Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: oLTebBMVlm5jfC62scW/oSHckPBd0yBW7oQxfZgM8rw=
Subject key identifier: 93:53:D1:E6:83:9F:4A:B7:EB:EE:21:1D:A3:D3:A3:52:D6:A4:8B:BF
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 0197C6144F7FE3D82E0778B2654D0660AEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 04C0
Signing time: Tue 01 Jul 2025 13:01:49 +0000
Manifest this update: Tue 01 Jul 2025 13:01:49 +0000
Manifest next update: Wed 02 Jul 2025 13:01:49 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: 53d6d15UCmJ/y9gfVOM56hwVi6rb9WXM4pokF2KE/YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:4f:7f:e3:d8:2e:07:78:b2:65:4d:06:60:ae:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Jul 1 13:01:49 2025 GMT
Not After : Jul 2 13:01:49 2025 GMT
Subject: CN=9353d1e6839f4ab7ebee211da3d3a352d6a48bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:dc:d1:e8:f8:35:aa:1d:8a:f0:2e:27:a1:
c0:76:78:18:ea:3f:d1:8c:26:a9:96:a6:cb:37:18:
0b:e5:a9:f6:ba:c1:da:73:a7:70:16:21:a3:08:8e:
63:ed:76:45:eb:37:99:bc:c9:b8:b4:01:1b:bd:95:
09:18:23:3a:8c:bb:27:bb:d1:f8:44:dc:77:d7:a9:
f8:bb:81:8d:61:d3:7e:59:26:d5:07:72:f4:6b:4d:
76:4d:5e:75:16:d9:42:d0:db:c9:36:cb:27:2a:25:
33:c4:06:2e:99:c4:81:7a:a0:e6:73:f2:db:dc:08:
c6:d8:04:98:ce:93:9f:ae:ad:d7:e2:d7:45:82:db:
1f:80:94:5f:d4:16:9e:b6:41:90:86:c5:57:d5:2e:
76:9d:a7:d1:80:59:a9:ba:60:fc:80:d7:b9:e5:b8:
2b:3c:6e:9d:07:ae:f8:23:7b:ae:d3:11:69:aa:d0:
dc:0c:86:9c:61:79:d8:c2:eb:1e:90:f8:ba:ba:38:
c9:6a:aa:b1:c6:3b:d7:4d:c6:7f:7c:1e:1c:f7:09:
03:75:66:ef:bc:b6:90:ae:95:4e:26:6c:ee:e1:87:
c4:1f:d6:0f:ea:c5:ae:db:a6:92:ca:22:1e:10:53:
c3:4b:6c:cf:38:46:75:e0:40:75:ff:80:1a:0d:29:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:53:D1:E6:83:9F:4A:B7:EB:EE:21:1D:A3:D3:A3:52:D6:A4:8B:BF
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ba:f7:22:a9:76:9c:aa:77:12:93:2a:eb:05:f2:90:61:95:
f9:20:49:6e:84:c6:e8:d1:ec:16:1b:d8:39:df:67:10:19:b1:
7c:e8:2f:dc:90:d6:76:15:8b:6a:61:40:20:17:6b:17:12:a0:
92:ab:0e:c4:88:43:ee:0b:7f:cf:f1:3e:4b:2a:9b:12:ab:8d:
a7:34:df:be:63:d4:82:f7:7c:18:97:1b:a0:d2:16:64:88:6e:
22:1e:b4:21:db:88:6a:3c:4c:54:7b:4a:e7:c4:c6:91:e7:1e:
ac:06:b4:fb:3f:8a:49:dd:8c:86:bc:d3:e4:8e:7f:04:57:c0:
18:eb:73:14:0e:3e:b3:de:1a:e7:7a:29:fd:a3:88:e1:e1:ca:
e4:ec:59:9e:d0:d3:02:41:d3:07:49:f9:86:b3:a8:83:d0:bb:
1f:90:ba:12:09:7b:ea:ae:9f:42:a0:12:17:c0:39:74:57:44:
f1:11:da:db:18:b8:bd:f9:e6:cd:00:7c:fd:d2:fd:f5:ca:96:
13:4b:d8:b3:68:0b:bb:ab:28:d3:f8:86:a0:de:1c:9d:13:ef:
91:80:f6:b0:7f:da:df:15:1d:a6:16:48:dd:e2:e8:ed:3a:e4:
9f:72:a5:b3:3b:b6:cc:be:a9:92:75:a6:75:0c:60:ac:20:ab:
2a:80:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:13:20 2025 by rpki-client