Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: cHGJX/X5v17fw2SLUy5eL6SRGQdj/ZwVizbByy9+W5Y=
Subject key identifier: 6E:C7:50:23:01:2C:F0:55:17:54:6F:51:39:EB:AB:75:AB:A7:65:E6
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0115
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 51
Signing time: Wed 22 Jan 2025 12:39:50 +0000
Manifest this update: Wed 22 Jan 2025 12:39:50 +0000
Manifest next update: Tue 22 Apr 2025 12:39:50 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: 8Ekw0Ti/XTFTH+jDw5Ku4rVGH69XeclALO0hBOEFYzE=)
2: ripe-ncc-ta.crl (hash: AiVj9rExniJ/TTnY6NiAvjSg8iIEL3FfEOsAZgYCDBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Jan 22 12:39:50 2025 GMT
Not After : Apr 22 12:39:50 2025 GMT
Subject: CN=6ec75023012cf05517546f5139ebab75aba765e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:af:ac:a3:71:81:96:21:0a:33:71:86:bd:
7f:3e:08:af:16:37:83:58:e0:3d:75:fb:b7:d4:4a:
1a:e9:d9:dd:9b:d1:a9:cf:a6:01:ea:c5:46:25:b1:
65:fe:63:ce:a7:e5:35:02:20:f9:8d:ac:cc:ef:33:
08:4b:04:02:73:47:46:01:01:01:94:fc:c1:df:54:
87:75:99:95:37:0c:ca:ea:fb:a4:9a:15:7e:d3:d6:
14:f0:e7:05:28:5a:9d:72:d7:1b:e3:61:70:50:04:
ed:86:dc:93:64:13:3e:a5:49:99:c0:89:13:bd:0f:
ff:8e:89:97:c9:58:55:8c:61:43:af:ac:af:2a:e5:
87:0c:f6:e9:b9:4e:fd:02:9b:df:bd:61:bf:70:79:
a2:9d:c1:35:45:5e:1c:72:95:64:1c:f2:d6:ea:fe:
fe:22:7a:6b:f4:41:ee:00:20:e2:1a:d9:d1:5c:da:
f6:d7:8a:3b:4d:35:84:b8:50:a0:b4:e0:76:1b:ad:
64:cd:e5:1f:50:e1:de:1a:b3:75:24:e6:bc:24:0d:
e2:c1:fe:48:bc:f5:81:3a:5f:1f:fb:51:73:3f:a8:
e7:11:7b:08:e6:d1:ed:73:9b:9f:49:0b:c2:b6:98:
b3:a0:65:b2:7a:28:ae:df:2c:5e:1b:9c:f9:8c:ec:
7c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:50:23:01:2C:F0:55:17:54:6F:51:39:EB:AB:75:AB:A7:65:E6
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:35:e4:a3:46:0a:93:f4:01:c2:aa:1a:56:31:47:00:95:a8:
fb:3f:08:20:6b:cf:a7:24:4c:37:6c:89:8e:2c:06:5a:17:04:
83:1e:6f:53:9a:a5:f4:5f:8f:d0:5e:b5:d5:42:2b:41:f7:31:
0c:64:42:67:ef:7f:12:cb:17:68:d2:75:db:7a:64:83:d4:22:
8f:8d:36:cb:82:d1:ca:42:ec:03:e9:73:bc:a8:47:4e:d8:12:
5e:28:0d:04:d0:1f:7f:fc:82:3d:b1:d9:b2:2a:86:00:3d:6a:
43:96:91:34:6b:0c:af:0e:0e:1d:b9:02:cd:e0:74:c6:ca:b2:
2f:59:87:b9:d6:37:ed:7c:24:35:b4:47:8f:f6:29:05:6d:05:
4a:12:67:f4:58:ca:1e:6d:26:43:7c:c7:27:b2:a0:59:78:b8:
93:a1:33:9d:c9:92:6e:f3:9a:87:09:b8:40:25:4f:30:0f:c8:
8c:0e:10:29:15:2f:62:eb:94:ce:f4:b7:0b:3e:4f:dc:b0:36:
c9:ab:bb:42:b4:4a:f3:17:46:70:7e:c5:7f:da:35:c5:b8:78:
c2:6c:bd:76:63:21:c1:05:a8:f2:f5:f7:85:1b:78:f1:d4:47:
22:8d:52:f9:14:50:4a:cd:45:0e:6a:de:62:9e:53:e4:5f:6e:
b1:99:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:02 2025 by rpki-client