Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: u28ejPJOs5nneua+O95XI0/XSuPXXw/P1UpOOWHF/n0=
Subject key identifier: DE:00:B2:3D:7A:3A:99:54:86:CB:DD:86:4C:F3:72:5C:AC:F2:49:05
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019873E2673B5F5D795B108213268F8532BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 135C
Signing time: Mon 04 Aug 2025 07:01:14 +0000
Manifest this update: Mon 04 Aug 2025 07:01:14 +0000
Manifest next update: Tue 05 Aug 2025 07:01:14 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: w82K919u9qsH9VsQBY/lv1vlsVeQJjgAlDmPC17Nf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:67:3b:5f:5d:79:5b:10:82:13:26:8f:85:32:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Aug 4 07:01:14 2025 GMT
Not After : Aug 5 07:01:14 2025 GMT
Subject: CN=de00b23d7a3a995486cbdd864cf3725cacf24905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:0c:fe:95:c2:46:de:f3:fd:79:12:c3:63:
00:93:c1:a1:79:a8:5c:3c:ab:24:eb:91:39:0b:80:
9c:9f:ba:3d:80:67:8b:42:7a:47:fb:d4:5b:56:92:
8b:f8:31:51:62:b4:bb:6f:7a:16:73:c6:0e:09:d1:
3c:7a:5b:a3:77:1d:20:71:2c:1e:76:10:17:f5:47:
90:e3:be:5b:71:77:0c:53:16:0d:a3:29:14:f4:35:
80:9c:fe:89:2d:b9:94:9e:cd:01:aa:9c:ab:a2:79:
13:86:c9:db:16:1f:2d:cf:00:02:0a:f6:42:0b:8e:
18:06:b7:37:d8:14:5d:05:ef:97:1a:86:62:50:b3:
5f:5c:0e:32:e0:18:57:e8:35:83:7b:fa:59:08:b1:
29:d1:99:c6:34:21:3b:db:55:9e:85:c0:e7:5d:59:
ca:0a:4b:eb:02:eb:17:9f:0b:5a:4f:39:7e:72:ce:
c9:56:26:e2:95:f0:8e:33:3f:dc:ac:70:e0:a3:88:
93:58:f6:eb:7b:75:84:7a:82:09:d0:a9:91:63:33:
9a:15:f6:87:a3:ea:d3:af:23:80:0f:2c:6e:f2:1a:
ad:b9:52:86:e3:78:0f:36:c2:6f:56:6b:21:c1:0d:
e0:f6:87:7a:10:d6:a0:bf:5b:82:f1:cc:25:c4:05:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:B2:3D:7A:3A:99:54:86:CB:DD:86:4C:F3:72:5C:AC:F2:49:05
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:30:84:99:7d:42:e9:36:82:e3:76:a4:bb:de:ca:bd:10:2d:
cd:8e:c3:18:50:97:41:6d:c0:36:d3:65:80:f1:ad:86:0c:e9:
8c:7f:0a:cf:0b:dc:04:54:f2:42:2e:ca:58:ec:5a:65:fd:b6:
7b:4d:45:dc:c4:67:b1:a8:99:01:45:dc:b3:28:e7:1c:bf:af:
ee:60:ff:cb:e6:11:7c:b4:e2:ae:9a:cc:a7:4f:82:1d:f1:0b:
a5:c2:cb:26:d3:df:23:f1:0c:2d:f2:74:cf:2d:09:34:ed:00:
70:a4:c1:91:81:12:35:9b:ac:f1:6e:d9:25:b2:ca:f9:9d:68:
85:68:4c:d1:b3:48:08:69:5f:51:2b:12:4a:b8:98:57:20:85:
5a:43:2e:e1:99:0e:d7:30:38:2a:1f:9f:a0:e8:2f:e8:11:1c:
3f:35:b6:94:b6:70:a8:fb:c6:d0:48:59:cb:03:88:b6:63:47:
8a:fe:1f:70:dd:18:a9:3c:ae:84:6b:cb:c6:6c:ca:22:ea:94:
3a:05:6b:96:61:a0:db:ce:4c:f0:9c:b0:f8:f0:ef:3f:1d:6f:
e0:43:e4:54:fa:6b:42:de:be:32:22:0c:73:38:85:e6:2a:ce:
3f:68:53:e4:4f:76:1b:74:51:cb:06:7f:96:67:5d:1d:3b:f4:
c8:2c:1c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4mc7X115WxCCEyaPhTK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWZhMzdiZDBkZGFkZWI3ZmVhMmI5YmU2NGIxMTA4ZTIw
ZGU5YjQwHhcNMjUwODA0MDcwMTE0WhcNMjUwODA1MDcwMTE0WjAzMTEwLwYDVQQD
EyhkZTAwYjIzZDdhM2E5OTU0ODZjYmRkODY0Y2YzNzI1Y2FjZjI0OTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY0M/pXCRt7z/XkSw2MAk8Gheahc
PKsk65E5C4Ccn7o9gGeLQnpH+9RbVpKL+DFRYrS7b3oWc8YOCdE8elujdx0gcSwe
dhAX9UeQ475bcXcMUxYNoykU9DWAnP6JLbmUns0BqpyronkThsnbFh8tzwACCvZC
C44YBrc32BRdBe+XGoZiULNfXA4y4BhX6DWDe/pZCLEp0ZnGNCE721WehcDnXVnK
CkvrAusXnwtaTzl+cs7JVibilfCOMz/crHDgo4iTWPbre3WEeoIJ0KmRYzOaFfaH
o+rTryOADyxu8hqtuVKG43gPNsJvVmshwQ3g9od6ENagv1uC8cwlxAV0EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4Asj16OplUhsvdhkzzclys8kkFMB8GA1UdIwQY
MBaAFLWvo3vQ3a3rf+orm+ZLEQjiDem0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYt
NWE5NWNjODBjZDFiLzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84YmFhOWMtMGVmMi00MmZiLWIzZDYtNWE5NWNjODBjZDFi
LzEvdGEtamU5RGRyZXRfNml1YjVrc1JDT0lONmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajCEmX1C
6TaC43aku97KvRAtzY7DGFCXQW3ANtNlgPGthgzpjH8KzwvcBFTyQi7KWOxaZf22
e01F3MRnsaiZAUXcsyjnHL+v7mD/y+YRfLTirprMp0+CHfELpcLLJtPfI/EMLfJ0
zy0JNO0AcKTBkYESNZus8W7ZJbLK+Z1ohWhM0bNICGlfUSsSSriYVyCFWkMu4ZkO
1zA4Kh+foOgv6BEcPzW2lLZwqPvG0EhZywOItmNHiv4fcN0YqTyuhGvLxmzKIuqU
OgVrlmGg285M8Jyw+PDvPx1v4EPkVPprQt6+MiIMcziF5irOP2hT5E92G3RRywZ/
lmddHTv0yCwc0A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:19 2025 by rpki-client