
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: 20f4sUX72rbhFVV0km8OXlAGyX5HlkgefKMUP6d+yV0=
Subject key identifier: 95:F9:05:07:7B:79:D4:0A:77:9B:A0:39:00:C2:FF:49:BA:BE:3E:57
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 019773AD7D657AAA7C4DC74C75009810B038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 0431
Signing time: Sun 15 Jun 2025 13:00:38 +0000
Manifest this update: Sun 15 Jun 2025 13:00:38 +0000
Manifest next update: Mon 16 Jun 2025 13:00:38 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: VxjfPlOuIH+D9rh6EUX/GUWa4EzZX62nvEa3JU4HlCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:7d:65:7a:aa:7c:4d:c7:4c:75:00:98:10:b0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jun 15 13:00:38 2025 GMT
Not After : Jun 16 13:00:38 2025 GMT
Subject: CN=95f905077b79d40a779ba03900c2ff49babe3e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:38:fc:a9:a8:08:5e:f9:4a:16:76:4f:95:
d9:8d:75:20:ec:7c:67:6d:a5:5d:06:c9:e1:5a:38:
78:d5:af:8e:66:6c:30:bc:15:20:7e:1d:ce:cf:93:
53:c0:96:06:ef:6f:2d:b7:d5:f8:d4:58:81:de:b4:
bc:25:62:ae:d3:51:8b:1d:bd:d5:2e:8f:bf:c1:6c:
a6:9d:ff:ae:33:bd:97:44:30:90:af:6b:c6:93:67:
4a:af:c2:7d:14:ab:91:62:23:69:13:23:ef:aa:3e:
27:ff:ec:59:5f:63:b6:47:f6:34:09:4e:09:d0:4d:
3e:2b:e5:fd:d4:80:4e:ae:3a:6c:c2:8b:22:4a:8d:
03:6d:98:43:2a:70:56:be:3a:0d:e5:61:46:22:6a:
5c:6f:5e:93:f9:f9:48:42:74:f0:27:bb:e4:20:f2:
e6:70:d4:0c:a2:8c:f2:8e:5d:2f:e1:d2:ba:b4:f6:
16:c1:83:98:71:8a:b6:de:73:0e:e7:ba:a8:3d:5e:
79:1f:94:e8:47:8a:8b:c0:38:87:f8:c8:a3:af:0d:
26:ec:f5:60:c0:62:47:05:f5:34:36:fb:36:c5:34:
71:9b:97:1f:ca:02:ff:db:56:8d:9a:b8:a5:00:89:
b6:fc:0b:89:0d:88:93:34:97:ea:88:37:e4:1a:ab:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:05:07:7B:79:D4:0A:77:9B:A0:39:00:C2:FF:49:BA:BE:3E:57
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:fd:64:42:77:09:31:ed:12:02:14:d2:c0:f6:ad:38:f4:
66:63:03:a7:cc:d2:e3:b3:a8:9e:f6:05:01:7b:17:f8:c4:60:
ff:9f:12:b5:e7:cf:5d:0a:d3:5c:09:d6:67:8f:10:bd:3f:ca:
e9:16:3f:d7:b6:b1:45:5f:20:b2:5d:ff:30:4e:01:d6:07:00:
bf:a0:66:9d:aa:83:58:74:6a:1d:18:67:61:40:a8:72:50:cb:
24:77:b4:25:3b:39:35:35:8d:a6:61:f2:31:60:86:39:ef:be:
7f:28:c4:1c:ec:62:0a:c8:49:7e:58:6b:82:2b:b1:51:f5:2e:
79:ca:49:d9:77:96:e6:04:38:1d:7f:67:d7:e0:25:3b:4f:93:
42:c0:5b:d5:ba:c0:72:20:0f:4e:a7:05:f8:a9:1a:51:8a:56:
78:03:8a:99:b6:8c:42:e0:ef:2b:9a:c9:62:5a:f7:27:c6:9e:
f4:98:2b:da:9b:e1:f1:58:42:2f:6e:67:e8:57:9e:e2:fd:f1:
f9:0c:78:a7:ae:6c:83:52:aa:03:68:a8:2f:c2:73:37:1e:57:
19:42:d9:3e:19:4f:06:c1:a0:0a:e0:01:df:3d:2d:e8:dd:a0:
ed:25:bf:ba:72:26:c0:e0:2d:5f:9b:66:cc:f4:4b:da:ed:4f:
50:a0:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:03:00 2025 by rpki-client