Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: 5DyM6oKz1KqQpyXYQVJ6TMy+oG853R0rDqYETU79tTY=
Subject key identifier: 89:54:C0:0C:05:C6:E4:DD:2B:B0:5E:D4:09:D7:9F:2C:3D:1F:13:22
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 0199FBEAD75A0C1BF78C1B83F09A7CE30AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 12A1
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: V4gFIzlqSxRNWlZyOR44nBChJrG/peH3LYQjMpO/xgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d7:5a:0c:1b:f7:8c:1b:83:f0:9a:7c:e3:0a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=8954c00c05c6e4dd2bb05ed409d79f2c3d1f1322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:04:c2:37:03:9f:bd:bb:db:f5:ae:95:17:b5:
bd:40:a2:7a:93:ba:53:1d:a0:5b:67:18:34:66:7c:
c1:95:02:0f:3d:fa:86:7e:b9:aa:b2:a7:83:29:ff:
10:3d:c3:aa:99:e3:f3:0b:43:57:4f:d6:61:d8:83:
30:92:f2:4b:0c:4a:67:0e:6d:38:fa:4f:21:4d:ca:
22:c3:03:71:15:16:99:50:21:2b:a8:b4:d1:ff:36:
f8:c9:43:46:d1:e2:9a:89:40:4d:2a:6f:89:d7:3d:
05:41:9a:92:2a:a9:22:be:ed:92:43:f6:38:4d:df:
63:75:f6:93:e9:65:ae:2e:0b:8b:25:05:88:c9:ed:
f7:d0:7d:e7:6c:86:9b:27:be:a9:f1:42:f3:d2:86:
c4:f6:70:34:b8:17:70:9e:01:a3:9c:14:9b:e9:6d:
89:d2:e2:20:80:61:a3:78:9c:4e:a0:db:db:13:09:
b8:f4:db:ed:76:23:40:14:22:33:02:7f:93:91:62:
7d:01:8d:42:61:b8:5a:20:7f:fd:2a:26:06:ca:66:
3c:6e:ac:54:dd:a6:9d:00:ce:4c:7e:9f:74:13:d3:
b1:75:93:7b:e5:29:e8:ab:46:b0:76:67:42:8c:4c:
0b:89:88:0b:ee:d9:cb:13:c0:88:5b:ea:8c:ba:d9:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:54:C0:0C:05:C6:E4:DD:2B:B0:5E:D4:09:D7:9F:2C:3D:1F:13:22
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2b:2c:aa:32:86:3e:8e:f6:bd:f5:76:cc:89:c2:01:da:79:
75:2a:7f:6d:63:7a:8b:f6:c5:9b:6b:71:2d:7d:18:76:51:68:
92:15:4c:26:e1:20:ed:a6:02:76:20:88:9f:52:6c:2c:90:36:
b8:91:80:39:76:7c:b7:7b:a1:51:2f:ba:d2:30:14:2d:6d:a7:
0a:35:49:10:b5:c4:d6:74:ca:66:d1:07:48:e4:17:53:62:c1:
8f:4d:e5:64:ee:e9:0e:e2:81:dc:95:da:7c:20:7e:9e:3a:80:
03:43:f2:1f:df:56:67:5d:97:18:07:c5:47:03:eb:23:fb:dd:
d0:3e:8e:da:06:27:f1:01:dd:24:8a:86:75:a6:53:7d:e6:c0:
77:8c:27:92:8e:2e:c2:54:29:f4:2f:b5:f3:82:50:1c:67:59:
b8:f8:a7:e3:d5:02:28:51:2a:41:bb:66:6f:d8:15:b4:05:c4:
4b:13:ab:5b:cb:9e:fe:23:aa:be:3a:bc:32:e8:ba:8c:9d:d5:
32:09:99:18:15:0d:18:02:7a:48:f9:8d:f5:fa:29:6b:ef:00:
c9:7d:57:35:2b:8f:fe:57:b1:a7:10:41:e6:74:79:83:b6:cf:
76:10:56:aa:50:62:67:3b:68:e9:b3:f6:b6:5f:3e:1c:9b:84:
ff:ac:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:46 2025 by rpki-client