Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: HLFggu8ME0hg7HeMxE4JSz2uQngcRZcrg6bduUvVa+8=
Subject key identifier: A7:E8:66:C8:17:A9:46:EE:B8:4B:7C:B4:78:5A:2A:DC:C5:1E:A9:0D
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0197605D76B659703F7408264AE63DE40A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 0427
Signing time: Wed 11 Jun 2025 19:00:27 +0000
Manifest this update: Wed 11 Jun 2025 19:00:27 +0000
Manifest next update: Thu 12 Jun 2025 19:00:27 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: aXoJhyD1x+KOif80IFkoPsv6ykj4mu+mbsDyGo7cmZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:76:b6:59:70:3f:74:08:26:4a:e6:3d:e4:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jun 11 19:00:27 2025 GMT
Not After : Jun 12 19:00:27 2025 GMT
Subject: CN=a7e866c817a946eeb84b7cb4785a2adcc51ea90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:be:c1:83:b1:3d:e0:83:12:92:cd:26:13:
67:40:a7:96:e7:c8:2a:21:aa:08:30:d0:e2:05:c6:
3a:b6:c9:d1:a1:33:a2:3a:c1:24:77:23:2f:e8:d9:
37:ef:ed:e8:e9:0b:3a:b7:4f:f2:53:e2:79:5c:25:
78:90:a6:76:7f:d0:a5:ba:15:73:3e:b4:6b:e3:9d:
e0:07:e3:2c:7e:94:aa:81:2b:58:9b:24:38:96:8c:
c1:21:90:a4:ed:df:8c:57:ff:4a:7d:27:ca:1f:1a:
9d:14:23:29:09:e1:9c:94:05:23:08:77:03:00:c0:
54:d8:66:ff:a3:ca:b7:cc:e8:3d:4d:39:42:8b:c0:
bc:11:e1:a0:b1:ae:fb:0b:6a:10:8a:a5:7d:85:31:
ad:dc:14:2e:61:d3:b1:f0:7e:37:7e:c5:21:ac:07:
64:07:9b:aa:03:7c:52:f5:00:be:ca:88:3e:6c:46:
f5:67:33:f9:c6:f3:bb:3a:6b:6a:5f:3f:5f:0d:bd:
42:f5:42:9f:3a:a9:51:46:66:6d:a0:f4:ee:10:b2:
7e:ac:bf:9f:23:fc:7a:5a:12:d3:d9:14:7a:fb:e5:
4d:a1:fa:a0:d6:50:99:13:80:d4:d7:ee:85:2e:70:
71:88:c2:07:c2:41:f8:dd:45:80:a4:4f:24:20:b3:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:66:C8:17:A9:46:EE:B8:4B:7C:B4:78:5A:2A:DC:C5:1E:A9:0D
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bd:31:67:52:84:34:d9:85:1f:c3:63:dc:f9:3c:90:a7:7f:
38:a8:b1:7c:52:38:0d:88:57:33:2a:98:41:92:5f:95:fd:fc:
a0:d4:4c:30:77:27:80:d4:69:c5:e9:b1:b3:d2:27:32:94:2e:
98:76:95:55:cc:c6:ac:54:9f:94:08:b8:30:ce:e0:39:95:9c:
6b:0c:63:9c:d4:3f:44:99:a0:39:fb:1a:cf:c1:43:24:80:b2:
e7:dc:76:71:d4:00:e3:2d:58:72:7e:e1:62:a9:72:d0:d9:4a:
e3:76:a5:5b:60:0a:75:12:68:91:e1:aa:88:2d:93:fb:a8:3e:
0f:b5:8c:3a:78:6e:3f:1b:2c:5e:74:9f:24:57:ef:85:76:16:
d9:8f:1f:1d:a7:9d:9d:ed:e6:da:94:3a:c7:d0:44:ee:ef:62:
9b:cf:70:ef:21:30:7f:a1:04:a3:2c:7a:0c:07:ae:d5:73:f7:
80:ce:17:e2:2c:91:15:5f:14:2d:27:de:f5:be:45:59:6c:f9:
fa:d5:d5:90:6b:15:0c:1c:86:b1:c0:77:ca:30:87:be:be:8b:
84:41:da:54:16:1a:61:d8:81:1b:75:53:8e:2d:9d:01:4b:ba:
83:de:ec:68:63:ef:68:ee:49:e6:ad:4b:84:ed:ba:4b:4f:ff:
6b:7a:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:19:20 2025 by rpki-client