Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: uERue1ku1Fu8WMKWtxH0Rfzq0FJB6P6DQnrfbGPlhGQ=
Subject key identifier: 63:9B:A2:48:C5:EC:23:F1:2F:22:DA:C2:6B:42:AD:5F:C8:7E:43:F0
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 0197B6A13563030F808456736D0153B7FB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 1174
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: HgCLM9dHDH+3bRlgteCh813WKFrcEaBm9h+oabDJaZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:35:63:03:0f:80:84:56:73:6d:01:53:b7:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=639ba248c5ec23f12f22dac26b42ad5fc87e43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c0:e9:73:c8:21:a3:49:36:4e:a5:8b:c8:96:
ff:51:cc:e1:92:fc:3f:db:7a:99:49:75:cb:aa:72:
2b:24:49:c4:c1:ac:a7:84:84:7b:e9:27:0e:ee:4b:
5a:cc:01:81:a2:f1:62:d8:e6:ca:db:f7:57:be:85:
2c:fa:03:91:89:d4:07:31:1b:9b:5d:12:1d:1b:44:
45:a6:34:19:d0:d6:13:f4:ff:48:24:bb:b9:20:42:
ee:05:2f:7f:4d:70:75:7a:71:2b:e3:e7:71:87:6e:
97:df:a8:fa:28:4d:70:61:c2:83:b3:93:df:59:55:
a7:23:bc:55:ff:32:f3:ca:2f:fb:2f:4c:10:55:49:
f7:cf:28:c7:ea:6f:74:03:f0:67:f3:69:45:01:95:
04:ad:df:a2:81:eb:2b:f8:c1:22:b5:6d:bd:f4:3c:
82:a3:20:b8:e3:62:2b:38:6c:08:83:bf:2f:a2:8f:
f7:db:65:3b:85:4f:91:55:90:f8:b2:05:b4:4a:f5:
a0:6c:5e:72:10:43:aa:72:a3:9f:8d:48:2f:36:50:
05:b5:39:63:30:85:10:88:5f:c5:92:66:1a:55:bf:
cc:bd:ec:ee:74:4c:9c:d8:e8:4a:23:4d:fb:bc:d2:
7c:81:56:20:96:11:b2:62:15:11:bf:80:c4:87:ab:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:A2:48:C5:EC:23:F1:2F:22:DA:C2:6B:42:AD:5F:C8:7E:43:F0
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:20:e7:ef:7b:9e:02:4c:e2:4d:da:b0:51:e8:8c:e0:6c:d8:
cf:21:15:8a:4d:6d:0a:cc:62:9c:02:2e:3a:b3:cf:22:f8:e6:
70:1f:1c:cb:10:02:dd:cd:87:01:8a:8b:8b:07:49:d5:37:a0:
6e:b8:05:9c:4f:d8:24:10:9a:48:90:88:53:72:7d:5e:d3:ab:
f0:3d:fb:78:7e:60:a2:c6:4b:50:6d:03:5d:59:94:fc:4a:0a:
ad:ce:d5:a8:a0:89:b2:6b:c8:9d:de:83:c0:04:52:a1:f4:84:
e5:6c:a1:b1:2d:5e:18:0e:39:5b:58:b7:12:19:e1:a2:40:78:
bf:48:d0:19:6a:00:a7:54:32:77:f3:fe:66:01:2b:01:16:0f:
20:8f:59:cb:e9:62:35:97:bc:ea:2e:14:34:0e:d1:cc:04:ff:
0d:67:22:63:b7:87:dc:52:5a:18:fc:74:2d:56:ad:2b:ad:b2:
0a:eb:53:81:a9:95:ef:af:1c:20:33:2e:35:0c:43:41:90:ef:
67:81:c6:7c:bc:b7:93:ab:f4:62:63:73:3a:c7:91:6c:6e:8e:
74:17:91:08:93:ff:6b:b7:b9:a0:14:ad:b2:e9:53:96:2f:d9:
70:d2:ca:d0:62:22:9a:d4:6e:e4:34:5d:bb:60:77:d3:88:2f:
9c:af:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:50 2025 by rpki-client