Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File: taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier: 9gcTvOoj+vI1XdRV/mesy8vVAbgJZ74s7LOuu2WGZV8=
Subject key identifier: C8:68:85:B8:90:E5:E9:1B:D6:39:B5:97:6E:72:47:58:8C:98:CE:29
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial: 01968FCBC5A5BDE6647778E6C0602B8AA9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number: 03BB
Signing time: Fri 02 May 2025 07:00:18 +0000
Manifest this update: Fri 02 May 2025 07:00:18 +0000
Manifest next update: Sat 03 May 2025 07:00:18 +0000
Files and hashes: 1: 1eTTbIw0aBP5pRGawtpOBnWjTiI.roa (hash: KM1RdCcfmUth9EVF5+XUqTKsxoMkWqwN89EeoKM405U=)
2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: QAIk0PxzpW8t/YuLAQGwoHtVtARj6HX/x28m5ZoNBk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:c5:a5:bd:e6:64:77:78:e6:c0:60:2b:8a:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Validity
Not Before: May 2 07:00:18 2025 GMT
Not After : May 3 07:00:18 2025 GMT
Subject: CN=c86885b890e5e91bd639b5976e7247588c98ce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:a2:0d:df:47:0b:74:53:88:59:48:68:8f:
3d:b0:c1:a0:95:d7:34:35:39:eb:a1:19:bb:e1:a8:
cb:73:27:51:b5:0d:7b:31:cf:c8:18:d6:01:fd:15:
f0:24:66:26:c6:69:89:45:90:96:7d:62:85:61:0c:
8e:e9:f7:03:05:70:3b:e6:40:ce:9a:21:bc:4f:84:
b5:09:2b:2c:af:95:de:fb:d1:fc:53:c7:79:24:aa:
47:62:da:9a:7e:d5:52:53:bc:57:2a:e9:bd:a5:7e:
ac:ce:4f:56:bf:d6:4a:48:0c:c2:61:92:98:76:aa:
6c:46:5d:52:05:ff:c7:d5:1d:fd:8a:ab:3b:34:00:
38:df:c1:33:3b:d2:b0:cb:2d:8f:15:6e:53:46:6a:
38:c0:2f:1a:0f:b9:23:d1:7a:65:6d:12:5d:59:89:
be:04:7e:f7:af:6e:22:f5:d4:92:54:a8:46:da:70:
dd:aa:4f:3c:5f:86:8c:50:a5:e3:8d:d2:23:e4:7e:
b8:c0:60:fb:68:0e:76:d3:93:aa:ac:af:af:f8:d9:
90:fa:a3:14:09:d5:fd:1c:36:60:5b:6f:77:9a:e6:
4f:53:3e:e9:70:11:8f:e0:01:fa:d0:6c:bd:5b:50:
23:d1:08:cf:72:1c:b4:25:57:8a:a7:b8:46:ad:c2:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:85:B8:90:E5:E9:1B:D6:39:B5:97:6E:72:47:58:8C:98:CE:29
X509v3 Authority Key Identifier:
keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:a4:43:fc:0f:bf:3f:10:7b:af:c8:e2:ea:44:30:e6:63:
ce:a0:33:b2:6d:8e:9b:3c:c9:8e:7a:6c:da:97:77:fe:19:b9:
76:a3:15:cc:67:43:02:d4:a8:a3:68:b1:0e:2d:5a:50:d8:ce:
70:25:8a:65:39:94:eb:29:e3:d3:a4:2a:00:0f:c9:d3:60:f0:
ca:e8:74:38:30:f5:c8:2b:1a:31:ee:2e:57:c9:d2:0f:f7:49:
06:5b:5d:37:c1:20:86:49:be:6c:3b:91:63:5d:86:24:63:9f:
3d:16:15:59:6a:7b:5c:37:63:66:4c:27:34:d0:d8:b5:bd:8a:
a7:a3:90:b7:df:c5:9d:2a:53:58:31:f5:de:bb:56:c0:20:34:
13:73:f7:64:4a:08:56:9e:39:ef:6d:00:e7:0d:11:af:90:93:
02:d3:c2:2a:26:bc:74:bd:f9:21:17:f8:c3:98:e6:9a:00:12:
9a:23:3e:c5:a0:fc:e0:e2:7a:49:a9:aa:2e:5b:94:d7:d8:db:
b1:af:8c:96:79:7f:96:0a:07:bf:57:88:ae:20:75:bc:80:67:
c0:55:6a:68:af:7b:61:0f:49:56:b9:98:20:51:25:37:5f:c4:
78:98:e9:4b:fc:a3:a4:cd:4d:68:6e:88:77:b6:d7:be:01:3e:
b5:20:29:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPy8WlveZkd3jmwGAriqmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx
ZTMyMDMwHhcNMjUwNTAyMDcwMDE4WhcNMjUwNTAzMDcwMDE4WjAzMTEwLwYDVQQD
EyhjODY4ODViODkwZTVlOTFiZDYzOWI1OTc2ZTcyNDc1ODhjOThjZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8eiDd9HC3RTiFlIaI89sMGgldc0
NTnroRm74ajLcydRtQ17Mc/IGNYB/RXwJGYmxmmJRZCWfWKFYQyO6fcDBXA75kDO
miG8T4S1CSssr5Xe+9H8U8d5JKpHYtqaftVSU7xXKum9pX6szk9Wv9ZKSAzCYZKY
dqpsRl1SBf/H1R39iqs7NAA438EzO9Kwyy2PFW5TRmo4wC8aD7kj0XplbRJdWYm+
BH73r24i9dSSVKhG2nDdqk88X4aMUKXjjdIj5H64wGD7aA5205OqrK+v+NmQ+qMU
CdX9HDZgW293muZPUz7pcBGP4AH60Gy9W1Aj0QjPchy0JVeKp7hGrcIPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhohbiQ5ekb1jm1l25yR1iMmM4pMB8GA1UdIwQY
MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt
OTgzN2JjMjJjNzA1LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1
LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjakQ/wP
vz8Qe6/I4upEMOZjzqAzsm2OmzzJjnps2pd3/hm5dqMVzGdDAtSoo2ixDi1aUNjO
cCWKZTmU6ynj06QqAA/J02Dwyuh0ODD1yCsaMe4uV8nSD/dJBltdN8Eghkm+bDuR
Y12GJGOfPRYVWWp7XDdjZkwnNNDYtb2Kp6OQt9/FnSpTWDH13rtWwCA0E3P3ZEoI
Vp45720A5w0Rr5CTAtPCKia8dL35IRf4w5jmmgASmiM+xaD84OJ6SamqLluU19jb
sa+Mlnl/lgoHv1eIriB1vIBnwFVqaK97YQ9JVrmYIFElN1/EeJjpS/yjpM1NaG6I
d7bXvgE+tSAp0g==
-----END CERTIFICATE-----
Generated at Fri May 2 13:12:30 2025 by rpki-client