
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: nPpwYfnI3NTOvb2kVuJmgGtSd0GpSoiTQQwbWeOpIoc=
Subject key identifier: E0:45:AF:29:A6:FF:2F:AB:8A:4A:43:73:C2:FD:1E:3A:E3:2E:94:DF
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 019768173A50C05B9B5A7F443541F106967F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 042B
Signing time: Fri 13 Jun 2025 07:00:42 +0000
Manifest this update: Fri 13 Jun 2025 07:00:42 +0000
Manifest next update: Sat 14 Jun 2025 07:00:42 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: opNGfuLRQYDabv6+izoytyE9cFNJZtsc4whPs3tGqdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:3a:50:c0:5b:9b:5a:7f:44:35:41:f1:06:96:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jun 13 07:00:42 2025 GMT
Not After : Jun 14 07:00:42 2025 GMT
Subject: CN=e045af29a6ff2fab8a4a4373c2fd1e3ae32e94df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a6:ae:15:b6:e0:01:e7:fb:b8:71:51:2a:87:
07:c8:ad:1e:06:47:e0:f5:a3:d9:3b:84:c5:c2:fd:
16:1b:52:d8:22:5e:de:75:ee:51:78:ba:ec:ad:eb:
de:d8:6a:58:27:3b:c6:32:c2:20:3f:f9:43:ed:a7:
d9:73:69:fa:c5:dc:f1:88:e1:9f:4a:2d:7d:d8:b0:
f6:cd:66:a9:10:67:82:be:55:33:5e:15:7c:b7:e9:
8f:d4:99:72:f7:89:be:29:ae:9b:69:e0:7c:fd:b9:
f1:98:49:54:48:4e:09:a6:00:af:ec:1b:90:9e:1d:
50:24:d1:cb:1e:12:96:2c:75:06:80:2e:11:5d:00:
ec:ea:d0:d2:87:8d:14:e8:8e:84:35:f2:7f:d2:ae:
7f:4b:d2:00:a5:31:a7:56:69:c5:1a:2d:64:ca:7c:
f5:b8:c0:76:c8:a7:2b:b2:af:dd:24:7b:40:c5:d6:
14:7d:ee:06:29:18:48:f4:ea:11:03:4f:47:b0:3e:
1e:3f:b3:08:82:23:e9:57:ac:7d:27:7c:c3:c9:4b:
5c:1d:db:0d:ec:75:61:db:34:5d:7c:b9:b1:7d:80:
6c:a2:5a:c7:fa:bb:6b:8d:50:ba:a0:b0:b7:f4:d2:
15:c1:57:d4:db:d1:60:93:66:d7:ba:1a:5b:cb:14:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:AF:29:A6:FF:2F:AB:8A:4A:43:73:C2:FD:1E:3A:E3:2E:94:DF
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:54:a8:68:21:5c:52:73:8b:e3:34:93:0d:ad:64:96:82:
67:b9:6e:2c:6a:86:63:63:bd:1f:16:41:99:d6:c9:bc:39:76:
ac:83:7a:c0:73:25:44:a0:12:d7:7f:13:41:8d:c3:ce:7b:4f:
29:88:82:a1:5a:7e:2b:6b:15:42:51:7b:c7:38:46:55:f6:f1:
50:6e:a4:7b:ed:f1:9e:3f:d9:66:07:6a:b3:e5:02:7a:bc:f1:
fe:3d:20:85:ef:d4:ec:cb:fa:ea:95:2e:d8:df:60:25:04:14:
51:8c:6f:92:3f:a8:c1:f4:cc:a6:79:34:b9:62:88:40:47:72:
16:dd:3f:b5:d6:d7:66:01:56:fd:de:a8:36:4b:38:cf:9c:33:
39:6f:6f:c6:bb:e7:d1:5a:cd:b0:ba:21:38:c1:36:a1:74:86:
b0:ae:d9:48:1e:25:ba:35:3d:db:f8:35:b9:71:9d:82:74:ac:
55:7d:73:3b:cf:e0:65:a5:c5:b3:c8:b6:8d:51:7a:a0:13:c8:
2a:d9:a2:b7:42:6d:d2:e3:be:1a:28:98:25:02:c7:99:d6:49:
ab:11:d8:63:69:b7:f4:5c:66:24:73:57:de:fe:29:2e:43:07:
c8:eb:5e:c3:27:d0:23:09:b9:f2:94:f2:ce:b2:39:08:93:f4:
bf:18:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:14:31 2025 by rpki-client