c:b8:a8:72:
98:15:e3:d5:9d:46:39:0e:47:2f:7c:9c:7d:b3:30:
66:6c:c6:ca:73:ac:50:18:21:bc:09:cf:c8:00:e9:
49:2b:6f:5d:55:fe:8a:8f:e6:f7:54:3e:83:ab:b4:
86:f7:0c:f4:89:34:fe:5e:d5:7a:0d:98:99:cc:7c:
07:10:31:00:70:bf:7e:ca:75:d6:30:63:61:8a:ce:
3b:af:dc:a1:2b:b1:8b:14:a0:e1:30:14:b5:a9:10:
9f:d1:01:dc:4c:4c:d7:89:0e:17:15:27:4c:15:3a:
b5:cc:62:c7:50:f7:e1:25:0c:3e:49:fb:56:2b:7c:
09:50:1c:8a:5f:f7:c0:fa:0c:37:cf:40:fa:e4:9f:
84:7d:00:34:8c:5e:3a:1c:eb:10:51:5e:c4:87:45:
15:41:0c:e3:63:88:4d:34:01:ee:2d:a0:3f:f8:90:
d2:54:e6:68:2a:06:bd:47:4a:ac:30:c5:30:87:6f:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:A1:2A:5C:86:C6:B4:31:81:BC:41:F0:B8:84:B0:9F:AE:28:2E
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:a2:c0:f9:e0:18:47:74:d7:22:e9:05:a3:0b:c9:bc:e1:
9d:80:3f:7f:6d:18:2c:66:c6:2e:7e:4e:dd:f5:2d:de:69:0d:
1b:91:b8:8f:14:e8:fe:ba:14:b2:5a:c2:b4:a6:96:1b:94:a7:
d8:0d:30:bf:09:05:14:25:fe:62:2e:76:44:0e:e1:00:07:31:
72:2e:29:f2:e8:c5:44:73:67:d2:9b:79:06:c0:1f:80:a8:a0:
b0:35:b3:43:bd:9e:c4:2a:1b:73:2b:65:e3:80:4d:55:ae:a8:
03:0a:40:8c:01:d6:6f:bc:79:ad:fa:01:f0:16:2b:21:a2:ae:
ad:a8:2b:2d:e1:91:db:6d:1a:41:0c:cd:5c:88:92:37:7e:41:
04:53:84:47:59:bf:c1:78:fe:f7:16:45:e4:9e:b1:a8:13:16:
c9:49:6e:bf:fa:cc:89:e0:05:70:1c:4a:81:5f:58:a0:e8:b1:
54:b8:f1:a6:28:26:14:5a:ec:64:06:2e:29:01:04:b1:50:f2:
b5:62:55:b7:1a:b4:71:c3:a0:af:73:29:d2:9d:8e:bb:d0:f7:
9d:8f:21:a5:c4:70:3e:0d:bf:d7:54:d4:32:4e:1b:f0:a2:88:
17:b3:98:60:1c:82:df:d3:b0:20:a5:ae:a0:20:b9:1c:4d:5b:
a9:92:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:02 2025 by rpki-client