Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: Ks9NFkPQTLqRTRtEE4cKknoeh15eqsIH1sWSd78YkOU=
Subject key identifier: 86:E4:13:C4:4C:47:8F:6B:A2:14:5C:FE:89:9D:EB:9D:AA:39:EB:1F
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0119
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 53
Signing time: Thu 19 Jun 2025 13:07:22 +0000
Manifest this update: Thu 19 Jun 2025 13:07:22 +0000
Manifest next update: Fri 19 Sep 2025 13:07:22 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: 7492XCjPg8vqEWzsri/REaCFdq9Nay4bhfVNEm3wDKE=)
2: ripe-ncc-ta.crl (hash: MMW+H+eDJbDHU9w8EsL3FtJ9kcZw11aqPDUHZ2IGfSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Jun 19 13:07:22 2025 GMT
Not After : Sep 19 13:07:22 2025 GMT
Subject: CN=86e413c44c478f6ba2145cfe899deb9daa39eb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:fb:72:38:51:58:51:5a:8d:a2:d4:cc:8d:
7f:de:5c:3f:ec:13:af:51:0f:a1:73:51:7a:65:28:
ff:65:dd:28:e8:dc:ca:31:53:a7:43:74:60:46:0b:
aa:ae:db:68:22:0d:ba:8c:bc:46:c8:6a:9e:f6:f3:
32:a9:37:90:76:1f:c8:7b:b7:6b:ec:14:b5:e3:30:
0a:ec:e3:e2:0e:51:fb:bb:07:ce:6c:cd:3a:fe:17:
68:c2:d5:17:d8:c7:83:91:ca:e9:77:2a:bb:9b:df:
d3:93:0a:59:7d:32:40:ff:e7:4b:e8:51:72:ea:70:
2a:8b:1a:63:58:1c:15:71:ce:3d:d2:a2:b3:04:28:
a4:71:82:39:4c:60:f3:ce:61:9e:ba:70:55:b9:d3:
1b:ed:33:d5:50:ca:3b:39:97:54:de:cd:85:ff:7a:
7b:65:61:42:27:a8:c7:7b:f0:c1:f3:99:fa:de:f9:
c7:ca:68:43:bc:7d:f2:b9:01:bf:8f:ad:19:b2:0c:
be:5d:b5:3b:98:17:c2:c0:b6:f8:df:c6:d6:f6:42:
66:80:3a:a7:1e:ea:e6:99:f4:cd:c8:d2:5d:50:de:
14:eb:9a:1b:04:00:5c:97:02:4f:0b:2f:f2:6d:ee:
f9:5d:0a:fb:6d:12:0c:e5:ae:ee:e0:ad:d7:2c:bf:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E4:13:C4:4C:47:8F:6B:A2:14:5C:FE:89:9D:EB:9D:AA:39:EB:1F
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:84:90:2b:16:60:2d:a3:ab:ec:c9:a5:68:b4:48:c2:87:
b4:ca:db:fa:5a:83:5d:59:41:97:8c:95:2e:30:02:6f:3b:74:
b5:9f:2d:71:02:b7:d8:69:1c:b5:52:d0:fb:fc:28:ff:2b:67:
f5:78:a6:07:d2:56:5f:9c:56:6e:36:3d:66:33:e9:86:32:39:
3e:24:7f:f9:08:5a:8c:a9:20:82:8f:d1:d1:35:1a:f6:62:02:
e3:7a:d9:26:ab:b9:25:d7:fa:7e:e0:52:44:ba:03:36:1e:4e:
fd:6d:6d:9f:35:9d:aa:7a:2b:0e:20:c0:9a:c9:ba:a7:bc:18:
84:93:6e:64:f4:59:7d:4a:26:4a:c0:80:17:23:70:23:c9:87:
f2:2e:2c:a0:35:99:6a:fe:72:bb:ce:61:cb:55:4b:1a:6c:f4:
b0:87:85:17:7c:48:49:5d:1e:e5:5c:93:5d:0a:fc:5d:7f:09:
ff:92:27:08:1a:9c:60:8a:9c:23:c0:f0:37:6c:70:87:c2:9a:
60:1f:5f:cc:93:55:d9:9e:c7:77:d3:18:8b:89:a5:4f:ac:13:
80:52:6e:66:4a:eb:64:18:d0:be:97:9d:aa:a6:ce:69:50:e1:
e4:2e:bb:2b:99:9a:cb:f3:61:8b:e1:17:1f:fa:58:c4:6e:7b:
42:01:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:58:57 2025 by rpki-client