Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: 9suGDD52dUEBJSASTcaLMc902SSmltuut41BBdacZKA=
Subject key identifier: 57:11:D6:3C:72:E2:0C:AD:F3:C9:59:E2:ED:11:21:91:0E:B0:69:67
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 0199239F529D558740A47F5F24D563F7BB26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 0575
Signing time: Sun 07 Sep 2025 10:01:07 +0000
Manifest this update: Sun 07 Sep 2025 10:01:07 +0000
Manifest next update: Mon 08 Sep 2025 10:01:07 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: toNeWKmu50NiP2mxot56kdJBoQQDkOYRDgUbUtQ9H7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:52:9d:55:87:40:a4:7f:5f:24:d5:63:f7:bb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Sep 7 10:01:07 2025 GMT
Not After : Sep 8 10:01:07 2025 GMT
Subject: CN=5711d63c72e20cadf3c959e2ed1121910eb06967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:63:5c:c8:bd:6a:01:41:c4:b1:1f:be:31:
ff:86:1a:c6:1c:e2:db:77:85:17:80:f1:9f:e1:6e:
4d:37:47:a8:0e:83:19:06:26:d5:00:3c:5f:b3:1f:
53:da:cb:d6:fa:f2:96:ff:27:b9:ea:08:c6:d4:21:
e4:29:8c:4f:a2:92:c6:d0:6f:58:30:eb:05:f8:67:
e6:03:86:15:e3:db:37:d6:01:d0:89:af:34:72:52:
09:82:f4:5e:b6:97:b5:b5:79:f3:e4:88:98:c7:08:
a5:57:57:1b:eb:9b:7e:33:8a:27:c0:73:67:67:14:
87:e7:35:8f:0f:58:dc:9e:11:cb:b7:f8:11:47:ba:
30:82:62:c1:db:b1:a0:73:83:81:be:1c:50:10:a8:
16:eb:5f:4a:f9:63:67:82:aa:8c:b4:a3:7f:91:77:
45:d1:88:47:fb:bb:7f:ea:5c:f5:f1:dc:34:21:b2:
14:0a:37:f0:8e:7b:04:7e:ea:fe:b1:b4:9b:9f:a0:
9b:d2:3d:b7:ab:a4:57:63:a8:d5:bc:68:de:9d:2f:
e9:e8:f4:cf:36:01:06:b4:f3:82:1e:3d:8f:0e:37:
d3:8b:08:6d:18:e2:05:ce:11:02:f6:f7:d8:a6:e8:
7c:ac:ec:3d:92:ff:07:fe:cc:c6:d5:83:15:3d:45:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:D6:3C:72:E2:0C:AD:F3:C9:59:E2:ED:11:21:91:0E:B0:69:67
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:4a:31:e3:87:5e:4b:80:17:c2:6d:3d:a9:6f:1f:8d:ee:
12:e6:fc:6b:82:ed:81:b0:3e:d0:b0:ae:26:43:d1:a0:1c:12:
22:1d:b1:23:8f:99:78:12:75:44:61:fa:f3:d1:25:43:c7:6b:
95:f2:9b:5d:76:53:0f:da:fb:5b:8e:2f:88:46:4a:ce:52:b5:
b0:f2:f9:fd:07:a4:d3:8c:1f:86:a9:30:99:b5:1e:af:56:c1:
44:93:d1:14:8f:1e:c7:35:d6:e7:11:7e:65:db:68:3b:57:64:
04:76:0b:48:ac:0f:3f:e0:12:19:b0:02:1b:13:75:f9:34:33:
6c:ec:d7:5a:05:0a:a4:4d:e2:0c:9a:b6:b7:8a:33:89:99:af:
fe:4f:f3:35:8c:d9:ce:33:86:a4:b1:0c:cc:57:be:dd:f1:7a:
be:7e:6d:cd:93:ec:4d:3b:09:7c:ed:be:28:33:69:69:b1:07:
0a:8d:55:91:ca:3c:14:ea:29:87:46:82:62:21:2f:d6:95:73:
f6:4e:5a:c4:5d:1b:16:19:ca:fb:2b:bc:cd:8e:e8:8c:9b:9f:
e5:d2:83:c3:71:ba:0d:7e:c4:fb:9f:45:df:36:fd:73:f4:f0:
87:70:a5:ee:37:2f:5e:3d:b6:7d:c8:15:79:85:98:47:b0:fc:
7e:6d:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:23 2025 by rpki-client