Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: K+hoN9EOmLuUhy/RYXUvGETycme61upoKqXc5xbTd3M=
Subject key identifier: E5:63:F2:1F:EE:63:F1:A7:90:39:F9:70:5E:6E:1D:E0:0B:03:C1:AE
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 019776E5D32CDF8525ACD60A1A8E65CC5BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 0497
Signing time: Mon 16 Jun 2025 04:01:02 +0000
Manifest this update: Mon 16 Jun 2025 04:01:02 +0000
Manifest next update: Tue 17 Jun 2025 04:01:02 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: LZsL+T/e+PWDuVK7ZWVcJs1sb9nOWFhIclwEWUxEhx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:d3:2c:df:85:25:ac:d6:0a:1a:8e:65:cc:5b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Jun 16 04:01:02 2025 GMT
Not After : Jun 17 04:01:02 2025 GMT
Subject: CN=e563f21fee63f1a79039f9705e6e1de00b03c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:45:6b:84:0f:9c:f3:b9:a0:e9:72:6a:a4:6a:
a3:f6:d6:5c:42:8e:ae:27:cf:80:9f:f5:dd:12:6c:
4b:96:6a:4a:80:36:e1:cc:89:0e:e3:5c:aa:82:8b:
00:5e:71:6f:45:5a:94:a2:95:6d:f2:fc:d0:00:5f:
9d:c5:23:32:5b:c0:45:ba:d0:6d:9a:02:a2:d6:ef:
96:f9:3a:39:c6:98:47:ba:60:15:0f:3d:d1:8a:0e:
d8:92:e4:ce:6c:ce:44:19:2f:d5:34:ed:5c:93:c8:
94:3d:d1:a0:45:94:bb:07:8f:8e:cf:52:14:d1:c0:
bb:3f:d2:4e:73:ad:b4:dc:f9:a7:d9:cf:25:95:60:
1b:7c:dd:ed:99:fc:35:52:eb:39:11:2d:00:bf:31:
89:ae:24:33:c0:e2:ff:76:fd:94:15:76:a4:ea:b2:
a6:d7:e2:e0:8e:af:2c:d9:66:46:a8:40:69:a4:7d:
92:21:59:5c:0c:8b:5e:07:a9:69:bf:31:3e:86:99:
fc:70:7b:c6:bf:d7:eb:a6:10:5b:3c:aa:52:1f:71:
f7:b3:b9:04:18:d5:31:c4:33:a7:5e:cd:74:9e:fc:
d6:4b:77:03:e3:7a:e8:68:22:86:e0:28:8e:56:84:
29:3b:4c:d4:38:7e:b8:c6:9a:4d:45:3f:a3:88:94:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:F2:1F:EE:63:F1:A7:90:39:F9:70:5E:6E:1D:E0:0B:03:C1:AE
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:46:47:d7:0b:66:c6:c7:16:42:33:99:2d:dc:8b:8b:92:25:
53:f0:30:bb:fe:eb:d2:d4:88:1a:90:69:a6:1e:23:67:e6:8c:
0f:e7:79:7d:0f:b3:7d:6a:c1:04:b4:c0:aa:15:ae:8f:87:80:
97:42:ea:2b:74:29:7f:90:59:17:16:f0:fe:d6:ea:9c:39:41:
9d:df:e8:dc:c5:cd:01:fc:a1:a9:e5:a5:dc:5b:74:7a:3c:f3:
17:32:66:11:da:60:64:4e:5b:be:c8:9c:3f:96:ec:d3:56:82:
0d:91:6a:2e:0e:27:5e:20:b9:82:24:1e:35:09:ce:22:10:01:
29:2b:ea:60:ea:75:38:44:9f:92:5e:97:07:12:d1:87:17:c2:
14:5d:27:3b:fe:e1:e0:d8:92:d0:b0:c6:e9:34:cc:fc:13:9f:
16:6c:53:d0:c1:dc:c7:e9:3f:28:80:58:0b:74:bf:1e:23:53:
fe:7c:0c:17:b2:6c:bc:c7:e6:8a:23:c2:28:f2:82:e6:75:15:
fe:7b:29:4d:a7:53:cf:e5:94:be:b3:00:f2:6d:4b:75:a6:50:
37:f5:9a:20:63:37:2a:3e:25:13:fb:4b:56:d5:f4:25:99:d8:
66:f6:57:15:18:98:95:3a:5d:ab:06:ee:4d:99:3c:c2:95:93:
f5:77:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:57:03 2025 by rpki-client