Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: BMDdJfMbUx22SrnQXR7qDrgpWPoh9AHeaKs0aLdK+4s=
Subject key identifier: 51:D2:90:CC:24:BF:29:4D:70:A7:5B:EC:69:D6:66:1A:47:E8:94:9C
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 019A725CC8E13AA5D29D5C2BCABED06B9BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 05BE
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: FAHHKqOja/xPEQIioArEvyWVvZtYz7i9JGfhPPpxclE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c8:e1:3a:a5:d2:9d:5c:2b:ca:be:d0:6b:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=51d290cc24bf294d70a75bec69d6661a47e8949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:d6:69:42:39:a6:ea:4f:f5:fe:9d:bd:01:
d9:33:18:53:a7:5b:c1:9a:76:8d:19:b5:78:6e:bc:
cb:c1:1c:b3:45:16:39:02:05:53:99:06:78:af:3a:
56:12:75:a7:e4:c8:f1:23:e4:4e:2a:ae:65:a0:56:
ec:ab:7b:bc:19:29:5f:19:22:ab:8f:9b:6a:3d:bf:
12:e8:bd:01:50:fd:1f:61:40:c9:06:9e:df:49:ac:
f3:f1:31:34:37:22:24:6d:59:ce:8e:12:24:f0:39:
41:f8:8a:92:ab:cf:3d:11:6a:00:ef:45:95:47:8c:
6b:62:a8:2b:b6:3c:ce:33:c4:7f:e2:72:b0:29:1f:
14:8e:8a:c8:bf:3d:f4:a0:78:a2:6a:36:bf:b2:35:
f2:4d:0d:82:c7:c1:79:e1:0c:04:4a:ab:e9:94:5d:
d9:fa:80:6f:f2:84:a3:bd:b5:0a:e5:5c:6f:ca:98:
32:3e:82:ee:eb:94:6a:f6:af:a1:bd:35:10:41:bb:
06:ab:0f:d4:a4:78:c7:4c:aa:05:32:2f:4f:4c:1f:
0d:55:de:0f:f8:62:21:0d:7e:8a:0d:a3:08:b0:12:
0a:87:12:27:02:6d:97:98:ef:0a:7f:1f:3e:ef:e0:
87:28:5b:fd:f2:e9:12:b1:8d:43:07:8e:a9:8c:5c:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:90:CC:24:BF:29:4D:70:A7:5B:EC:69:D6:66:1A:47:E8:94:9C
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:81:57:42:48:d8:38:d2:58:10:32:ba:09:60:f4:8d:47:5d:
f3:7f:3b:1e:1f:1b:7e:1c:aa:4e:09:63:de:c7:17:5d:0e:f7:
5a:c9:6d:e3:f8:f8:ea:f1:01:e3:1f:a7:5c:89:a2:a3:a6:28:
e4:51:bf:19:2a:72:25:4c:7e:5c:b1:69:b2:2b:2c:72:9d:ab:
96:81:b1:4b:7d:af:17:92:7f:7a:cb:f5:16:16:d1:48:59:dc:
9a:02:fe:22:7b:67:c0:4d:c5:77:26:49:4f:b1:40:ab:a3:2b:
95:2b:46:e4:83:57:8b:c5:e9:ec:89:62:09:01:37:21:f9:74:
5d:60:f7:f2:76:e2:6a:b0:af:b7:5f:bd:82:46:f8:91:17:5b:
e8:9f:80:98:31:50:4a:ae:98:4d:20:d8:25:89:3b:33:3f:9b:
68:9b:b0:fb:c4:b9:d1:28:38:e7:eb:6f:94:1b:04:e2:09:35:
0f:02:e5:34:c5:ed:12:e2:ee:2c:bc:2a:cd:e3:8d:aa:1a:e9:
0e:c8:7c:39:97:7b:ed:64:ef:3c:23:ee:a1:37:94:e4:55:5f:
7f:cb:a0:81:38:17:04:53:ec:f1:50:24:5e:6e:8c:2e:cc:2c:
f9:e7:f6:37:c3:a8:93:46:69:6a:6f:2f:28:35:bc:3e:c6:87:
c0:88:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:55:33 2025 by rpki-client