Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: vtXmUWlcaedmg/XtRCtI1Fm/axjwl1v7IaRiBBnZUPI=
Subject key identifier: FE:5B:D2:C8:06:FF:48:CD:08:F9:E3:C1:21:65:E6:81:7B:AC:47:EB
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019921B24A0891FA304D41BB790749B4FA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 13B6
Signing time: Sun 07 Sep 2025 01:02:36 +0000
Manifest this update: Sun 07 Sep 2025 01:02:36 +0000
Manifest next update: Mon 08 Sep 2025 01:02:36 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: ZVFL40EoreJcQ3cRNcToRhdlShJ7HJVzYcHNkXkwiBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4a:08:91:fa:30:4d:41:bb:79:07:49:b4:fa:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Sep 7 01:02:36 2025 GMT
Not After : Sep 8 01:02:36 2025 GMT
Subject: CN=fe5bd2c806ff48cd08f9e3c12165e6817bac47eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:26:ba:0e:b3:af:ae:fc:73:1b:14:6c:20:
df:49:ef:67:e0:37:47:06:12:df:1a:42:54:3a:83:
82:ef:5d:4c:77:29:11:07:76:4c:27:9c:82:ee:80:
42:dd:e6:dd:27:40:5f:d2:b4:9a:90:5a:83:99:dc:
72:4a:56:94:62:25:93:5f:f8:f4:e0:e8:09:ba:40:
34:40:a3:41:81:6b:b6:6a:9d:e6:e3:e8:54:8d:6c:
0f:ba:ba:1f:bc:e6:7f:78:0a:f4:33:f6:fd:81:53:
2b:e3:5a:63:58:33:19:1a:80:a4:ba:d2:01:f3:4a:
aa:c1:c9:26:2b:65:40:cd:08:cb:1c:ad:cf:e4:16:
f7:38:04:f7:83:fb:7f:29:09:99:9c:66:e0:a3:ce:
44:6f:b7:8e:ce:1d:93:43:8c:c6:9d:55:7a:62:9c:
20:46:5e:12:84:86:66:fc:5e:2c:0a:04:c7:e5:fa:
a2:17:15:e5:31:a7:3c:26:c4:a8:8d:79:c9:a2:f1:
35:8c:d4:ee:11:e4:1d:12:2c:6c:08:32:32:18:a3:
f0:a6:c2:f5:02:1f:1e:fe:f5:1b:9c:cd:18:df:ee:
53:84:db:4a:de:86:6d:cd:36:a7:40:2a:a8:7a:d9:
26:1f:96:7f:f9:7f:7a:12:3f:c0:0d:27:8c:ac:0f:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:D2:C8:06:FF:48:CD:08:F9:E3:C1:21:65:E6:81:7B:AC:47:EB
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:29:c0:5b:2f:55:5e:5c:92:1b:3a:60:74:53:39:58:d7:1a:
1f:c8:4d:9f:0b:2b:7a:25:65:28:74:2e:ba:7d:5b:b8:d5:3b:
c0:15:b4:fb:c6:69:0b:fc:e4:cb:c9:0d:cb:4c:a9:28:33:11:
bc:48:b8:d9:43:a7:1a:a3:35:4d:6a:2c:f9:7e:bc:01:34:f1:
c4:a2:9d:15:4d:fc:c1:f7:5e:31:3a:e7:9b:0f:e3:f2:8c:13:
6b:1f:8b:cc:1b:20:69:3b:33:b1:72:a7:f2:86:1d:5e:85:b6:
d5:35:88:6e:4e:b2:27:76:5f:72:40:6c:45:c7:42:25:4b:45:
c4:0e:df:7a:d5:3f:f3:2e:7a:e1:8b:ab:de:a6:0b:df:4b:23:
bb:2c:00:4c:ea:3c:b0:79:e7:ad:04:97:ee:6c:71:35:37:b7:
db:f1:46:b7:a5:6e:17:f9:c4:0e:95:7b:79:63:48:99:49:9b:
ab:3e:75:2d:b1:81:4a:8b:36:53:7c:21:4b:31:5d:43:cf:71:
ca:f5:df:6f:7b:5e:c5:7c:c7:6b:64:47:78:e2:fd:c5:69:8d:
16:6b:63:92:7e:ec:39:d9:be:2c:43:38:03:bd:33:9a:ca:21:
63:04:51:39:3e:9f:34:f4:ca:70:23:d4:d2:61:8a:a8:1e:c9:
af:f9:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:14:56 2025 by rpki-client