Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: xU7yCe7StWGfN1uYzhk6kuUwFRmDVcIcCGRpoSqlmXw=
Subject key identifier: 38:B0:F0:02:B3:1B:EE:F2:59:BE:1A:B5:82:08:48:2C:76:2F:59:79
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0199FC8F4DBB0036CBAE2ADD1D110F44A054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 0581
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: +BdCRc1Ir30kcGtMKc6Bhs4PJ5tyNbky9Kvxw3cOIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4d:bb:00:36:cb:ae:2a:dd:1d:11:0f:44:a0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=38b0f002b31beef259be1ab58208482c762f5979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:02:ba:90:4c:f1:b1:be:0d:cd:4c:e4:29:
36:72:31:6e:70:e7:ce:fc:c4:75:e4:62:f0:24:53:
e7:1d:3a:bf:4e:2f:fe:d6:02:f1:9a:4d:50:7a:d2:
3d:27:d9:7e:fb:ea:6e:b7:38:dc:0d:35:bf:4d:5d:
f1:c9:98:2d:a1:7c:dd:2d:26:c3:e5:ea:52:27:ff:
fb:2d:28:71:fc:49:d9:6b:93:65:27:a4:30:aa:77:
29:35:d6:1b:b9:60:6b:7d:4d:32:32:19:ee:e0:2f:
97:b2:6d:ef:a7:68:f1:3d:4c:4e:7e:d6:8e:d8:cb:
21:e5:9b:62:30:c8:8f:fb:57:e4:db:37:23:57:ea:
0c:86:d4:ed:1b:cf:0f:14:a9:c0:b6:98:58:ab:41:
a2:09:35:1f:a5:71:5a:51:1b:11:99:0c:fb:bb:5d:
8c:ba:8b:22:a4:87:d5:8a:52:7e:5c:f6:dd:c3:c3:
5d:5b:ec:fc:24:0e:82:45:32:5a:e0:9a:5f:fc:30:
5a:34:d7:91:e9:14:b2:da:31:9c:ba:18:5b:15:e6:
38:1a:73:c3:d2:f4:f3:bc:44:a3:bf:1c:2b:c9:dd:
b0:87:d1:fe:42:03:af:8a:05:7e:14:42:fb:f3:68:
9a:28:a0:cf:da:af:0c:de:16:da:20:e9:fe:bf:7c:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B0:F0:02:B3:1B:EE:F2:59:BE:1A:B5:82:08:48:2C:76:2F:59:79
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:61:7b:fc:6d:7c:c4:a1:e5:37:32:08:ad:24:60:dd:6f:b9:
00:a2:40:8b:c0:dd:e7:31:22:63:da:0d:2c:b8:81:37:61:31:
9c:eb:ab:d6:3a:87:d8:72:29:13:d2:98:4d:fe:7a:b3:80:4d:
7a:25:de:94:23:dc:a6:7a:dc:cc:48:e2:18:8d:7d:b0:ab:c7:
59:99:d2:7d:f2:32:31:bb:70:a3:3e:b1:2d:75:56:f2:4c:6d:
60:4b:24:4a:16:50:f2:c2:04:68:17:2e:3f:b2:c6:ac:55:e5:
46:29:2e:ff:26:56:4c:04:58:a7:f6:de:64:89:7e:13:30:c7:
4a:75:87:67:e1:3c:dc:0e:21:09:f1:6a:73:88:15:6e:a1:cd:
d2:dd:52:40:8f:29:59:9c:20:57:50:b7:7d:3b:72:94:ad:15:
c2:49:2f:24:05:2d:0a:ae:73:cf:20:dd:e3:cc:54:7f:7a:24:
60:78:45:5c:e1:cd:fe:b0:1c:ab:a7:54:aa:93:35:74:7f:80:
26:d1:e0:a4:1b:c8:46:22:a2:62:61:ec:c5:03:86:b9:c6:8e:
96:5c:13:d7:5d:e7:88:2f:a5:39:cc:e3:8c:6e:28:83:5d:03:
b7:9e:e3:e8:23:4f:35:8f:44:0b:29:f0:e5:0e:a2:5d:c8:71:
eb:c9:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:28 2025 by rpki-client