Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: 81HjifqJ1iykrctGq818Uhm2P/3SsYdLiM4pSflvh8o=
Subject key identifier: 79:66:97:5D:84:6D:8D:D0:B3:42:1A:96:B0:A0:3C:24:00:0C:FD:35
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 019A2855885E467745066D00DE7805C567A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 05FC
Signing time: Tue 28 Oct 2025 01:01:25 +0000
Manifest this update: Tue 28 Oct 2025 01:01:25 +0000
Manifest next update: Wed 29 Oct 2025 01:01:25 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: RxDt+umnju9e9e5dn8CU11Zo1EeI9Pg6gEWS9K9ESS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:88:5e:46:77:45:06:6d:00:de:78:05:c5:67:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Oct 28 01:01:25 2025 GMT
Not After : Oct 29 01:01:25 2025 GMT
Subject: CN=7966975d846d8dd0b3421a96b0a03c24000cfd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:bf:73:cd:c5:76:07:98:f4:e8:e5:12:9e:
1b:c4:86:94:08:a7:75:6d:dc:1b:56:15:76:8d:f7:
1e:ed:81:4b:a0:6e:bd:d6:c2:6d:79:af:55:04:72:
ec:6b:f7:e4:0e:8d:a8:e3:c7:74:fd:1b:80:e3:e4:
9d:0b:2f:de:80:4b:e1:32:ba:cb:ac:57:cf:eb:b8:
19:57:98:9d:8e:6d:9b:1b:b5:29:ce:d3:01:9d:47:
71:16:05:da:3a:fb:af:8f:89:cb:0d:27:e8:a7:79:
07:a4:32:ce:8a:0e:ce:07:70:be:10:3f:48:2a:ee:
00:e1:67:be:06:05:23:16:1d:b1:39:92:03:9f:bd:
35:ad:58:71:d7:3b:c3:36:3d:60:72:fd:31:d3:ce:
f3:e5:f8:94:b4:af:ab:58:9e:c7:88:68:e0:63:7c:
b9:28:71:d2:c5:01:78:51:17:05:19:00:03:de:03:
78:a5:9f:38:70:bb:e7:17:78:f7:c4:07:d5:62:d5:
0c:c3:b9:ae:ab:15:2b:6b:5f:5e:50:3d:9f:b5:46:
85:d6:5d:46:38:39:e5:e2:02:e3:8a:55:45:56:e5:
45:ba:36:c6:ee:76:18:99:60:fe:ee:61:eb:7d:cb:
d9:0a:6e:ee:ef:f5:b3:50:8d:e4:05:d7:a7:62:90:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:97:5D:84:6D:8D:D0:B3:42:1A:96:B0:A0:3C:24:00:0C:FD:35
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3d:1e:e5:05:66:5d:40:97:32:37:49:ce:fb:cc:bf:1f:9e:
d8:3f:f8:fd:96:bb:4e:81:83:c0:dd:04:0f:a2:c2:96:73:96:
b5:c6:0d:e4:67:5a:ae:38:9a:53:43:fd:98:b5:01:f3:25:f9:
be:40:c7:5b:c8:b6:44:73:13:f5:f7:76:b8:10:fc:34:69:b5:
41:d8:75:8f:37:b6:f3:58:8b:d7:40:24:f3:cf:87:68:6e:ef:
c5:bd:f0:16:87:8e:c6:8b:36:4f:7c:6b:69:e3:19:a3:be:85:
cf:41:09:11:e6:aa:a2:70:9a:39:25:dd:d2:85:17:68:54:ac:
89:d6:51:2f:8e:49:27:b9:03:c0:0d:ca:5e:e9:8e:06:41:ae:
95:f2:f9:a3:07:c5:94:5c:21:94:a1:c2:0d:83:de:47:ae:d9:
18:85:0b:a1:c6:10:bc:c7:3c:4a:ad:84:b9:c6:dd:cd:c0:9a:
01:d2:77:46:39:34:11:b2:f6:35:ab:53:6d:eb:81:a3:0e:5f:
31:ab:a4:6c:3a:24:af:5d:dc:74:8d:4c:64:72:ab:c1:92:19:
c1:b6:55:70:7d:ec:68:06:58:97:29:1c:97:45:a0:d4:b3:6b:
00:b5:e5:55:24:63:2c:ce:55:72:82:e3:2d:22:ed:e9:50:a3:
88:d0:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:12:23 2025 by rpki-client