
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: m23+ys9ePXt1N/9aKBCIswYwagiKpqHXYBGci02BnFs=
Subject key identifier: 6E:25:28:56:84:F2:40:AC:E6:61:C0:FF:5E:8E:AE:7E:9D:DC:C9:41
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0196CD98B128DFAD27793FE85D348C2D8A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 03DB
Signing time: Wed 14 May 2025 07:00:58 +0000
Manifest this update: Wed 14 May 2025 07:00:58 +0000
Manifest next update: Thu 15 May 2025 07:00:58 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: /29E6m6wvqENnVxCgUERSyMGW/p7rySx9fh0ymzvDq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:b1:28:df:ad:27:79:3f:e8:5d:34:8c:2d:8a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: May 14 07:00:58 2025 GMT
Not After : May 15 07:00:58 2025 GMT
Subject: CN=6e25285684f240ace661c0ff5e8eae7e9ddcc941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:50:04:6c:e8:9e:4d:a1:d3:45:05:eb:f7:
90:88:02:eb:fa:61:95:8e:0f:33:1f:08:8e:2b:66:
73:64:b7:83:48:12:60:4e:d2:f7:20:5d:98:e1:01:
ae:68:80:8b:c9:54:bf:18:c7:2f:ac:07:80:5d:2f:
b5:1b:e4:72:6a:73:b4:d2:c9:a5:61:4c:15:d9:be:
6f:8e:35:74:82:0a:3f:29:c7:1d:4a:e3:37:cf:6d:
5a:9f:37:4c:84:dc:e4:8c:88:14:40:fd:1c:32:6b:
13:53:26:64:d8:fb:71:4d:4b:7c:02:52:be:3c:9d:
99:ee:e0:1f:dd:3b:58:41:5e:63:b3:9a:a1:cb:36:
94:2c:c9:23:f1:4d:c9:46:05:54:95:93:f6:20:db:
b2:cf:33:0d:48:f1:2e:cc:56:38:0e:85:f7:12:b7:
73:21:50:18:16:90:c7:5e:69:e1:fb:c0:b4:1b:6e:
e8:f4:72:87:ee:a0:3e:19:96:15:bc:93:b7:7e:08:
77:46:aa:fb:45:d5:15:76:e9:4a:3e:33:25:97:6b:
dd:d9:cc:4f:0a:2f:32:db:0c:9e:73:c0:9e:fc:66:
c1:20:e1:e5:44:37:88:fe:84:62:32:e6:d5:83:d8:
5a:30:d6:32:90:ac:40:bc:77:b4:20:87:78:bb:20:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:28:56:84:F2:40:AC:E6:61:C0:FF:5E:8E:AE:7E:9D:DC:C9:41
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:77:f8:d8:5c:64:07:82:ef:e2:34:dd:f9:a7:5e:1b:84:94:
f9:16:64:6e:5e:c9:40:3d:91:41:b5:1a:3d:4c:e1:07:0e:d5:
dc:b8:bb:8c:f4:42:e5:8c:87:ea:bb:cb:fd:f0:35:72:86:f3:
e3:c4:d7:7c:1b:7a:cb:de:86:55:68:e2:15:59:5d:c9:bb:2e:
13:16:1a:a2:fc:ea:01:40:d9:76:04:f5:5e:c9:d1:ad:7c:87:
bf:47:a4:5f:41:c5:15:0a:6a:e6:2c:28:d6:2d:b0:36:a1:0a:
85:30:fb:6b:10:77:61:5c:9b:0a:01:7b:04:91:d5:c1:68:bd:
6c:e4:1c:d3:77:b5:d9:1d:83:57:e4:e8:97:5c:9f:2b:59:dd:
88:ed:7d:e0:33:63:b3:a2:15:b8:5f:84:72:26:83:52:b7:40:
29:e8:18:d2:32:b8:d3:7d:2c:5e:18:f2:3e:bc:09:cd:5e:ba:
f2:f5:be:e4:f4:16:27:dd:4e:7a:48:a8:7f:36:b4:59:c0:b7:
33:38:5c:60:58:24:87:5a:a7:c8:ec:d1:3a:c4:3a:02:bd:bb:
e4:b0:f2:63:d7:14:75:66:50:f4:be:b4:e7:b1:dc:4e:74:25:
da:99:1f:c8:cc:c6:5e:99:86:34:f9:e6:8a:00:d1:62:f3:41:
f1:a3:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:18:28 2025 by rpki-client