Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: mGAR27YZ1lhE7lYtP5axckJb6uSxKsimXd7fYhrFL0M=
Subject key identifier: 39:A7:5E:D9:06:A0:2D:59:26:28:97:94:9E:76:4D:47:EF:7A:EE:6B
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 010B
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 4C
Signing time: Thu 22 Feb 2024 14:13:59 +0000
Manifest this update: Thu 22 Feb 2024 14:13:59 +0000
Manifest next update: Wed 22 May 2024 14:13:59 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: fO9mz2BC7ZQOTkhQDH+R9WjNViy5XNP9gfP1bk7VzzU=)
2: ripe-ncc-ta.crl (hash: nR1AuXY/+MBsJhZcLdCKMlUW61xIChnPND0KRec/g5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Feb 22 14:13:59 2024 GMT
Not After : May 22 14:13:59 2024 GMT
Subject: CN=39a75ed906a02d59262897949e764d47ef7aee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:6b:95:22:f9:6c:ec:d5:ec:cd:f2:18:ba:
59:0b:9a:4d:71:60:2c:66:d5:d8:9f:97:37:bf:1c:
3b:33:fc:e6:80:6e:4e:39:66:b4:94:23:4f:1d:a9:
c6:b0:bf:ba:30:a1:49:05:2b:3f:bb:a9:5a:b9:2e:
7a:43:f9:46:7c:0e:55:73:8c:ba:52:bd:63:12:d0:
cb:19:3f:70:3c:1f:9f:a0:08:8b:b0:f4:ef:5a:15:
3e:82:1c:dd:32:c1:b8:5c:61:ae:79:ae:e3:9e:12:
5d:92:55:6a:70:23:29:87:70:ac:d7:ce:06:8a:f3:
f1:d5:ab:44:18:e4:17:b8:c1:dc:93:88:2d:0c:c1:
f3:0f:4f:b1:c6:3d:7c:a7:49:2d:f7:42:51:5e:23:
35:cc:d0:9d:f9:d5:a2:08:68:84:74:cf:32:df:8d:
84:7b:80:5c:7a:f1:67:84:bd:98:b7:16:0a:a2:33:
78:5f:7c:bc:ae:cf:0a:3f:ae:89:9c:ad:bf:5c:96:
2b:54:8d:56:7c:42:a6:84:a7:23:13:b7:5b:47:97:
f9:1e:79:f7:a2:78:25:9a:4d:70:5c:27:4f:1d:e6:
c7:b3:11:52:b4:d5:19:90:64:8b:61:f8:82:13:35:
23:b9:e9:e1:be:ec:6d:d9:2a:3e:85:ce:6a:9e:ff:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:5E:D9:06:A0:2D:59:26:28:97:94:9E:76:4D:47:EF:7A:EE:6B
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1e:4c:6b:b2:ab:70:1d:81:87:c2:d7:8c:22:0b:9a:f9:87:
d0:9d:c0:da:28:6f:f2:f7:93:be:2c:2b:96:e7:63:37:11:61:
f6:a4:8f:19:2d:dc:59:c1:52:43:51:25:d3:4a:05:bd:4f:cd:
da:4a:43:3a:df:83:46:54:54:12:9a:c2:05:78:7f:12:87:be:
76:1b:09:08:d9:e5:e4:c2:17:e4:5a:77:6f:b4:69:33:4d:5c:
c8:2c:a6:c2:da:39:05:5b:57:66:79:b4:7b:b9:aa:58:6d:f8:
59:2e:8a:17:ad:36:79:9d:12:1c:ef:b0:07:f2:86:e7:30:8a:
05:51:64:c8:f2:76:16:dc:66:ce:14:60:e1:24:c5:6e:fb:00:
d4:69:61:ae:7b:38:9e:bf:e2:8c:86:54:9f:ef:ed:d7:87:f0:
01:cd:0c:d1:58:dc:e8:61:13:b2:e6:78:fd:eb:fd:4b:83:42:
9d:46:b6:f7:d3:13:cf:df:e2:95:c6:cb:c0:28:98:88:55:d5:
e9:fe:6c:22:2f:02:75:9c:56:66:81:89:47:c4:7b:6a:ad:e0:
5a:aa:cf:4d:d2:7c:37:12:c5:0a:fd:13:e2:25:ea:35:ae:d0:
25:a0:65:29:42:c4:97:a5:b6:87:35:27:00:5c:77:14:df:9a:
b6:c5:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:03:29 2024 by rpki-client on console-fra.rpki-client.org