Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: hEuhn359dTVruPFNDjLEr3tkyIrQ5EA6jVN/PHaFhNQ=
Subject key identifier: 90:BB:3C:DB:96:02:70:4A:19:9A:0F:DF:90:70:17:2D:31:09:77:C9
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 01974E584B6CBB95366B0420E42038AD0E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 0482
Signing time: Sun 08 Jun 2025 07:01:38 +0000
Manifest this update: Sun 08 Jun 2025 07:01:38 +0000
Manifest next update: Mon 09 Jun 2025 07:01:38 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: TlLGvelUdSJBCyXuLkP0K6TieCB4Pf7k5oKeOLBAAZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:4b:6c:bb:95:36:6b:04:20:e4:20:38:ad:0e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Jun 8 07:01:38 2025 GMT
Not After : Jun 9 07:01:38 2025 GMT
Subject: CN=90bb3cdb9602704a199a0fdf9070172d310977c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:ac:59:c5:62:5d:9b:4d:55:57:c4:1b:9d:
1d:2a:1e:bc:e8:a3:c2:5e:d0:e6:56:d3:eb:84:bd:
d5:b2:15:80:ad:69:2f:0d:d5:fe:5d:2c:ce:39:71:
7d:12:05:4e:a6:a3:46:20:5c:e0:c6:a5:a4:39:d1:
26:80:98:72:8a:8a:4c:e5:2a:db:2d:c4:b4:7f:1d:
a1:fc:f1:0b:ef:8d:ab:fe:0b:c5:86:04:29:d7:23:
a7:ab:1a:f7:2e:2f:f2:d6:31:d4:66:75:b6:78:af:
58:51:c9:bb:64:d3:d3:87:8b:96:af:a5:50:5e:c7:
c3:a7:99:86:64:7b:a0:1a:81:92:a0:9a:10:41:5d:
45:26:3d:f4:4e:ce:0f:59:c8:92:cd:7b:f2:7e:e7:
15:ff:0a:f8:c1:cb:ea:b6:8d:66:6e:d0:bc:85:4e:
1f:bc:9c:4c:18:3f:d1:ba:37:e5:16:db:7c:af:8d:
8d:cc:13:27:22:32:38:6c:03:49:0f:08:67:89:fd:
97:e5:b6:35:d9:ff:13:ee:8d:3a:6c:3b:96:9a:2a:
05:72:bb:a3:25:5f:8f:50:1a:cb:e5:28:05:af:0f:
4e:d6:41:a8:3a:59:fb:11:74:fc:34:6f:d9:e7:27:
8d:27:f6:bc:b5:39:ab:fc:cd:74:61:04:8c:09:59:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:3C:DB:96:02:70:4A:19:9A:0F:DF:90:70:17:2D:31:09:77:C9
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:87:c9:8c:8d:5c:45:32:ab:f8:01:15:1e:2b:58:2c:18:80:
bf:e2:75:c6:6b:00:d3:1f:2e:59:0c:b6:a5:34:ed:69:26:eb:
3e:f7:4b:7a:18:74:e0:57:99:e7:0c:26:81:2e:52:79:83:06:
bc:29:c3:78:f4:5a:01:e7:13:1c:bb:45:f5:11:81:01:92:b8:
92:c8:b4:a7:12:f0:19:ed:57:4b:3a:09:dc:f6:88:f3:34:cf:
5f:ee:d1:dc:96:c0:b4:5a:39:86:bc:d3:d8:cf:86:98:01:ae:
46:22:af:01:ad:65:96:9b:83:9b:ec:bb:f9:c5:d1:3c:8d:5f:
f3:4f:6f:de:51:6d:eb:38:92:f4:b4:c4:bb:4c:12:e5:f1:27:
08:7c:73:ef:68:45:9b:45:43:e0:52:0e:31:f1:45:52:6c:b7:
c0:28:d1:ce:ab:c7:31:c0:ae:ba:21:03:88:65:2e:78:24:07:
a3:5e:79:a7:d1:dd:f5:9f:74:10:56:af:25:00:42:69:df:74:
49:f0:4e:b3:f4:e6:c2:32:54:c5:b4:12:1d:f2:b5:f7:13:fd:
ce:73:e2:f8:ee:53:37:50:97:fe:2e:a3:eb:21:8a:06:53:e9:
c5:23:1d:c2:ae:80:b5:a1:7a:1f:31:31:2a:79:c4:5c:3e:b0:
08:52:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:02 2025 by rpki-client