Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: ftuyUGKuaJDFZWeqw2K2w/yaGBEhM/18Ii8fH3qCXUo=
Subject key identifier: F1:D5:97:DC:13:17:12:A6:20:7F:0F:82:52:F8:12:49:96:B0:F1:F1
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 0196760BDF6E3B2A6BC16D7138572495BF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 10CE
Signing time: Sun 27 Apr 2025 07:00:11 +0000
Manifest this update: Sun 27 Apr 2025 07:00:11 +0000
Manifest next update: Mon 28 Apr 2025 07:00:11 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: ByVn33AnCeB7F6NajTJpEYKofBk4ntgDvFmSeexLX8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:df:6e:3b:2a:6b:c1:6d:71:38:57:24:95:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Apr 27 07:00:11 2025 GMT
Not After : Apr 28 07:00:11 2025 GMT
Subject: CN=f1d597dc131712a6207f0f8252f8124996b0f1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:86:bd:8f:8a:f3:70:05:d8:38:52:d9:78:
d5:8f:0c:80:4a:f9:93:8a:3b:12:34:6c:8f:23:f4:
3e:58:32:0a:85:76:50:17:74:0e:19:22:26:ff:ec:
0a:75:98:52:ac:94:96:ef:3d:17:a5:e1:fe:ba:e2:
e9:2c:bc:35:f3:1b:e4:de:da:c5:df:86:5f:2e:6a:
f0:13:32:de:1a:c3:6c:81:f6:32:81:02:46:65:7e:
7a:73:c2:46:d0:05:d9:a2:5f:49:97:f7:42:cd:24:
fb:c2:fd:13:a7:01:9c:86:aa:97:7a:fc:9b:c3:26:
b9:5d:62:f5:52:ac:5f:62:67:90:05:ea:e1:e4:5d:
e1:00:9f:83:fa:a2:b2:a0:5e:98:79:c5:fc:21:bf:
9f:b8:ce:52:22:10:50:b2:08:25:b1:53:df:18:c9:
b8:dd:97:87:69:aa:8f:fb:8d:50:83:1b:9a:2b:f6:
13:f9:78:6f:c9:5b:e4:2e:5f:4b:3e:39:01:a9:12:
d0:99:2e:9f:df:e2:44:23:3e:97:f9:f0:58:66:f4:
51:e9:52:a8:0a:8b:0e:7f:25:0b:0a:99:f6:4f:39:
d0:54:3e:fa:91:95:fb:6e:ca:7c:70:62:24:2e:30:
0d:d1:00:4b:c4:20:00:3e:71:8a:de:f3:56:e8:94:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:97:DC:13:17:12:A6:20:7F:0F:82:52:F8:12:49:96:B0:F1:F1
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:f7:98:69:f9:98:6b:a7:a6:a5:da:ef:35:d0:60:0c:6b:
25:d8:95:4d:63:ac:72:32:61:b5:ad:93:28:16:fa:b2:73:54:
14:a1:23:3a:23:7c:9f:5b:45:92:fb:0b:59:41:b5:75:65:91:
02:5e:17:6e:53:2c:ff:4a:28:84:a8:4f:fb:a4:6b:b0:02:f2:
17:c9:c1:5e:16:83:2e:3d:1e:bf:23:ef:57:0d:83:8c:24:08:
14:ef:70:57:70:f6:e7:56:72:75:9d:29:bf:57:47:eb:c0:a2:
4f:54:b4:fc:e0:31:38:1a:4e:0b:00:bb:99:33:6e:84:5b:9e:
51:ca:88:ef:55:54:81:08:49:a2:1d:35:b6:f3:aa:29:7f:14:
1e:56:be:d6:ea:3f:09:e1:e1:ea:86:e0:c1:b2:82:81:d7:84:
60:28:ea:3c:6c:48:56:22:5e:22:45:7a:43:82:19:e1:32:c8:
f3:a1:6f:ba:df:b9:f1:08:6a:e7:03:87:d8:56:94:97:37:77:
ef:6d:5a:a7:14:15:33:f6:bb:6d:66:b0:40:35:06:e0:bf:9e:
ca:04:50:89:c2:ea:40:52:88:b9:4d:da:9e:bf:4c:ac:5f:0d:
7e:c2:3f:5c:6c:df:f6:a6:c4:bc:cd:c5:56:39:16:95:95:f6:
79:fc:92:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C99uOyprwW1xOFcklb8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDk1YzlmNzQ3YjFjOWU5YmRjNTcxN2E3MjVlODA1OTg3
NGNiZWYwHhcNMjUwNDI3MDcwMDExWhcNMjUwNDI4MDcwMDExWjAzMTEwLwYDVQQD
EyhmMWQ1OTdkYzEzMTcxMmE2MjA3ZjBmODI1MmY4MTI0OTk2YjBmMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk2GvY+K83AF2DhS2XjVjwyASvmT
ijsSNGyPI/Q+WDIKhXZQF3QOGSIm/+wKdZhSrJSW7z0XpeH+uuLpLLw18xvk3trF
34ZfLmrwEzLeGsNsgfYygQJGZX56c8JG0AXZol9Jl/dCzST7wv0TpwGchqqXevyb
wya5XWL1UqxfYmeQBerh5F3hAJ+D+qKyoF6YecX8Ib+fuM5SIhBQsgglsVPfGMm4
3ZeHaaqP+41QgxuaK/YT+XhvyVvkLl9LPjkBqRLQmS6f3+JEIz6X+fBYZvRR6VKo
CosOfyULCpn2TznQVD76kZX7bsp8cGIkLjAN0QBLxCAAPnGK3vNW6JRzywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHVl9wTFxKmIH8PglL4EkmWsPHxMB8GA1UdIwQY
MBaAFLYJXJ90exyem9xXF6cl6AWYdMvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMt
YmRiOTNlYzAxNzllLzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMtYmRiOTNlYzAxNzll
LzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkP3mGn5
mGunpqXa7zXQYAxrJdiVTWOscjJhta2TKBb6snNUFKEjOiN8n1tFkvsLWUG1dWWR
Al4XblMs/0oohKhP+6RrsALyF8nBXhaDLj0evyPvVw2DjCQIFO9wV3D251ZydZ0p
v1dH68CiT1S0/OAxOBpOCwC7mTNuhFueUcqI71VUgQhJoh01tvOqKX8UHla+1uo/
CeHh6obgwbKCgdeEYCjqPGxIViJeIkV6Q4IZ4TLI86Fvut+58Qhq5wOH2FaUlzd3
721apxQVM/a7bWawQDUG4L+eygRQicLqQFKIuU3anr9MrF8NfsI/XGzf9qbEvM3F
VjkWlZX2efySWw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:16 2025 by rpki-client