Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: 8He29qtNbzX2YCgUiFOthO43+Tu5FtlLbie8E4+tbYk=
Subject key identifier: 25:C6:D8:82:0A:A7:1F:7C:7D:51:60:62:29:CE:D3:6C:6D:6A:C0:99
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0113
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 50
Signing time: Thu 28 Nov 2024 12:25:49 +0000
Manifest this update: Thu 28 Nov 2024 12:25:49 +0000
Manifest next update: Fri 28 Feb 2025 12:25:49 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: xRbQe2v9+oaa2KKIIISowtOaklK5likDrFeFnkUj1lQ=)
2: ripe-ncc-ta.crl (hash: zwMAmpvdfACyF2OHQ9iUu1rc9eSHfqKju65g47ulg3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Feb 2025 12:25:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Nov 28 12:25:49 2024 GMT
Not After : Feb 28 12:25:49 2025 GMT
Subject: CN=25c6d8820aa71f7c7d51606229ced36c6d6ac099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:f4:fd:41:e1:64:31:3b:ee:d2:46:66:52:
a9:9c:ce:ee:fb:bb:f7:e0:e4:1b:22:16:e6:c1:ed:
c2:ed:69:a5:e5:77:8a:94:d8:a5:0d:8a:37:26:eb:
da:ea:b8:e4:16:5f:52:78:46:99:e4:78:24:43:20:
27:13:69:e7:93:09:10:78:55:96:a2:46:ce:50:53:
f1:3f:16:14:cf:fb:1e:4a:55:65:95:4b:c2:58:38:
e3:bc:75:93:7b:bc:73:1d:f4:94:66:ad:1a:37:ee:
6c:b5:99:09:de:a9:ea:83:12:24:e9:94:8c:ea:a7:
d8:24:56:b2:32:66:17:5a:2a:f2:b0:11:f5:df:24:
88:9c:81:09:c9:d6:64:61:00:d4:d4:e2:2c:fa:ed:
ab:d2:5b:bd:8e:15:62:8d:09:34:ea:a9:ca:75:32:
ac:3a:20:d1:e4:00:01:60:ef:e7:80:11:1b:5e:cf:
be:aa:3b:50:ad:2e:66:d4:97:c2:bf:d5:61:e4:31:
35:e2:52:f9:86:dc:fc:4a:c1:4d:61:5b:0e:65:f1:
db:b5:74:21:d6:51:2b:c1:db:25:7a:a6:93:84:0c:
bf:32:cb:c1:c8:35:ee:be:84:d4:0d:1d:4b:22:82:
18:1f:e8:fd:fb:b1:06:43:55:fe:76:6e:2c:85:00:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C6:D8:82:0A:A7:1F:7C:7D:51:60:62:29:CE:D3:6C:6D:6A:C0:99
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f0:bb:d0:c2:5d:24:b9:7c:71:7c:7c:d5:e3:e2:05:c4:bc:
61:44:91:eb:8a:e2:1d:86:48:c9:a4:e2:28:50:89:be:cb:6f:
bf:28:56:07:09:f4:54:64:32:3d:49:85:9d:13:ee:3b:4e:d2:
da:07:b5:f2:04:e0:d1:35:86:e0:33:8c:45:ba:11:55:88:a4:
0d:1f:e1:70:3b:45:6c:70:8b:17:51:2b:6b:dc:f9:17:ce:85:
9f:dd:04:d6:a2:dd:e4:dd:b5:c3:6f:30:cb:d5:ae:e8:a6:7e:
38:ec:a6:01:b9:bc:d1:23:5c:f2:37:84:63:a6:8c:4d:e9:c9:
ed:f1:f5:cb:e6:85:ad:63:15:a8:f2:4a:93:2a:b3:ab:2a:43:
ed:a0:09:08:4f:15:7a:07:ff:f6:f6:a5:12:45:22:6b:3a:83:
80:4f:01:b2:4e:79:a9:53:b8:4f:c4:72:2e:1b:20:15:c9:b8:
80:f1:e5:d9:ff:83:00:da:95:c1:05:67:3a:50:df:38:1f:62:
e9:21:96:3f:82:a0:ce:78:d6:e6:86:65:66:00:ce:f3:fa:16:
be:a3:f0:fa:7e:49:f4:b4:d9:fd:f1:9e:ce:86:3d:02:c4:19:
4f:1a:f5:18:1c:76:37:d6:47:70:2d:26:06:54:a0:cd:fc:57:
70:29:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 17:19:38 2024 by rpki-client on console-ams.rpki-client.org