Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: kXxBgilLlXi4SJHY9JoWnmJAtRoO5oE084UXV6TsQ20=
Subject key identifier: 06:36:55:39:E4:11:65:70:6A:09:A3:AE:F2:A3:9C:8B:0C:59:36:74
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0117
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 52
Signing time: Mon 07 Apr 2025 11:13:25 +0000
Manifest this update: Mon 07 Apr 2025 11:13:25 +0000
Manifest next update: Mon 07 Jul 2025 11:13:25 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: dVEzlBkI2zeE6h2iN5awNc5O0SwU1EgzXeaINCTXhyk=)
2: ripe-ncc-ta.crl (hash: S/WJJkOithtxatYHmz/8/NWCa5D7TLjFr70fxscyXAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 11:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Apr 7 11:13:25 2025 GMT
Not After : Jul 7 11:13:25 2025 GMT
Subject: CN=06365539e41165706a09a3aef2a39c8b0c593674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:e4:ef:fa:6b:cc:91:60:0b:54:f9:92:ed:
fb:b2:ac:2e:f6:7f:51:8e:a7:cf:d5:68:a9:a3:c7:
58:b3:59:29:f4:48:75:a9:c6:1d:8d:bc:4a:e9:a8:
a5:ef:f1:46:78:39:0b:df:b8:a8:e0:cd:ec:18:80:
e0:2d:e9:f2:db:60:81:dd:be:71:cb:5a:d9:4e:30:
1f:72:1d:23:5a:90:6a:a3:49:c7:71:d1:e7:1b:b5:
77:c2:65:19:d0:0a:82:34:92:15:c1:23:2a:f8:e7:
ba:a9:8a:28:72:f2:7e:01:70:07:29:cc:29:54:08:
24:5f:36:6d:71:81:63:a6:a6:15:6a:8c:25:a1:4d:
19:74:12:25:bc:ae:c4:56:65:fb:12:6f:0d:a1:49:
ee:c5:82:dd:30:81:ad:bb:9d:cd:e1:34:18:5e:13:
be:82:4d:2e:e3:a1:0f:f1:79:52:fb:c0:2c:c9:71:
16:60:ee:9d:7c:cb:4a:68:9e:88:86:4f:3a:4e:2c:
12:ad:de:cf:50:9d:44:39:95:53:29:57:5c:6f:6b:
ee:96:8a:19:16:90:87:d6:42:4f:c2:3a:7c:21:68:
c3:e4:9e:f7:93:19:34:5a:38:e1:15:cd:cb:ec:a8:
3d:07:cd:3a:1e:3a:70:e8:bf:e6:9b:33:04:0f:b4:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:55:39:E4:11:65:70:6A:09:A3:AE:F2:A3:9C:8B:0C:59:36:74
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:57:c8:41:f0:a4:78:cf:76:a0:6c:e3:ce:c2:d7:69:75:
2c:26:ea:c2:f2:65:11:19:2a:a1:ad:45:47:7b:1c:0a:bf:30:
3f:53:a3:86:98:22:b1:55:cd:67:96:b9:35:cd:25:fd:6a:31:
26:81:b0:40:8f:d2:f1:59:97:43:99:ec:6a:b6:03:c4:52:01:
fa:24:9d:3e:80:cc:db:84:8f:d4:1d:ec:5f:d7:75:cd:20:bf:
d0:95:8a:c9:ae:b7:9d:df:5b:f4:2c:a8:18:34:b0:6b:28:b2:
b9:81:b2:6a:19:79:60:43:e3:0c:db:a4:11:4f:7f:6d:c6:41:
46:aa:5c:82:21:b6:d0:88:3a:ae:95:9e:13:ab:48:63:3b:d3:
e8:c2:f6:89:3c:70:3a:c9:ce:27:20:ae:42:c2:28:64:83:de:
94:f2:95:97:2b:7f:05:55:25:f8:02:c9:b8:98:9a:3c:ac:64:
02:80:6c:e3:20:06:e5:06:51:99:cb:2f:ed:a1:f7:83:bf:93:
c5:01:84:11:72:07:3a:3b:f1:7e:51:d2:78:33:4d:a3:8e:ca:
f5:41:69:1b:9d:dd:41:35:f0:d5:45:03:a4:77:37:b8:3f:5a:
c6:90:de:b6:71:a4:c7:e1:e4:80:0d:43:2f:98:c1:4e:7b:9b:
ce:1f:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 28 22:47:50 2025 by rpki-client