Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: aCLUAmPMA3HBG1UyJsx1s28oBFiemED8+tt7q1jIYHI=
Subject key identifier: 02:32:70:5F:70:9A:F7:0B:B5:68:62:04:3C:FC:F7:9A:6B:53:EE:D8
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 0196A842A1E1DB92809FDAF313D9A323DBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 10E8
Signing time: Wed 07 May 2025 01:01:01 +0000
Manifest this update: Wed 07 May 2025 01:01:01 +0000
Manifest next update: Thu 08 May 2025 01:01:01 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: 0d67ZL6KgYvkuMim7R3lDcl48QgAv8auHTIK2fY9rQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:a1:e1:db:92:80:9f:da:f3:13:d9:a3:23:db:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: May 7 01:01:01 2025 GMT
Not After : May 8 01:01:01 2025 GMT
Subject: CN=0232705f709af70bb56862043cfcf79a6b53eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:ee:85:79:d2:40:e1:30:1a:c2:1e:54:88:
64:f0:af:de:33:4c:bb:4b:4f:ca:0f:a5:58:37:ac:
7f:fd:12:73:eb:79:7d:b1:0f:a0:4c:aa:a2:30:40:
6c:ed:bf:c7:29:04:6e:96:34:4f:79:b3:92:4f:26:
63:70:e1:61:92:35:f5:05:b8:8e:ec:ed:c7:5d:b9:
f2:d3:2a:ac:43:15:0f:9f:4a:cc:10:d5:c4:ac:7f:
32:da:33:85:e1:17:a3:67:da:5e:e4:4f:b0:f8:d0:
66:24:67:4d:cf:16:a4:df:ad:3a:47:a9:b7:a0:0e:
26:65:0d:70:09:d5:a4:22:4f:94:62:fd:84:e6:e0:
df:69:e6:f7:7a:99:4c:d2:58:88:db:d7:da:f8:f7:
1c:c7:83:42:d9:ea:c8:24:ee:ae:92:90:41:2b:c7:
ec:70:91:1d:d5:82:3b:af:fc:a3:85:1b:e4:b4:b3:
15:f9:65:be:26:9c:39:e7:d2:85:85:f5:ae:7e:55:
29:cf:c7:f7:96:ae:49:ed:e1:63:cf:8a:a1:f7:e1:
8e:ac:b9:f0:49:84:67:32:a0:75:b4:be:41:22:f2:
64:d0:37:b4:c5:24:aa:f4:b6:3f:75:55:c9:b4:0d:
02:ca:4f:fe:4a:ec:0e:66:06:b6:85:66:6d:58:bb:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:70:5F:70:9A:F7:0B:B5:68:62:04:3C:FC:F7:9A:6B:53:EE:D8
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:65:68:17:0d:bf:6c:aa:99:48:6b:15:ff:d6:a1:e9:2f:6a:
02:5c:ee:11:84:21:c8:71:67:0d:84:1e:53:c8:8a:de:06:fb:
34:f1:44:e4:09:47:a8:a3:c6:91:cc:b2:2c:9d:e1:ca:30:33:
08:d1:e3:a6:4a:db:20:08:81:b8:28:64:56:5e:6a:31:cd:20:
1c:9a:37:89:04:35:e7:58:a9:e7:0c:04:fc:15:55:8a:1b:ae:
54:31:5e:d1:be:56:f1:19:25:a4:0c:ef:cf:65:4c:ba:d6:79:
ee:ac:c2:d3:e7:13:94:f9:bd:ea:c1:6d:b5:ee:80:1f:94:22:
75:d1:2a:08:11:64:83:f5:56:c3:b7:45:7a:14:de:25:fd:70:
fb:07:78:1a:d6:c7:54:37:1f:4e:46:cc:e4:69:77:8e:7d:f7:
7f:3e:a2:5c:0a:8b:ef:49:62:72:57:75:85:f1:b3:27:20:81:
97:a8:b9:dd:d9:c6:52:59:17:11:44:fc:c1:4e:68:6e:42:cc:
1f:bc:6b:26:b1:a3:8e:e0:d2:15:2d:ec:79:40:99:a9:82:ed:
a1:09:28:b6:59:4f:18:b6:78:ed:a4:57:55:d8:f2:e4:a8:2a:
bc:e0:98:33:52:e0:51:62:5e:c1:37:83:3f:7f:e5:b0:52:b6:
0b:d4:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:04:20 2025 by rpki-client