Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File:                     tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier:          wIAd6PUTI1mC3y6acD1TTLd47D0c4nurXcggpTWugeQ=
Subject key identifier:   CB:5C:BD:6B:5D:87:47:12:6C:AF:5B:E6:AD:80:A4:6E:95:38:66:34
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer:       /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial:       0197488C860C84F38419874E8FA64363CA37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number:          113B
Signing time:             Sat 07 Jun 2025 04:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:58 +0000
Files and hashes:         1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: SFFxzKo4fzgLm6A7SXsnigKg4tVycQ9wgwyqZV4yCX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:86:0c:84:f3:84:19:87:4e:8f:a6:43:63:ca:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
        Validity
            Not Before: Jun  7 04:00:58 2025 GMT
            Not After : Jun  8 04:00:58 2025 GMT
        Subject: CN=cb5cbd6b5d8747126caf5be6ad80a46e95386634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:d3:e6:1d:93:05:a5:d9:db:0b:5c:a0:d3:
                    7e:86:e9:a7:54:71:8c:0c:5b:24:ba:24:6e:52:e7:
                    d8:3b:7d:7e:33:67:d6:eb:23:f6:5f:5f:51:00:7b:
                    3d:de:fc:50:07:f7:ae:58:21:dd:0c:2b:f7:11:8d:
                    b7:a9:49:85:c8:7d:4e:7a:43:0c:33:5c:5d:4b:67:
                    fe:2c:46:76:85:fd:f3:fd:1c:b4:ac:f3:df:14:e7:
                    d1:ec:c2:68:b9:4b:50:c7:0f:1e:07:1b:84:ef:aa:
                    4f:3c:31:04:4f:6b:38:f8:f9:6e:84:2d:15:57:b0:
                    5e:21:19:f6:f8:72:e4:76:61:8f:29:fe:55:c6:45:
                    82:ac:1a:83:24:7b:61:40:67:71:cc:5c:28:9e:ec:
                    11:b9:19:cb:fe:08:53:09:d5:01:6a:6a:58:3b:f0:
                    41:f0:40:f3:b6:c8:74:04:74:f3:16:c9:b8:a8:29:
                    a1:e5:1d:d4:76:a3:76:6c:11:e1:90:46:3b:ee:ee:
                    57:9d:3d:4a:be:cc:a6:64:d0:92:f8:a4:df:c3:85:
                    44:f5:f4:1a:c5:45:f8:c9:29:bb:ed:3f:95:97:86:
                    32:63:1c:53:57:7a:8d:e5:e2:4d:90:be:56:0c:a0:
                    58:0b:f4:43:0a:6f:ff:9d:8b:e7:8c:18:71:98:fa:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5C:BD:6B:5D:87:47:12:6C:AF:5B:E6:AD:80:A4:6E:95:38:66:34
            X509v3 Authority Key Identifier:
                keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:11:d0:fc:83:33:aa:37:a9:78:41:55:3d:79:67:13:75:
         9a:c8:21:e9:33:93:8b:22:67:92:96:4c:19:c3:c6:7f:07:67:
         ff:d3:b9:be:af:1b:02:53:b6:45:fb:11:05:8f:f0:da:4b:8a:
         68:dd:68:14:29:3d:fd:b4:6d:ef:28:f9:c4:fc:4f:af:43:bc:
         d2:5c:e9:94:12:75:0b:88:45:b2:58:40:2c:48:11:90:cf:13:
         11:78:08:d6:01:9d:4e:91:81:45:0f:6a:ea:e7:02:41:fa:ce:
         dd:6f:c4:59:46:7b:33:c4:54:7e:38:7d:7d:5d:e7:65:e1:cc:
         b8:7c:ff:80:d8:90:c6:41:69:a8:d8:27:0f:9d:79:aa:6e:84:
         58:d9:70:ff:d2:6d:2c:30:a8:b4:65:6c:9e:de:dc:6d:39:cc:
         5d:ed:53:9e:aa:a2:ec:2f:32:4d:d7:bc:20:75:2d:6f:38:48:
         46:37:f1:5b:fa:7d:74:e1:2d:b2:56:9b:27:cb:53:3c:6d:bb:
         34:79:bb:75:a3:75:bd:cb:2c:2c:3f:a3:cf:bf:6c:ff:89:f2:
         d6:87:0f:47:93:45:33:8a:d5:eb:eb:a9:cf:7b:30:97:0a:88:
         13:9d:9e:7f:1c:2b:15:52:9f:aa:db:4d:8b:e6:b1:49:98:0e:
         dd:df:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:44 2025 by rpki-client