Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: Q7doo1ziTTXjQO9mVZUiceylzux/vKT9k8T0BVEtRoA=
Subject key identifier: EB:20:08:03:F7:DE:E3:8E:D2:17:84:73:03:06:FF:1F:C2:D8:E9:7E
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 019A4F996CA1AFDA903387DBA2307629ABDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 05AC
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: xU9Quz5tkO70lLNX1o7nLIl/IyB+BPzyciAN+6wbDZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6c:a1:af:da:90:33:87:db:a2:30:76:29:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=eb200803f7dee38ed21784730306ff1fc2d8e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:bc:43:fe:dd:f8:43:2c:b0:aa:34:4a:4c:
e8:02:b2:8c:e5:dd:f8:ef:38:77:dc:6c:f9:f2:b0:
f3:c6:35:99:c1:32:44:6c:18:85:b0:8f:6f:25:71:
80:b2:bf:9d:60:eb:da:bb:23:30:25:68:78:f7:46:
5e:14:94:a1:78:e3:ca:b2:7a:bb:b3:18:e6:7b:2e:
18:eb:e3:3d:ea:a2:2b:6d:7a:59:b1:cc:91:14:18:
e3:e2:35:a9:78:1c:c5:0d:89:1e:4d:6b:86:86:54:
5c:28:8e:82:57:da:10:9c:08:dc:c5:9b:06:01:ba:
0e:2f:33:7e:e7:6d:ac:ca:30:3d:ba:a9:87:f6:98:
ee:4a:16:12:47:ad:d9:f1:83:e1:56:8a:0e:91:48:
8c:a3:52:2a:55:c4:f0:05:d3:d7:05:15:16:03:00:
a7:79:ed:40:0d:14:0b:b6:82:c4:5c:f1:63:6e:50:
ec:dc:95:3e:9a:03:3b:53:77:26:d6:89:3d:84:0f:
8a:71:18:66:20:a3:5e:aa:6f:0f:ac:58:7e:9a:0f:
c6:88:9a:24:7d:34:fb:a7:42:a2:61:a1:73:59:37:
2b:de:c6:d3:c3:19:dc:e0:a6:72:2e:cb:f8:67:c2:
13:79:91:a0:5b:06:01:97:99:f5:8c:f1:d7:13:96:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:20:08:03:F7:DE:E3:8E:D2:17:84:73:03:06:FF:1F:C2:D8:E9:7E
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:04:5b:6b:6e:b7:8b:9d:95:d5:da:cb:ea:39:fd:18:f1:9b:
45:4b:03:fe:0e:81:a5:10:45:ce:c3:96:46:bd:48:54:90:c0:
bf:96:fe:ea:e1:9c:5d:af:ea:1f:f7:a5:29:9a:34:27:46:bf:
ed:30:b0:b8:8c:ca:ca:60:fc:f8:d1:79:fd:8b:2b:be:87:9b:
9e:dc:45:d9:a2:05:96:f1:04:b4:a2:7e:16:c9:c0:c5:95:e4:
e5:17:b1:33:60:00:b6:88:85:48:c2:39:1d:3b:1d:43:4b:91:
bb:d8:32:2e:4c:2c:7d:eb:40:94:fe:a5:a8:ce:8f:51:58:9b:
1f:15:8f:09:62:a3:06:0f:a9:b8:24:1b:f2:11:2d:51:93:57:
b5:fb:29:e6:77:d0:09:35:4a:76:55:4a:4c:de:e6:61:05:d9:
6e:ae:4c:da:c3:00:93:75:49:91:ad:94:32:35:68:31:a5:b1:
c6:1d:5d:00:33:d3:5b:af:bb:bc:3e:19:dc:e2:ec:97:3c:2e:
05:50:e9:36:6d:44:86:d9:dd:08:4a:d7:e9:a8:43:85:05:e4:
e0:cf:cb:27:29:be:d2:d5:1c:db:e4:1b:32:5f:3d:d9:22:cc:
12:64:8d:c1:2e:f0:c6:33:21:f7:cc:b0:5e:c6:36:26:ae:1c:
48:0c:83:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmWyhr9qQM4fbojB2KavbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx
ZTMyMDMwHhcNMjUxMTA0MTYwMDQ2WhcNMjUxMTA1MTYwMDQ2WjAzMTEwLwYDVQQD
EyhlYjIwMDgwM2Y3ZGVlMzhlZDIxNzg0NzMwMzA2ZmYxZmMyZDhlOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGy8Q/7d+EMssKo0SkzoArKM5d34
7zh33Gz58rDzxjWZwTJEbBiFsI9vJXGAsr+dYOvauyMwJWh490ZeFJSheOPKsnq7
sxjmey4Y6+M96qIrbXpZscyRFBjj4jWpeBzFDYkeTWuGhlRcKI6CV9oQnAjcxZsG
AboOLzN+522syjA9uqmH9pjuShYSR63Z8YPhVooOkUiMo1IqVcTwBdPXBRUWAwCn
ee1ADRQLtoLEXPFjblDs3JU+mgM7U3cm1ok9hA+KcRhmIKNeqm8PrFh+mg/GiJok
fTT7p0KiYaFzWTcr3sbTwxnc4KZyLsv4Z8ITeZGgWwYBl5n1jPHXE5YacQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsgCAP33uOO0heEcwMG/x/C2Ol+MB8GA1UdIwQY
MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt
OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1
LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADARba263
i52V1drL6jn9GPGbRUsD/g6BpRBFzsOWRr1IVJDAv5b+6uGcXa/qH/elKZo0J0a/
7TCwuIzKymD8+NF5/YsrvoebntxF2aIFlvEEtKJ+FsnAxZXk5RexM2AAtoiFSMI5
HTsdQ0uRu9gyLkwsfetAlP6lqM6PUVibHxWPCWKjBg+puCQb8hEtUZNXtfsp5nfQ
CTVKdlVKTN7mYQXZbq5M2sMAk3VJka2UMjVoMaWxxh1dADPTW6+7vD4Z3OLslzwu
BVDpNm1EhtndCErX6ahDhQXk4M/LJym+0tUc2+QbMl892SLMEmSNwS7wxjMh98yw
XsY2Jq4cSAyDyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:27 2025 by rpki-client