Manifest
$ rpki-client -vvf rpki.ripe.net/repository/ripe-ncc-ta.mft
File: ripe-ncc-ta.mft (raw, json)
Hash identifier: mZL/u49Eg9w5qmRn3C5qR5zVuO89iy8DEf74ga/Fk8M=
Subject key identifier: BD:B8:CF:43:6B:62:3F:21:63:68:D2:A6:B9:C6:44:FE:AF:3A:72:3F
Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
Certificate issuer: /CN=ripe-ncc-ta
Certificate serial: 0111
Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject info access: rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
Manifest number: 4F
Signing time: Wed 25 Sep 2024 12:47:32 +0000
Manifest this update: Wed 25 Sep 2024 12:47:32 +0000
Manifest next update: Wed 25 Dec 2024 12:47:32 +0000
Files and hashes: 1: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (hash: 4vPvaiNMNgKAmG1xoKzJXvd9Yaxeg1WZD3LUS+ce6D8=)
2: ripe-ncc-ta.crl (hash: 5wErynlAJz5T6VMWHoMJnf8XU7BnC+gBsHY22yIwz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Dec 2024 12:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ripe-ncc-ta
Validity
Not Before: Sep 25 12:47:32 2024 GMT
Not After : Dec 25 12:47:32 2024 GMT
Subject: CN=bdb8cf436b623f216368d2a6b9c644feaf3a723f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:90:a8:12:a3:02:b2:fb:6c:4c:25:11:40:
c8:59:1d:fd:62:90:91:3d:ee:29:e1:be:23:f5:02:
03:53:4b:73:b9:c5:dd:b3:05:e4:df:99:21:f5:b5:
26:25:ad:15:71:68:1b:28:89:a1:6f:d9:21:6f:f5:
d1:0e:ed:b5:94:a2:c8:ad:40:b0:be:87:7c:bf:e4:
b9:6e:b8:e1:57:43:0b:79:93:cb:81:3f:c7:c6:7f:
29:87:a8:1a:5b:ae:df:1a:72:8f:9d:db:7d:22:e4:
95:fd:7d:6d:8a:03:64:a0:b3:be:bd:c1:31:e9:cc:
f5:e5:a3:c6:19:e8:60:a8:fc:37:3d:fe:bf:ba:5f:
f9:f5:72:59:0e:bb:b6:cf:95:35:3c:91:fa:b8:6a:
2f:cd:da:c9:7b:59:7b:cd:7b:ed:c0:f6:5a:7c:15:
eb:76:43:04:4a:07:19:7b:ad:11:66:8b:73:64:92:
a8:7c:41:7e:86:be:d9:bf:f7:51:d8:a7:69:a0:a7:
42:43:db:7b:c9:4d:87:8f:17:2f:0c:e3:25:47:1b:
12:23:42:1e:91:bd:20:01:dd:93:2a:d9:4f:d2:5e:
8f:1a:08:57:86:d3:ad:72:62:cd:5a:69:32:b5:af:
ef:7b:47:0e:90:6b:8b:c8:e5:14:2d:ae:93:87:1a:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:CF:43:6B:62:3F:21:63:68:D2:A6:B9:C6:44:FE:AF:3A:72:3F
X509v3 Authority Key Identifier:
keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c0:a5:cf:de:8f:f6:30:e9:a3:ca:17:04:ab:6d:d9:41:1a:
be:2c:23:67:0f:f5:e5:29:c4:6b:6f:51:a8:10:9f:8e:69:7f:
7c:6e:ec:65:b7:f6:13:3d:37:c0:2a:8d:ec:ab:af:cc:16:ce:
2e:a8:34:3e:54:49:66:9e:33:7c:ae:61:fd:db:c0:28:7d:18:
b6:21:d0:d2:90:68:9c:3e:d9:9d:64:cd:f4:0c:61:6b:f0:77:
a3:d7:a3:01:38:1b:6c:6b:bf:b2:0e:52:dd:d0:fe:c6:0c:27:
d3:64:92:c9:c7:5a:9e:48:be:d7:cf:18:22:1a:dc:47:c3:5a:
11:d8:05:f5:28:38:3e:89:1c:b7:12:b9:31:9c:56:01:48:0f:
87:12:04:38:8a:a3:d4:d3:ff:e4:5d:72:e6:7c:16:a4:5c:17:
28:eb:03:af:9b:e2:a8:86:6c:9f:c6:21:cb:2b:05:d0:9c:96:
44:b0:68:19:76:87:3b:20:a2:83:61:c7:70:9e:90:27:b7:e8:
25:cb:21:04:65:5c:6a:d1:b4:6b:e4:79:16:bd:4d:8a:29:ce:
0e:41:3b:2a:34:51:c2:3a:63:ae:4c:f5:fd:6f:cf:1c:de:74:
be:d0:b6:95:e9:85:5f:09:7f:39:b5:2c:b1:b7:f4:3b:fe:74:
d1:7c:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 18:36:13 2024 by rpki-client on console.sobornost.net