Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: JSTHFITcJv47CeJgqO8VxHGHb8ghrb4Uu775IwmEXSA=
Subject key identifier: 19:83:AB:2D:49:81:B1:79:94:F3:E0:DE:DA:DE:99:BC:37:05:D5:80
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 01975A92AF4EAFD7629700CB0C2F474A5B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 0424
Signing time: Tue 10 Jun 2025 16:00:51 +0000
Manifest this update: Tue 10 Jun 2025 16:00:51 +0000
Manifest next update: Wed 11 Jun 2025 16:00:51 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: jcEOaTsEtAYKz4RiNUKom5Gb5NfaiXxE3vWn7jT0kfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:af:4e:af:d7:62:97:00:cb:0c:2f:47:4a:5b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Jun 10 16:00:51 2025 GMT
Not After : Jun 11 16:00:51 2025 GMT
Subject: CN=1983ab2d4981b17994f3e0dedade99bc3705d580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:e3:e8:13:f4:44:ee:d7:c2:4b:db:9b:a9:
1d:45:53:c2:5a:27:f3:c6:ef:da:19:fa:f7:6c:b3:
43:10:8b:b6:2c:54:de:06:72:db:92:ae:38:d1:5d:
8e:e2:05:c8:d2:d1:45:b0:e3:55:66:7d:42:35:e8:
21:50:cc:02:b0:57:99:eb:fc:62:7d:08:55:64:aa:
af:2f:9a:d3:ea:05:3f:c2:a1:8d:ef:3f:06:44:71:
01:fe:8d:9c:09:07:dc:6d:4a:90:e0:ee:33:df:87:
56:2e:e0:22:b4:d4:15:21:29:d9:06:c1:c3:46:8c:
29:5f:f8:00:0f:1f:46:58:f4:dd:aa:b9:95:d9:0a:
98:d9:49:8d:80:8d:24:a3:48:bf:98:8e:90:e7:91:
0b:fb:16:25:40:14:a5:62:4b:9e:60:10:72:c7:c7:
a0:81:ba:0b:98:e2:7e:68:20:89:d4:4a:81:eb:b7:
b2:2e:ed:34:b9:5a:69:d0:ff:89:d0:69:60:1e:8c:
f3:77:e5:a2:70:3f:48:a5:7e:93:20:88:82:ec:1e:
51:4e:92:b9:24:5b:8f:e8:bf:f8:61:ff:22:36:51:
d4:a2:79:a5:4b:0e:94:29:03:04:16:9c:4e:fb:3b:
08:1f:72:e8:e9:22:8a:af:ab:1a:f6:a3:fb:0f:da:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:AB:2D:49:81:B1:79:94:F3:E0:DE:DA:DE:99:BC:37:05:D5:80
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:87:ee:10:17:8e:e5:b3:46:dd:18:df:15:1a:51:9b:74:7c:
f8:46:e4:62:0f:e0:c8:28:37:70:b7:7a:0a:38:cd:b0:6c:09:
0d:b3:cd:c3:d4:c8:2b:d8:89:51:8e:ed:ea:28:3d:39:b2:bf:
50:70:af:cb:12:67:f6:dd:32:9b:ce:b8:be:14:f4:6c:7c:78:
ce:5c:76:2e:90:e8:2d:9a:f3:94:c4:1c:3d:6a:5c:da:08:9f:
d9:1d:c0:37:c2:02:85:26:6d:34:a7:91:03:f0:d3:a5:46:fe:
55:7b:06:8d:ce:02:6f:cd:0a:83:d0:3e:86:5c:eb:c0:b8:91:
a9:a4:ac:c9:77:4f:c9:34:35:3a:36:61:a2:13:e8:94:3b:f0:
ba:0f:f7:e3:5d:0a:c0:ad:c9:ce:7b:67:ba:cd:b2:d8:1c:4f:
52:c4:0e:49:ba:a0:04:89:21:22:cc:0e:f3:75:53:62:52:d2:
0f:b6:ab:aa:95:59:1b:8e:84:45:26:7b:25:0c:9d:26:bd:85:
9f:fe:12:35:45:1f:1d:58:4c:76:27:4e:89:8d:61:73:a5:09:
ec:c3:f3:8d:f7:05:85:12:ed:8a:36:a7:08:ec:30:41:ab:dd:
9f:3a:de:38:a7:59:d6:ab:cb:83:04:21:57:35:60:3e:a5:bb:
2e:70:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:23:46 2025 by rpki-client