Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: 7O7HiqkvfEZTTT3XI6URKLbJ03vEbi8kcJ89CSenFHU=
Subject key identifier: 96:6B:18:48:EA:38:27:49:A7:72:0B:74:7E:42:49:8C:F6:D9:51:1A
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019A71B899AFC075DFAED838A31CE811C6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 1464
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: q5t5/VXX5xCFQqMjLXwtfXizSs7WAvUwzctH4lwADsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:99:af:c0:75:df:ae:d8:38:a3:1c:e8:11:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=966b1848ea382749a7720b747e42498cf6d9511a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:ca:50:1b:80:3d:e7:d7:51:da:73:cc:41:
5c:10:5b:44:75:7d:05:b0:63:35:f3:a2:78:49:6f:
ee:de:9d:0f:b1:68:04:50:75:2e:8c:a2:47:08:41:
15:f0:a3:c1:38:40:af:1a:10:93:70:4e:84:86:44:
94:92:53:5f:ce:4c:0f:70:70:bc:27:4d:54:ab:96:
e2:28:8f:f8:26:9c:5c:c4:81:44:22:01:70:bd:37:
93:b2:7b:83:1d:a3:4b:c9:4a:19:8c:40:e0:ef:f7:
4c:e6:bc:0a:b1:95:29:d2:84:df:15:8e:82:5e:54:
e6:b8:31:b6:dc:0a:44:e5:1f:e5:18:a8:ab:87:64:
2a:db:78:f7:bd:9f:0b:5f:3b:27:9d:ea:f8:14:d3:
ba:e0:c7:9a:29:94:f0:92:f2:4a:75:0f:43:d6:63:
e7:98:ee:02:97:02:11:da:8e:e9:57:1c:93:1b:07:
af:df:09:63:55:52:4b:ec:a4:5f:66:3b:3a:b5:d4:
f2:df:42:40:31:45:80:c4:a1:e9:69:80:e2:c4:b0:
49:c7:78:c9:95:4f:e8:75:5a:4b:0e:ff:23:1f:4a:
9b:44:ff:5b:fa:bf:38:0c:9e:7b:50:08:40:1a:91:
c9:63:f5:8b:a0:6d:01:3a:8f:79:b4:d3:32:aa:13:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:18:48:EA:38:27:49:A7:72:0B:74:7E:42:49:8C:F6:D9:51:1A
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:13:98:ea:bb:4b:b8:25:d2:0e:dd:68:d7:b3:41:0e:5a:c7:
81:57:1d:42:4e:bd:04:cd:bb:c4:79:46:4c:8c:da:8a:a0:da:
30:4f:b0:81:36:aa:cc:52:c0:47:f5:10:35:0f:df:e2:a5:d0:
10:b7:b3:b4:70:86:d6:67:78:1f:6e:3c:19:08:2d:c4:42:7b:
3a:ec:44:4d:0c:f9:f3:f2:51:c2:4a:99:58:78:65:14:92:bd:
66:16:ed:60:56:16:d5:35:eb:d8:c3:04:ef:bf:2e:fd:6d:1b:
77:5c:8b:7c:57:cc:cc:71:b6:4b:76:48:08:37:4f:dc:ee:ac:
67:b0:c0:2d:3c:05:fc:17:e9:d0:2c:5d:e2:06:5c:17:a3:8b:
4e:4b:84:6d:d0:73:7c:c3:7c:7b:5c:70:ca:78:02:e9:c4:5e:
cf:18:03:58:21:0f:e4:c5:ed:bf:cb:df:c7:c7:2a:27:45:3f:
09:55:1f:cb:ae:6c:1f:63:6c:bb:fa:0a:5e:0f:8b:a9:06:a2:
04:ac:6c:05:41:de:9e:d8:18:21:d4:db:c7:c6:16:e2:31:6d:
a1:f3:15:3e:a5:7f:43:b2:55:6e:68:96:11:09:51:8b:ce:50:
6b:b8:eb:7d:47:13:69:e9:4d:52:31:da:41:b8:fb:8e:ee:60:
1d:52:82:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuJmvwHXfrtg4oxzoEcbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw
ZGU5YjQwHhcNMjUxMTExMDcwMTU0WhcNMjUxMTEyMDcwMTU0WjAzMTEwLwYDVQQD
Eyg5NjZiMTg0OGVhMzgyNzQ5YTc3MjBiNzQ3ZTQyNDk4Y2Y2ZDk1MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpfKUBuAPefXUdpzzEFcEFtEdX0F
sGM186J4SW/u3p0PsWgEUHUujKJHCEEV8KPBOECvGhCTcE6EhkSUklNfzkwPcHC8
J01Uq5biKI/4JpxcxIFEIgFwvTeTsnuDHaNLyUoZjEDg7/dM5rwKsZUp0oTfFY6C
XlTmuDG23ApE5R/lGKirh2Qq23j3vZ8LXzsnner4FNO64MeaKZTwkvJKdQ9D1mPn
mO4ClwIR2o7pVxyTGwev3wljVVJL7KRfZjs6tdTy30JAMUWAxKHpaYDixLBJx3jJ
lU/odVpLDv8jH0qbRP9b+r84DJ57UAhAGpHJY/WLoG0BOo95tNMyqhMB/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZrGEjqOCdJp3ILdH5CSYz22VEaMB8GA1UdIwQY
MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt
NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi
LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxOY6rtL
uCXSDt1o17NBDlrHgVcdQk69BM27xHlGTIzaiqDaME+wgTaqzFLAR/UQNQ/f4qXQ
ELeztHCG1md4H248GQgtxEJ7OuxETQz58/JRwkqZWHhlFJK9ZhbtYFYW1TXr2MME
778u/W0bd1yLfFfMzHG2S3ZICDdP3O6sZ7DALTwF/Bfp0Cxd4gZcF6OLTkuEbdBz
fMN8e1xwyngC6cRezxgDWCEP5MXtv8vfx8cqJ0U/CVUfy65sH2Nsu/oKXg+LqQai
BKxsBUHentgYIdTbx8YW4jFtofMVPqV/Q7JVbmiWEQlRi85Qa7jrfUcTaelNUjHa
Qbj7ju5gHVKC4w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:53 2025 by rpki-client