
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: qe339m8Ch3HtkIayb+qY4njHUdyKzBO9e9JbJ+EIr70=
Subject key identifier: 49:65:F6:F3:B2:85:97:17:62:EC:7C:EC:40:65:88:AC:66:C7:FE:22
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0197CC83E2C3570F84EDE2E2CDCD487C1CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 045F
Signing time: Wed 02 Jul 2025 19:01:24 +0000
Manifest this update: Wed 02 Jul 2025 19:01:24 +0000
Manifest next update: Thu 03 Jul 2025 19:01:24 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: nrVSyI3lZPg/H3sMeZQ9f/TRawig2v1hA5cLbc+isHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:e2:c3:57:0f:84:ed:e2:e2:cd:cd:48:7c:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jul 2 19:01:24 2025 GMT
Not After : Jul 3 19:01:24 2025 GMT
Subject: CN=4965f6f3b285971762ec7cec406588ac66c7fe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:54:31:38:54:da:91:2a:92:9f:26:71:55:
73:d4:77:2c:40:44:8c:a7:e2:3f:84:50:27:6f:8b:
1f:ab:30:4e:24:3a:e7:60:62:8e:02:93:2e:4c:bd:
ab:d0:08:25:ab:0e:81:88:5b:98:b5:20:dd:df:05:
94:45:d8:ce:27:15:1c:ff:c8:2c:c1:f4:55:c9:82:
d1:23:32:e4:a6:ce:25:02:10:06:08:1d:8c:22:a5:
ae:09:1a:11:ab:43:e9:d5:35:97:4f:5b:4c:e1:d1:
dd:2d:77:39:9a:ce:4b:c4:f0:45:50:7b:aa:20:70:
f9:c2:13:97:3c:14:51:68:59:29:54:51:ed:cb:69:
41:dd:48:03:01:29:06:9d:3e:18:00:23:33:0c:bb:
06:b7:a5:93:e5:27:40:01:aa:e5:47:f4:40:f0:81:
31:87:f6:9c:62:da:bb:ed:e0:6f:6a:f5:d1:7f:91:
3e:c7:f9:5a:de:7e:32:36:df:0b:35:6b:30:9d:d4:
b6:d1:a7:d1:5c:ce:73:a1:d7:a9:0d:86:8b:6a:e1:
f6:17:2c:e5:8e:f6:9b:fa:9a:e7:1a:c3:ed:93:42:
e6:87:aa:4c:4d:10:30:bc:8d:c3:dc:83:fc:ce:0d:
97:12:01:07:df:1f:e1:2a:56:4a:c2:0d:50:4f:4f:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:F6:F3:B2:85:97:17:62:EC:7C:EC:40:65:88:AC:66:C7:FE:22
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:46:0a:71:55:e8:aa:c7:d2:3a:6d:a6:7d:95:b9:d7:ec:5c:
e8:bc:69:56:22:d6:4c:c5:6a:bf:f0:71:de:13:4f:98:f5:28:
09:09:21:49:54:7c:9f:6b:0e:86:d2:5e:c7:c3:3a:ff:4c:19:
49:6e:ba:8a:ea:7a:e7:ad:b5:4c:39:2b:29:69:c0:95:a0:3a:
a4:83:3f:17:50:11:4f:6e:33:f0:c3:6e:e1:b8:e1:eb:ac:3f:
a9:b2:02:59:a2:95:f9:8e:f1:55:18:f5:a1:27:64:e4:d9:48:
ac:ff:b8:40:ed:28:93:2c:f0:c6:9d:db:60:0c:c6:66:58:56:
49:e2:1c:1d:5e:b7:e4:88:3f:98:3a:96:74:0a:8a:cc:03:a2:
55:57:dc:16:c7:ec:f7:b7:82:12:e8:48:99:3b:c1:79:3b:c5:
21:03:50:51:14:a0:25:20:d7:0b:f4:63:ec:fc:e3:4b:d8:3a:
ca:47:0f:05:1e:bc:4b:eb:7b:89:d6:59:ea:b8:94:67:2a:32:
9e:02:89:2d:dc:be:60:df:c7:d5:5d:41:79:6a:b9:5b:e3:73:
e8:d9:db:a2:95:7c:71:dd:99:60:7f:af:82:fe:44:0c:b4:b2:
a0:d2:6c:8f:d5:c7:31:6b:18:c2:8e:e9:f7:cd:30:78:44:40:
6a:a6:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:55:45 2025 by rpki-client