Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: emOl7Nxu4hrjy2df9Xx3AKYw6Ivf1W9Jvv6pcsEl8JA=
Subject key identifier: DE:59:83:9E:8D:06:2E:26:E6:D9:E0:78:D0:B4:E2:39:64:1C:81:C9
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 010F
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 4E
Signing time: Wed 24 Jul 2024 12:16:26 +0000
Manifest this update: Wed 24 Jul 2024 12:16:26 +0000
Manifest next update: Thu 24 Oct 2024 12:16:26 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: 5e0LmNydvRXceqbprwyymMunJpcx3QcTEu4dS9DENwI=)
2: ripe-ncc-ta.crl (hash: thsdlzuGsFFs17ov2CmMlQolTD69rKXkX1YNdBH/A8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Oct 2024 12:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Jul 24 12:16:26 2024 GMT
Not After : Oct 24 12:16:26 2024 GMT
Subject: CN=de59839e8d062e26e6d9e078d0b4e239641c81c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:e8:16:81:3b:24:7e:b2:99:2b:00:4c:7d:
d6:96:ae:a2:25:84:63:1b:b1:64:80:15:c7:b3:61:
63:4e:e2:a9:5d:89:c3:af:eb:c7:ca:e9:77:74:6b:
ef:82:7f:27:03:3c:cc:85:82:8a:28:08:8f:48:29:
e2:55:27:cb:75:35:48:40:81:c0:b7:70:f1:37:d1:
28:f6:df:ab:11:bf:d1:27:19:f5:88:55:89:60:af:
90:70:34:e4:99:24:0f:22:99:71:89:29:5c:57:91:
3c:26:a4:4b:c3:89:b7:dc:0c:9b:e4:bd:bb:88:76:
f9:b6:a9:fc:eb:07:96:c5:a8:de:13:5f:c6:7c:5d:
57:04:6f:b4:5b:aa:e6:23:e8:9b:d3:13:61:21:84:
c9:d6:99:85:ca:95:ca:64:95:f3:ac:11:a4:96:01:
8d:cd:6b:6c:b5:ef:74:5a:89:ee:6e:f8:17:59:5e:
c1:f1:40:1e:83:ed:d7:de:1d:90:26:42:eb:9d:3d:
c4:f8:5a:4d:3b:9a:a0:f9:4a:27:47:1b:18:e4:70:
a1:71:71:6e:cb:6a:c1:6b:cb:70:dd:00:7d:48:11:
49:da:d5:bc:92:f8:59:cc:01:bd:72:50:fe:b7:08:
e5:e6:16:0d:af:0e:03:61:c0:2d:bb:bb:56:1a:37:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:83:9E:8D:06:2E:26:E6:D9:E0:78:D0:B4:E2:39:64:1C:81:C9
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b8:b8:08:ab:1f:58:9d:76:ed:6b:24:83:f1:d5:fc:14:a5:
8a:98:80:b6:49:f9:ee:0a:86:57:f4:70:6a:7a:07:2d:da:bd:
96:61:a7:26:80:95:f2:a5:d1:71:6d:53:e7:9b:81:6c:d0:b6:
be:2d:b3:1d:1c:0f:b1:44:6f:e1:30:38:85:eb:be:4e:a7:22:
45:5d:6e:a4:c9:14:b9:18:6f:28:5f:d0:c6:00:4a:86:2d:72:
de:da:e0:54:5e:cc:a7:18:2a:be:cb:ba:03:c9:35:bc:2a:38:
c1:07:cc:f7:30:77:f5:55:7d:4e:c2:ac:9b:45:30:37:fd:93:
5b:02:0a:75:09:b9:2f:1d:9c:eb:13:13:c5:32:d0:ec:14:1c:
13:a5:9c:ff:a4:a2:28:40:53:e5:ab:94:7f:9f:b2:17:93:58:
99:a7:48:62:ba:99:48:8c:44:e8:a5:04:b9:1d:4a:60:0e:87:
05:c6:7e:c3:9c:59:cb:1f:c7:ab:a4:d6:91:60:e9:09:c2:7d:
8c:68:1c:a0:b7:20:b2:42:ec:e4:8d:69:67:66:2f:55:0b:ae:
b2:6c:01:f4:db:5d:e9:84:2e:22:30:ee:dd:b4:5d:cc:23:3a:
69:71:e4:16:10:fd:27:e5:16:fa:35:46:52:12:95:73:55:5e:
9d:bc:89:ed
-----BEGIN CERTIFICATE-----
MIIERjCCAy6gAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw
ZS1uY2MtdGEwHhcNMjQwNzI0MTIxNjI2WhcNMjQxMDI0MTIxNjI2WjAzMTEwLwYD
VQQDEyhkZTU5ODM5ZThkMDYyZTI2ZTZkOWUwNzhkMGI0ZTIzOTY0MWM4MWM5MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMfoFoE7JH6ymSsATH3Wlq6i
JYRjG7FkgBXHs2FjTuKpXYnDr+vHyul3dGvvgn8nAzzMhYKKKAiPSCniVSfLdTVI
QIHAt3DxN9Eo9t+rEb/RJxn1iFWJYK+QcDTkmSQPIplxiSlcV5E8JqRLw4m33Ayb
5L27iHb5tqn86weWxajeE1/GfF1XBG+0W6rmI+ib0xNhIYTJ1pmFypXKZJXzrBGk
lgGNzWtste90WonubvgXWV7B8UAeg+3X3h2QJkLrnT3E+FpNO5qg+UonRxsY5HCh
cXFuy2rBa8tw3QB9SBFJ2tW8kvhZzAG9clD+twjl5hYNrw4DYcAtu7tWGjdFRwID
AQABo4IBfzCCAXswHQYDVR0OBBYEFN5Zg56NBi4m5tngeNC04jlkHIHJMB8GA1Ud
IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr
BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90
YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw
QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDLuLgIqx9YnXbtaySD8dX8FKWKmIC2
SfnuCoZX9HBqegct2r2WYacmgJXypdFxbVPnm4Fs0La+LbMdHA+xRG/hMDiF675O
pyJFXW6kyRS5GG8oX9DGAEqGLXLe2uBUXsynGCq+y7oDyTW8KjjBB8z3MHf1VX1O
wqybRTA3/ZNbAgp1CbkvHZzrExPFMtDsFBwTpZz/pKIoQFPlq5R/n7IXk1iZp0hi
uplIjETopQS5HUpgDocFxn7DnFnLH8erpNaRYOkJwn2MaBygtyCyQuzkjWlnZi9V
C66ybAH0213phC4iMO7dtF3MIzppceQWEP0n5Rb6NUZSEpVzVV6dvInt
-----END CERTIFICATE-----
Generated at Wed Jul 24 15:52:52 2024 by rpki-client on console-ams.rpki-client.org