Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: OZgIMd2se/w/1do8uxtwo2UL0LMJF+zSluCdiUl1QEM=
Subject key identifier: 02:EA:9F:82:66:90:E6:3C:C4:60:10:45:79:E9:0C:47:86:22:F4:9C
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 019A4EF5166EDEEB2CD95F2CE063B0DDE439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 1452
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: JcJhRs5unfawppRDcf11pjgjcxHQ3Shah/d8Upt8jYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:16:6e:de:eb:2c:d9:5f:2c:e0:63:b0:dd:e4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=02ea9f826690e63cc460104579e90c478622f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:53:31:04:f2:dd:10:ee:d6:8c:98:1e:66:
7a:b9:e4:d3:ed:41:94:cb:25:fc:9b:f9:24:96:7c:
60:60:93:41:96:2b:f1:72:0f:cb:cf:7a:cb:0d:3a:
56:d8:75:6e:71:17:2c:ee:14:bf:de:3b:03:b5:51:
33:e0:a7:6f:95:67:c2:7a:9c:30:b3:20:5e:5c:56:
2d:fe:a3:e5:a1:7b:8c:0a:7b:07:ce:03:db:13:90:
55:5b:bb:b2:2b:fd:9b:6f:11:87:c4:d5:bf:44:9b:
57:37:85:a8:63:d7:0e:79:7a:de:73:81:43:7b:24:
5a:fd:b4:eb:c7:c1:2e:32:4a:23:62:df:f6:b1:59:
61:0a:be:68:c6:37:e8:5d:a2:b9:5e:18:f4:21:49:
0a:b0:d5:27:67:a4:e3:63:78:bc:b2:96:e3:02:d7:
91:ae:92:c4:9d:89:80:96:a6:f1:d6:88:61:76:a6:
99:ce:40:8b:44:d8:de:77:bb:a1:ca:e8:bc:29:cd:
1e:14:03:f7:8e:47:6f:a4:3e:17:cf:2f:ff:ba:39:
6c:17:b8:e9:81:0a:43:72:c9:a1:6c:4b:1f:ba:43:
be:8d:aa:8a:a2:e1:dc:94:f2:a5:44:ee:83:da:72:
aa:5a:8e:bb:5b:db:1b:c5:eb:63:ad:20:24:84:37:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:9F:82:66:90:E6:3C:C4:60:10:45:79:E9:0C:47:86:22:F4:9C
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:e4:81:fd:34:d6:ed:97:2d:12:3c:01:af:b9:a1:31:b4:
25:60:4d:22:16:93:cb:8e:dc:98:fb:ff:83:57:a0:b1:2c:68:
ba:23:ef:24:9a:90:59:52:51:a5:ed:89:57:99:c5:60:2f:02:
c6:40:fe:3e:8c:05:4b:1b:74:88:71:24:6d:e0:28:52:c3:50:
89:9e:5f:5b:16:cb:e7:fb:46:4b:fc:95:65:de:04:b7:10:1b:
3d:5b:de:40:8b:a1:24:9b:5a:55:86:41:71:fa:b7:40:4f:79:
37:09:d2:5a:e3:07:40:08:e1:d4:f5:41:f5:cf:90:54:55:43:
bc:4a:06:e2:8f:58:df:61:c1:fc:f0:40:cb:34:5d:f3:3d:0d:
a0:b5:50:0c:0b:14:b3:61:a3:b2:b0:cf:e1:ef:8d:64:0b:e7:
d8:ac:02:23:be:96:16:78:bf:b3:26:c2:82:f8:74:99:d5:aa:
0f:37:ca:1e:b0:22:53:e8:91:b2:03:00:bb:2d:46:fe:46:ba:
7a:91:d1:da:77:ff:9b:50:f5:42:77:60:f8:5b:83:92:02:3d:
f6:cd:18:8a:87:76:52:10:3b:05:e2:33:77:73:47:f3:a4:04:
3d:d4:68:79:55:25:d2:84:8d:6b:1c:1f:b5:61:51:0f:5d:62:
48:a9:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:30 2025 by rpki-client