Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: tSMKb+zJIVWxto62lavhl4SrCJOpQDteuv/kKOZ9r/w=
Subject key identifier: 53:A6:43:7E:E0:65:AB:88:AD:9C:6C:70:00:3E:53:AD:41:02:49:D1
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 019A52D1F784D425FA2FC612E18B95124B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 12CE
Signing time: Wed 05 Nov 2025 07:01:23 +0000
Manifest this update: Wed 05 Nov 2025 07:01:23 +0000
Manifest next update: Thu 06 Nov 2025 07:01:23 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: 4kjeUThDqvng5lsJ/+NljWS6yytXGYW5KTYByX9q8sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f7:84:d4:25:fa:2f:c6:12:e1:8b:95:12:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Nov 5 07:01:23 2025 GMT
Not After : Nov 6 07:01:23 2025 GMT
Subject: CN=53a6437ee065ab88ad9c6c70003e53ad410249d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:57:97:01:2f:d3:17:b2:4e:19:ac:e9:96:1f:
18:08:ee:00:ed:7c:59:84:f8:3b:4e:c1:41:f3:ca:
97:9e:6d:b7:cd:fd:6a:a4:0c:3f:26:cb:e5:d5:27:
e1:03:a5:a0:b6:7f:c9:a4:1d:32:d3:11:50:2c:fc:
70:4d:93:ff:0b:f5:b0:a7:62:e8:d2:38:ca:7a:1c:
6b:f3:85:a2:69:a9:57:b1:45:3f:ea:21:5f:7b:73:
de:ce:5e:99:0a:21:42:4c:1d:7a:33:e4:cc:d9:d7:
30:ee:e1:28:d6:dd:73:d1:be:bc:f3:4e:90:28:68:
8a:fa:68:fb:87:f0:1b:12:59:d8:4a:95:4c:8d:08:
eb:ea:a6:76:70:ea:e8:fa:ba:79:e7:e2:b0:36:9c:
f4:5b:c7:5e:55:b3:a7:f0:90:48:ef:82:aa:e1:b5:
65:33:f0:dd:70:69:61:d3:7a:74:4c:9f:61:64:7d:
1a:41:7d:ca:f3:00:9d:f3:3e:d9:4c:39:9a:8d:75:
86:83:fd:a1:d8:20:74:20:d6:88:ab:08:9c:97:77:
c8:64:fa:40:5a:1f:e6:4b:5d:cd:18:9c:a5:ba:fe:
ba:b5:a5:c4:d8:96:12:20:72:2a:1f:af:3e:16:42:
a2:7f:e1:86:b8:83:52:49:a0:39:8f:b3:48:be:1a:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A6:43:7E:E0:65:AB:88:AD:9C:6C:70:00:3E:53:AD:41:02:49:D1
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:a1:a6:43:ed:b5:49:75:96:45:5f:db:d4:5a:f7:6b:cd:
b2:46:36:7e:d7:d4:ab:39:7d:ea:e6:f6:83:ed:f9:e4:af:97:
60:e2:96:51:5d:46:a3:9d:54:7b:4b:3c:55:fe:86:80:19:d8:
8f:ca:a7:7e:a2:00:4f:a9:ff:68:6c:36:2a:bc:1c:79:f1:34:
0d:1b:51:8d:72:af:64:9e:15:ec:6b:46:f5:82:46:9c:b0:50:
04:15:fc:79:ee:10:0c:a7:64:2e:b4:28:69:c3:a0:5e:72:d9:
29:b2:52:af:90:11:83:12:83:a1:67:70:f6:31:e0:2a:21:55:
b2:a7:92:7e:84:d0:54:80:85:7b:bc:cb:1e:e8:af:68:21:37:
43:9a:98:69:59:29:07:54:01:0d:b4:16:0a:1e:f9:a4:aa:66:
a1:97:f6:ef:de:dc:a1:0b:03:4c:5e:5e:31:1f:3e:91:94:35:
7c:0a:91:eb:3a:37:a9:21:4c:4c:e3:c7:7a:fc:17:cb:06:55:
fa:f2:44:02:f2:af:2a:86:d7:54:32:5a:79:4f:eb:8b:c1:ca:
13:a6:56:42:36:74:98:ee:e0:1e:7a:4d:83:0b:b4:15:3c:86:
17:5f:23:b8:54:b4:de:0a:4b:53:ae:0f:bb:91:a7:66:9b:90:
1a:e4:60:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0feE1CX6L8YS4YuVEksHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDk1YzlmNzQ3YjFjOWU5YmRjNTcxN2E3MjVlODA1OTg3
NGNiZWYwHhcNMjUxMTA1MDcwMTIzWhcNMjUxMTA2MDcwMTIzWjAzMTEwLwYDVQQD
Eyg1M2E2NDM3ZWUwNjVhYjg4YWQ5YzZjNzAwMDNlNTNhZDQxMDI0OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7leXAS/TF7JOGazplh8YCO4A7XxZ
hPg7TsFB88qXnm23zf1qpAw/Jsvl1SfhA6Wgtn/JpB0y0xFQLPxwTZP/C/Wwp2Lo
0jjKehxr84WiaalXsUU/6iFfe3Pezl6ZCiFCTB16M+TM2dcw7uEo1t1z0b68806Q
KGiK+mj7h/AbElnYSpVMjQjr6qZ2cOro+rp55+KwNpz0W8deVbOn8JBI74Kq4bVl
M/DdcGlh03p0TJ9hZH0aQX3K8wCd8z7ZTDmajXWGg/2h2CB0INaIqwicl3fIZPpA
Wh/mS13NGJyluv66taXE2JYSIHIqH68+FkKif+GGuINSSaA5j7NIvhr0dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOmQ37gZauIrZxscAA+U61BAknRMB8GA1UdIwQY
MBaAFLYJXJ90exyem9xXF6cl6AWYdMvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMt
YmRiOTNlYzAxNzllLzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMtYmRiOTNlYzAxNzll
LzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjyhpkPt
tUl1lkVf29Ra92vNskY2ftfUqzl96ub2g+355K+XYOKWUV1Go51Ue0s8Vf6GgBnY
j8qnfqIAT6n/aGw2KrwcefE0DRtRjXKvZJ4V7GtG9YJGnLBQBBX8ee4QDKdkLrQo
acOgXnLZKbJSr5ARgxKDoWdw9jHgKiFVsqeSfoTQVICFe7zLHuivaCE3Q5qYaVkp
B1QBDbQWCh75pKpmoZf2797coQsDTF5eMR8+kZQ1fAqR6zo3qSFMTOPHevwXywZV
+vJEAvKvKobXVDJaeU/ri8HKE6ZWQjZ0mO7gHnpNgwu0FTyGF18juFS03gpLU64P
u5GnZpuQGuRgQw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:37:21 2025 by rpki-client