Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: 9ebSVuZfRIW+mNaS31LQN8d/+Ec1PhImJ0CXMq+KtL4=
Subject key identifier: 21:F0:AE:9C:24:FB:CF:B9:EA:A1:37:C8:D5:53:75:C9:45:06:38:BD
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 0196553788A8D1C6E28AE42EAB3F462DE6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 0401
Signing time: Sun 20 Apr 2025 22:00:24 +0000
Manifest this update: Sun 20 Apr 2025 22:00:24 +0000
Manifest next update: Mon 21 Apr 2025 22:00:24 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: rzrh/TYJGy4sK76Op47plH8qNn/ARCEJdJA0UI8hFaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:88:a8:d1:c6:e2:8a:e4:2e:ab:3f:46:2d:e6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Apr 20 22:00:24 2025 GMT
Not After : Apr 21 22:00:24 2025 GMT
Subject: CN=21f0ae9c24fbcfb9eaa137c8d55375c9450638bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:f2:d1:3c:87:13:e7:54:48:4d:4d:e3:03:
80:93:cb:43:04:89:ea:2f:c2:17:39:ec:b7:65:b3:
e8:83:b3:04:75:95:44:47:1c:54:6b:23:6d:f9:90:
51:65:14:0a:b5:2e:85:1c:2d:75:85:af:90:e4:5c:
5e:d2:19:8d:d3:5c:99:e8:73:a7:83:cc:65:2f:15:
8f:51:75:6a:87:53:f6:4e:15:bd:49:33:f9:1b:90:
0f:00:f0:07:28:b3:57:c8:e4:bf:bf:22:b3:ec:91:
d9:9e:38:46:48:00:41:0e:06:43:fb:19:8a:83:03:
68:b3:16:02:0b:7d:22:e6:d3:72:83:dd:f5:d5:32:
56:4a:2d:86:74:27:13:8d:66:6e:4a:68:19:05:9d:
0b:6d:e6:61:94:d6:92:71:e0:df:a0:c0:7f:b0:e6:
20:c5:6c:00:58:64:d6:b5:f9:4c:2f:8e:b9:86:54:
88:53:a2:a8:b9:db:16:18:8f:10:11:4c:74:46:b5:
ed:e8:8b:f1:31:d8:39:2e:02:5a:4e:da:96:45:20:
be:d9:74:37:63:5e:b0:5f:c2:20:69:04:57:c1:ef:
48:10:42:09:8f:48:df:7d:52:03:7d:e6:83:99:e7:
b3:89:2b:13:34:06:98:d5:33:8f:c2:24:53:26:8b:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:AE:9C:24:FB:CF:B9:EA:A1:37:C8:D5:53:75:C9:45:06:38:BD
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:bc:12:a1:fd:c4:16:1e:dc:98:56:0f:44:ed:e2:97:80:
46:d0:31:00:d3:b8:56:64:29:55:69:a6:b9:6b:1b:b9:46:63:
fa:37:dd:d5:9a:df:fb:8e:3f:a5:97:27:0f:8a:63:be:f6:6f:
7a:0b:2e:e6:bb:64:7b:29:0f:3f:c4:a5:8b:f5:12:3f:6c:22:
c5:02:a4:2f:de:da:1b:7f:55:5e:1e:18:11:ee:82:d5:ea:9c:
55:b6:7f:c0:cd:58:30:05:c2:cf:00:9b:70:92:5a:6d:3d:fd:
3c:15:db:6d:39:48:19:46:97:ea:ff:4a:21:7f:e7:76:04:bd:
1e:b3:ee:52:54:fd:50:6a:14:55:c9:b1:f4:e6:d0:cf:5b:9d:
ee:5c:e0:0b:5f:f6:31:7e:25:74:57:4a:b9:f6:a7:22:90:bb:
a1:e8:5e:9a:7d:b6:6c:d1:c0:fd:12:0a:70:ab:18:3b:67:e4:
55:a7:e0:03:f2:5b:bf:2d:f5:9e:ab:e2:a1:8f:e8:b5:26:60:
e3:f7:65:55:98:42:49:bc:30:fc:4b:d3:91:ca:08:b3:b6:69:
25:f6:fc:c5:67:0b:cd:d8:b5:91:17:42:ce:7c:0d:92:f7:fc:
e5:35:6c:e5:4f:c0:93:e9:f9:85:ba:01:a1:ce:15:b5:0c:80:
35:23:7d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:37:08 2025 by rpki-client