Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: sJ644mvHwiMuPxYOh/ATKpbqwqfksSIPBLSEatH3CvU=
Subject key identifier: FD:EC:52:B4:1E:61:F7:C0:75:28:DE:96:E8:27:BB:45:38:AD:CF:48
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 0199225517172A146CB33C2AC52E4F1A981B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 0510
Signing time: Sun 07 Sep 2025 04:00:25 +0000
Manifest this update: Sun 07 Sep 2025 04:00:25 +0000
Manifest next update: Mon 08 Sep 2025 04:00:25 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: Jt/OgSmbbuKdTBtEG3vzwkSl7XH12F6nmhnrAtO11Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:17:17:2a:14:6c:b3:3c:2a:c5:2e:4f:1a:98:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Sep 7 04:00:25 2025 GMT
Not After : Sep 8 04:00:25 2025 GMT
Subject: CN=fdec52b41e61f7c07528de96e827bb4538adcf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:20:cc:b8:2d:51:b4:47:df:f8:cc:62:b7:
36:b8:ce:f3:e8:7c:6a:13:e3:aa:19:e1:67:6f:0a:
eb:e0:93:89:b6:f5:8e:a5:1b:d0:10:a2:fb:39:66:
1f:06:2e:fc:8d:9f:61:9a:ee:d4:67:36:f5:31:21:
07:12:cc:4b:bc:59:63:dc:fb:c1:c0:3d:32:97:19:
d8:47:08:d8:f4:59:32:d1:d5:cc:ab:bd:6c:a6:c1:
9e:a0:8f:b0:ed:83:dc:78:74:30:27:fd:bb:6c:ad:
9a:45:75:47:73:4c:e7:8f:33:99:75:a8:b6:8a:1d:
7e:61:13:5b:50:94:08:67:63:3d:4f:93:28:23:6e:
47:c8:e5:06:5b:10:fd:c2:de:5f:19:70:ec:1d:f8:
cd:f5:df:7f:28:f2:32:dd:7e:dd:f9:ec:32:f8:bf:
c0:d6:f5:fb:4c:5d:0c:d5:a5:71:03:a5:05:f0:03:
9e:65:99:11:8a:1a:85:a6:1f:81:59:a5:cc:fe:07:
63:b9:e6:6e:b9:8b:2e:08:ae:86:c1:c8:b5:6e:49:
51:11:0f:c6:e3:2b:72:57:ed:fe:de:bd:6a:26:43:
80:2c:29:75:9b:1b:a1:44:a6:96:d8:4a:c3:a0:e2:
73:10:42:33:da:26:d9:cb:ed:e1:92:00:16:ab:47:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:52:B4:1E:61:F7:C0:75:28:DE:96:E8:27:BB:45:38:AD:CF:48
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:bf:01:8f:13:6f:12:b4:36:67:04:d5:2c:17:1a:95:96:
58:21:2b:e7:cf:b1:38:50:62:c0:f7:a9:ae:63:c5:a0:c5:25:
01:5f:d6:db:cd:74:a7:d4:93:5c:d0:c5:2a:13:21:a0:72:cc:
4a:6f:94:bb:18:c0:3d:c6:7b:38:b1:77:fa:5b:a7:16:f6:e9:
c1:e3:3e:db:2b:30:50:e8:a3:ba:83:76:fa:29:f3:3d:76:b1:
f0:00:83:08:6e:0c:2e:a9:43:83:6a:b2:3a:48:04:c4:ee:09:
cf:91:80:dd:0c:9f:0a:0d:fb:04:76:2b:7b:b3:b6:d1:d1:22:
b1:fd:d0:1a:7a:31:db:ee:62:dc:8f:5b:12:a0:e7:18:6a:4b:
ca:c0:5b:54:85:65:5e:85:1d:67:ec:64:1e:f0:78:1a:8c:14:
15:8e:24:d3:9f:c7:6f:e5:2b:f1:d9:e7:62:b5:b7:ed:50:37:
cb:53:a9:a5:fd:2f:52:bc:74:02:44:78:d6:6e:43:4e:8a:d7:
ff:0c:cc:66:77:41:3d:d7:40:51:1c:b0:ac:a2:d3:35:d2:86:
ca:44:b2:87:9c:a9:39:be:ec:07:b6:43:4b:df:c2:3b:5c:93:
3d:00:72:4e:a1:d4:6b:94:9f:c8:92:c7:e4:fc:66:ce:81:af:
12:62:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:54 2025 by rpki-client