Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: zxVmTxrl0mo33lqEgJyWFuvQ8V+AG28+Ent3P6B/30U=
Subject key identifier: 91:4E:05:1E:D5:6A:A2:2A:14:C4:0D:AE:FC:E6:58:05:A9:11:80:16
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 0199FBEA85D226A69EC91E8BABEB508BC199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 05E5
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: R+46rHL1KQUY8aq0OaItqsNLmcvLnfKedQdIng0zU4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:85:d2:26:a6:9e:c9:1e:8b:ab:eb:50:8b:c1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=914e051ed56aa22a14c40daefce65805a9118016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:83:19:d1:2a:cf:a4:89:15:b9:4a:96:11:
8c:98:3e:eb:b2:30:4a:29:55:d7:32:be:38:48:68:
db:1b:3d:6f:cc:fd:98:47:b3:48:c1:d0:ad:64:26:
21:ec:2c:36:a0:cd:df:09:4d:2e:51:86:c6:63:2a:
14:67:13:f1:f1:79:27:8b:3a:21:f9:fe:c0:6e:e8:
e3:58:cc:fa:86:7a:1c:6d:b9:b1:64:a1:ec:be:7c:
df:ba:84:98:65:1a:28:77:8a:63:d6:14:1c:9b:a6:
96:54:c8:df:a5:c8:9f:20:9c:0f:87:67:11:15:b2:
8f:12:55:f4:a4:88:4d:38:da:28:f4:75:d4:28:5b:
f4:e2:79:92:06:9b:39:b1:a3:b4:b5:c7:70:bc:93:
2f:45:25:d7:f2:c4:39:67:a7:1e:c4:93:b5:9a:e0:
74:38:fb:54:e9:50:97:cb:17:07:ee:f4:f7:7e:d6:
66:65:be:98:d3:22:dc:b3:da:7a:1f:a6:18:18:cd:
f6:67:22:12:c1:e1:40:43:b1:c2:de:a3:f2:3f:86:
86:e2:c1:f5:4e:67:37:a9:ad:38:f7:ee:e1:ab:d1:
4d:39:a0:a3:98:84:a8:f5:5e:26:92:ac:a9:af:14:
6f:34:28:4e:72:c4:ca:13:cd:38:40:3d:ba:bc:95:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4E:05:1E:D5:6A:A2:2A:14:C4:0D:AE:FC:E6:58:05:A9:11:80:16
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:3f:f1:4d:7d:02:e5:0b:d3:00:e4:d3:90:86:84:04:e5:
41:81:4a:8f:85:28:e1:c2:92:46:9e:ab:bc:a9:43:1d:19:bc:
99:87:c9:02:89:35:9b:7d:e6:6c:77:c0:6b:45:2f:f6:18:27:
fc:e3:9b:e8:a2:3e:6e:5a:2f:2a:72:aa:5f:d5:5e:56:b1:14:
56:54:92:e5:04:32:85:48:e8:43:c4:10:87:35:35:6f:38:d1:
75:23:0e:80:a0:4e:3c:14:8a:98:b1:b2:18:dd:9a:3b:a1:ae:
01:50:70:14:30:cd:7b:25:c2:7a:ba:05:e3:89:87:f0:ab:4a:
5f:b6:61:db:50:f5:79:08:3d:1d:f3:be:f8:89:b3:b3:7d:90:
b4:6c:de:f4:52:1b:b7:15:8c:f6:a3:fd:e2:50:46:ad:8e:42:
cd:6a:ee:0e:a6:8b:af:98:d7:4d:b1:3c:2e:f6:79:97:49:52:
f7:84:40:7b:fe:23:51:81:6f:2e:b5:22:9e:4d:0e:22:42:6f:
d1:52:d1:be:cb:31:16:4c:77:74:1e:7d:c8:c4:1d:52:b1:61:
78:f0:9b:d9:b0:6f:6f:e5:83:b2:77:42:f5:db:e2:92:ef:9e:
91:e5:34:45:61:aa:c7:db:14:30:05:c9:3a:5c:82:03:f2:cf:
5c:1e:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:20 2025 by rpki-client