Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: g+FUcpNz2gu72HamgWNcYRPNffeZ9+wCTy9aBnPIL6c=
Subject key identifier: 4D:55:CF:01:C8:57:73:C4:D5:8A:47:FC:2B:53:68:EC:BB:3A:CE:69
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 01967D8E7F0E4643DBC77549740AAC708BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 1258
Signing time: Mon 28 Apr 2025 18:00:12 +0000
Manifest this update: Mon 28 Apr 2025 18:00:12 +0000
Manifest next update: Tue 29 Apr 2025 18:00:12 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: bb03Pkz9Ti+VQiHhNKiPHN8aYh5Du0A54naalbPLP5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:7f:0e:46:43:db:c7:75:49:74:0a:ac:70:8b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Apr 28 18:00:12 2025 GMT
Not After : Apr 29 18:00:12 2025 GMT
Subject: CN=4d55cf01c85773c4d58a47fc2b5368ecbb3ace69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:d6:d6:1a:5a:85:1b:df:ac:db:b4:88:e0:
54:c6:94:d2:93:5b:b5:d7:35:83:7f:54:5f:33:0e:
2a:fd:c7:b4:07:5f:2d:79:7c:e5:38:fc:74:34:6b:
2a:62:39:61:5e:4b:9d:45:02:af:29:00:61:4b:19:
16:d0:8e:c1:a5:23:8e:15:c7:59:27:4c:b2:e4:63:
87:8a:bf:e7:59:82:e4:75:c1:22:75:40:f5:c4:89:
fe:06:cd:9d:a9:3e:0d:e1:83:a2:4c:f9:f2:1e:15:
1c:ce:f8:d6:53:c4:99:a8:bf:d4:45:57:f0:45:77:
a5:7e:52:f0:0d:5d:71:e9:5f:5f:14:1a:a6:e2:53:
0e:7a:b6:84:d5:35:e8:ae:c5:52:e4:57:80:a9:80:
e3:ed:0d:ff:b8:e5:13:9e:15:67:7d:3c:34:39:9e:
b8:fb:a5:38:82:24:1a:f1:26:59:5e:b5:be:5d:4d:
19:82:76:d0:00:62:da:bf:f0:62:8c:0a:ff:68:56:
0b:6d:64:1e:12:b8:d8:51:25:d8:90:77:36:7c:e4:
f2:e8:bb:6e:4f:51:ba:ba:63:a5:4a:d1:16:f3:ea:
43:cc:85:d1:a2:d8:3a:08:27:b3:69:49:8d:89:f0:
18:37:15:ad:00:a6:7f:2e:51:27:47:d2:dc:50:0e:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:55:CF:01:C8:57:73:C4:D5:8A:47:FC:2B:53:68:EC:BB:3A:CE:69
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4e:26:34:72:89:4e:ca:04:7a:6e:1f:79:95:26:d2:9d:ff:
4a:e4:67:06:28:33:28:64:83:6f:64:79:f8:b3:52:4c:6d:f5:
19:f0:ea:62:18:6f:11:3d:9d:be:ba:d9:86:35:07:a5:27:1f:
e9:34:5d:ea:58:5f:a2:b6:93:1e:fe:b2:bc:d6:b4:cd:6b:f0:
ac:c4:43:79:0a:ba:43:d2:8f:d7:76:75:36:49:cf:06:cf:3e:
3d:7d:18:f1:5e:b0:c9:db:46:9b:91:68:e7:ad:b2:7c:a4:d9:
1c:a4:74:c7:1c:91:20:5d:a2:91:d8:49:aa:07:fc:d0:fa:ce:
4b:55:18:69:12:b8:f9:eb:bd:b6:f9:c2:80:78:0a:8b:e8:bd:
79:23:ad:ee:54:eb:04:34:48:38:72:67:ab:e4:07:13:46:f6:
cb:a0:16:42:49:aa:bb:df:49:3b:d5:69:04:43:27:92:3f:ea:
78:86:18:15:30:5c:30:c0:30:73:0c:59:06:6e:47:6c:6f:70:
9f:12:2b:a7:c0:0c:ef:d4:f2:94:f2:3a:a8:ff:ff:d5:43:df:
64:34:95:cc:20:e3:1d:9a:1f:60:18:c2:66:54:9b:e2:2d:59:
80:c4:61:bf:99:84:8f:05:13:e7:4e:94:32:dd:f6:6a:54:6e:
1c:37:ff:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jn8ORkPbx3VJdAqscIvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw
ZGU5YjQwHhcNMjUwNDI4MTgwMDEyWhcNMjUwNDI5MTgwMDEyWjAzMTEwLwYDVQQD
Eyg0ZDU1Y2YwMWM4NTc3M2M0ZDU4YTQ3ZmMyYjUzNjhlY2JiM2FjZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooDW1hpahRvfrNu0iOBUxpTSk1u1
1zWDf1RfMw4q/ce0B18teXzlOPx0NGsqYjlhXkudRQKvKQBhSxkW0I7BpSOOFcdZ
J0yy5GOHir/nWYLkdcEidUD1xIn+Bs2dqT4N4YOiTPnyHhUczvjWU8SZqL/URVfw
RXelflLwDV1x6V9fFBqm4lMOeraE1TXorsVS5FeAqYDj7Q3/uOUTnhVnfTw0OZ64
+6U4giQa8SZZXrW+XU0ZgnbQAGLav/BijAr/aFYLbWQeErjYUSXYkHc2fOTy6Ltu
T1G6umOlStEW8+pDzIXRotg6CCezaUmNifAYNxWtAKZ/LlEnR9LcUA6ekQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1VzwHIV3PE1YpH/CtTaOy7Os5pMB8GA1UdIwQY
MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt
NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi
LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk4mNHKJ
TsoEem4feZUm0p3/SuRnBigzKGSDb2R5+LNSTG31GfDqYhhvET2dvrrZhjUHpScf
6TRd6lhforaTHv6yvNa0zWvwrMRDeQq6Q9KP13Z1NknPBs8+PX0Y8V6wydtGm5Fo
562yfKTZHKR0xxyRIF2ikdhJqgf80PrOS1UYaRK4+eu9tvnCgHgKi+i9eSOt7lTr
BDRIOHJnq+QHE0b2y6AWQkmqu99JO9VpBEMnkj/qeIYYFTBcMMAwcwxZBm5HbG9w
nxIrp8AM79TylPI6qP//1UPfZDSVzCDjHZofYBjCZlSb4i1ZgMRhv5mEjwUT506U
Mt32alRuHDf/IQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:30 2025 by rpki-client