Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: BXjoMP8Q6WRcbM23LoSpPHrbAWmb8AJdSy/PrIxk4ys=
Subject key identifier: 0F:99:04:6B:8C:8B:53:9B:3C:BF:37:28:91:BE:32:53:AC:A5:BC:0D
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: FF
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest Number: 46
Signing time: Thu 06 Apr 2023 11:18:15 +0000
Manifest this update: Thu 06 Apr 2023 11:18:15 +0000
Manifest next update: Thu 06 Jul 2023 11:18:15 +0000
Files and hashes: 1: 2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer (hash: e45lvai8RQ+UdVl+rgnQxZOU39FyW8QFWxncce+0hCc=)
2: ripe-ncc-ta.crl (hash: hS4z+40bSEfZTT2FBZYpsl7dSfFncSLMWfUISEi7KaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Jul 2023 11:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Apr 6 11:18:15 2023 GMT
Not After : Jul 6 11:18:15 2023 GMT
Subject: CN=0f99046b8c8b539b3cbf372891be3253aca5bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:b9:b3:b7:18:80:29:d8:ce:da:40:a9:28:
dd:b0:76:a2:a2:be:4e:8b:16:3d:25:8f:5d:cd:e2:
94:2b:51:6d:83:92:05:cb:c5:25:6a:4e:7f:f8:0d:
34:77:19:40:a6:9e:f6:34:6f:d8:82:f6:8e:98:19:
85:55:bb:e2:33:1b:a6:98:25:d7:20:4d:93:5b:4f:
d5:c2:ba:3a:95:fc:58:1e:77:62:10:d7:9e:bc:da:
c4:d1:0e:d8:49:6f:71:0d:ac:29:6b:50:55:79:a3:
16:dd:07:24:fa:7a:6a:a9:70:ae:1c:7f:72:f9:17:
5f:4f:c9:80:97:11:12:e2:67:e0:f1:62:64:0f:fc:
32:ad:e0:3b:35:1f:eb:fd:25:c9:a0:ca:90:3b:94:
88:8c:31:fb:4d:a4:c2:fc:89:89:3c:db:23:4e:ec:
78:be:8f:4c:44:81:53:42:26:a9:18:24:59:9b:0b:
af:c4:c3:90:11:bf:a5:85:d0:f0:8b:8e:ef:02:b6:
32:46:02:31:43:93:3e:4b:a2:41:d2:44:4c:32:69:
1a:cf:00:d3:c9:f2:59:2b:6b:89:3c:39:c4:2c:e0:
79:42:53:84:bd:4f:5f:d6:c8:e0:cf:fc:c8:62:34:
9f:77:46:80:81:dc:0d:a5:6d:1e:f1:01:8b:5e:cd:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:99:04:6B:8C:8B:53:9B:3C:BF:37:28:91:BE:32:53:AC:A5:BC:0D
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:90:a6:c2:a2:df:89:6b:80:b1:2e:08:0c:6a:7f:50:f5:
13:a9:f5:5f:c9:24:1a:6e:bb:cf:75:ee:df:e0:0d:30:17:2c:
90:d2:1d:34:70:db:cf:d5:07:8b:b2:92:80:45:ca:82:4a:be:
0b:d4:4e:1f:42:e6:14:63:a2:bc:eb:eb:21:5c:2a:d0:9f:9c:
d3:af:bf:c8:30:a6:24:5c:c3:eb:9e:a7:e3:33:af:7d:90:2a:
32:3e:d4:2c:ff:55:80:f2:6b:23:0d:9f:9c:a3:d4:c2:5a:07:
23:49:2a:69:c9:34:ea:42:5b:42:3e:d4:03:08:28:ac:8c:0b:
26:b5:13:6b:f8:f0:aa:b8:77:d3:7d:52:3b:01:61:43:67:04:
4d:1c:2e:52:9a:b0:9c:a7:91:1f:12:d0:af:93:5d:f9:50:3f:
c3:b4:d4:00:fd:b7:07:ef:f7:22:7b:dd:50:97:78:38:aa:ff:
76:19:1a:20:4e:73:d1:ad:b9:f9:e6:64:6f:24:46:7e:f8:75:
33:39:81:9d:0d:ea:56:7a:9d:9a:f3:8c:55:96:e3:d1:b3:09:
a7:d4:83:29:fd:10:84:9c:bc:79:ad:16:5c:66:72:2e:03:f4:
24:b9:35:2f:0b:34:26:65:26:59:86:d2:34:ee:a5:37:ee:4a:
dd:2c:bd:76
-----BEGIN CERTIFICATE-----
MIIERjCCAy6gAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw
ZS1uY2MtdGEwHhcNMjMwNDA2MTExODE1WhcNMjMwNzA2MTExODE1WjAzMTEwLwYD
VQQDEygwZjk5MDQ2YjhjOGI1MzliM2NiZjM3Mjg5MWJlMzI1M2FjYTViYzBkMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbe5s7cYgCnYztpAqSjdsHai
or5OixY9JY9dzeKUK1Ftg5IFy8Ulak5/+A00dxlApp72NG/YgvaOmBmFVbviMxum
mCXXIE2TW0/Vwro6lfxYHndiENeevNrE0Q7YSW9xDawpa1BVeaMW3Qck+npqqXCu
HH9y+RdfT8mAlxES4mfg8WJkD/wyreA7NR/r/SXJoMqQO5SIjDH7TaTC/ImJPNsj
Tux4vo9MRIFTQiapGCRZmwuvxMOQEb+lhdDwi47vArYyRgIxQ5M+S6JB0kRMMmka
zwDTyfJZK2uJPDnELOB5QlOEvU9f1sjgz/zIYjSfd0aAgdwNpW0e8QGLXs0XKQID
AQABo4IBfzCCAXswHQYDVR0OBBYEFA+ZBGuMi1ObPL83KJG+MlOspbwNMB8GA1Ud
IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA4GA1UdDwEB/wQEAwIHgDBEBggr
BgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAKGKHJzeW5jOi8vcnBraS5yaXBlLm5ldC90
YS9yaXBlLW5jYy10YS5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjBy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9yaXBlLW5jYy10YS5tZnQw
QQYDVR0fBDowODA2oDSgMoYwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvcmlwZS1uY2MtdGEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABGpCmwqLfiWuAsS4IDGp/UPUTqfVf
ySQabrvPde7f4A0wFyyQ0h00cNvP1QeLspKARcqCSr4L1E4fQuYUY6K86+shXCrQ
n5zTr7/IMKYkXMPrnqfjM699kCoyPtQs/1WA8msjDZ+co9TCWgcjSSppyTTqQltC
PtQDCCisjAsmtRNr+PCquHfTfVI7AWFDZwRNHC5SmrCcp5EfEtCvk135UD/DtNQA
/bcH7/cie91Ql3g4qv92GRogTnPRrbn55mRvJEZ++HUzOYGdDepWep2a84xVluPR
swmn1IMp/RCEnLx5rRZcZnIuA/QkuTUvCzQmZSZZhtI07qU37krdLL12
-----END CERTIFICATE-----
Generated at Thu Apr 6 11:50:55 2023 by rpki-client on console-fra.rpki-client.org