Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: 7jieGczZ5FHfYHR1CA6HQqFabT7fTXnMQVI/3Aips/I=
Subject key identifier: 50:8C:DD:D1:23:0B:0C:C3:7D:A5:48:C5:6C:1E:F1:30:7C:75:FA:4C
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 019873E34C5B113AD642F3F5353E44CD8257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 11D6
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: /gtOxo8pEPGg7Xil9/loPr6n8zc45XMH7z8WAIv6hac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4c:5b:11:3a:d6:42:f3:f5:35:3e:44:cd:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=508cddd1230b0cc37da548c56c1ef1307c75fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:39:7f:4f:9d:6a:84:b6:bf:51:ac:6b:c9:
30:7b:e5:52:bd:ef:6a:75:74:1c:68:9d:3d:12:dc:
91:d6:7a:89:41:51:b5:82:5d:3f:0c:37:ed:f1:f8:
f2:2c:50:ed:5c:11:d7:57:9d:e9:5d:53:ae:af:11:
26:94:a7:b0:fb:1a:cc:35:ee:67:bc:c9:3d:f6:26:
d6:6d:b2:3f:da:fe:73:59:08:08:4e:e5:a5:90:58:
2c:6e:97:fd:4e:ec:0e:c6:bd:7e:fc:dc:61:c2:c2:
2e:58:a1:bc:2f:f4:ee:75:75:67:4c:2f:57:8c:07:
c2:31:ba:3a:55:10:76:37:34:86:23:52:da:ca:fc:
a3:1f:fb:06:25:e2:81:b6:12:c7:14:21:ca:dd:9b:
89:0d:5b:b3:8d:bc:61:db:9a:e0:b4:7c:03:be:70:
09:02:19:8b:63:3a:f6:38:98:f9:42:06:46:67:71:
5f:94:97:86:91:73:c5:70:7c:51:bb:7e:09:d9:85:
81:d2:9f:00:dd:f6:9c:19:15:4e:39:74:34:32:10:
a1:67:32:5e:70:e4:75:ca:bc:35:15:14:38:d8:eb:
1a:86:6b:18:6b:80:c2:5b:53:6b:2c:c3:10:5b:cd:
3c:c6:c8:9b:1f:28:75:57:6a:b0:d1:54:b7:43:ca:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:DD:D1:23:0B:0C:C3:7D:A5:48:C5:6C:1E:F1:30:7C:75:FA:4C
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8d:e0:6e:44:b1:65:69:c2:23:ee:26:6e:9f:03:01:b6:aa:
56:24:d2:17:53:7e:3e:53:60:1d:1e:80:bf:48:ea:5b:8c:ea:
7e:90:95:7a:4f:71:42:ed:cd:62:57:9c:b5:fc:61:15:52:7e:
a1:db:1a:c1:63:96:33:80:9f:9e:17:d5:bf:59:ed:7f:3f:9c:
bf:1e:18:ac:23:05:e1:17:f5:6e:6c:b5:5d:24:2e:7d:d4:be:
88:81:ef:c4:76:0c:53:9f:d5:3b:75:fc:6d:cd:80:e0:cf:bc:
7b:ec:02:9d:9c:1b:5a:f3:0d:6f:32:91:65:51:b6:10:8b:03:
79:4e:5b:9c:f3:e6:a0:86:62:dd:e4:29:9d:5d:82:9d:8f:21:
d6:1d:48:db:cf:4d:48:d2:2e:c2:3f:eb:cf:32:60:e5:09:80:
83:bb:28:d4:49:46:cf:d5:4a:89:f0:ee:87:82:ae:f4:b7:7b:
95:c1:e3:ed:00:b0:d2:43:04:3d:2e:50:cf:b7:ed:21:36:a9:
01:d9:5f:1b:fb:19:07:1f:5b:b3:fa:12:c5:26:c3:de:6d:d9:
80:47:82:31:96:6d:be:50:c4:6a:aa:12:c4:36:1c:1f:b8:ae:
96:c3:c0:13:bc:cf:67:fe:b1:b6:fb:f5:d8:b2:1c:c4:5e:fe:
5d:85:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:38 2025 by rpki-client