Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: mUgHgfx+k6UAtvZ3W+VVf2QaNuADtefcYeh198RUWaA=
Subject key identifier: BC:6F:F3:04:84:33:FA:AB:4C:1A:CC:C5:20:C0:B3:18:74:93:A7:E9
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 01964F6D8C5D5CFB740C5A07D8AFAF6173D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 10BA
Signing time: Sat 19 Apr 2025 19:01:41 +0000
Manifest this update: Sat 19 Apr 2025 19:01:41 +0000
Manifest next update: Sun 20 Apr 2025 19:01:41 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: fq+tQHV3yjzEyl/UInU6JTxvU14ay4xEEe02FQDqnz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:8c:5d:5c:fb:74:0c:5a:07:d8:af:af:61:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Apr 19 19:01:41 2025 GMT
Not After : Apr 20 19:01:41 2025 GMT
Subject: CN=bc6ff3048433faab4c1accc520c0b3187493a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:47:7d:52:98:58:d0:d8:f6:bd:12:e9:5e:
0a:9b:c0:4a:54:a0:1f:46:92:4f:bf:03:ec:d2:a5:
d7:7f:7c:ef:8e:f1:b2:1b:4d:08:f3:d3:b4:9c:a4:
f1:85:2f:9c:a5:71:5d:04:ab:95:a8:90:b8:a2:01:
79:38:b3:62:5a:be:fe:0d:c2:14:61:d9:12:f8:9f:
fe:f8:16:51:f1:e2:15:72:7f:00:33:ea:68:e9:d3:
04:86:ea:52:7b:30:c5:92:3c:b5:e3:96:22:e2:5e:
d8:45:63:57:88:ab:53:35:e6:2a:87:2c:3a:75:44:
81:83:a5:88:30:4e:eb:b6:97:eb:ab:82:d6:00:7c:
8f:76:29:eb:a9:0b:b2:bf:75:0a:79:47:0e:a2:8d:
4a:90:1a:2d:5b:ce:1f:7f:19:69:d2:ca:95:d4:8b:
61:1e:fd:7c:7a:54:6d:d4:8a:0b:54:2e:a8:93:50:
70:54:ca:4e:05:3c:f4:b5:0a:e7:09:e7:82:93:48:
81:5c:2f:dd:13:89:f7:a2:82:a6:f4:59:7b:ac:04:
c6:4e:23:a8:d1:81:69:ec:0d:b3:3d:f6:b1:b6:47:
f0:5c:62:0f:fb:d4:5d:f9:3e:ad:ad:5b:43:69:04:
20:17:c4:9f:65:e5:86:c7:0a:33:41:bd:6b:96:93:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:F3:04:84:33:FA:AB:4C:1A:CC:C5:20:C0:B3:18:74:93:A7:E9
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:44:16:4d:4b:23:ec:5e:f6:4e:64:80:ed:4d:ab:6d:61:
a9:27:93:9a:17:37:db:e5:78:cc:95:6e:36:20:ff:a3:78:a6:
eb:a3:3f:20:fa:57:68:b7:d5:db:e5:ba:75:3f:d4:19:31:ad:
6b:c1:75:72:31:92:95:59:75:08:71:05:ec:3f:82:c7:41:16:
38:f6:72:ba:c5:da:d3:90:39:a8:50:86:11:0a:76:68:a0:76:
5d:f8:ab:7a:68:6c:22:50:59:a7:04:39:42:f9:d4:e5:6f:fd:
49:bb:bd:82:4e:92:b0:2c:69:da:a8:6d:d6:a8:de:85:78:4b:
80:94:f3:20:4e:3b:ca:9e:dd:68:b8:ed:72:57:fe:2a:c1:2e:
a3:4c:13:7b:ef:3e:c0:06:84:c5:93:dc:0a:7c:22:0d:7a:e4:
79:51:2e:df:bc:5e:4c:cc:67:27:26:65:69:e0:ed:b1:eb:ad:
69:d8:89:eb:26:a9:bd:a2:8b:4e:0f:91:42:9d:6b:46:9a:df:
1c:33:a2:6a:fb:6d:bf:7b:6d:92:4f:97:e8:20:ee:f6:c9:c5:
c7:27:3a:f3:75:f6:a5:72:3a:63:c3:82:af:fe:b1:a7:a3:84:
72:f2:5a:3c:59:99:4c:8c:c8:5e:85:7b:0d:1a:ac:08:04:94:
d5:0c:94:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbYxdXPt0DFoH2K+vYXPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDk1YzlmNzQ3YjFjOWU5YmRjNTcxN2E3MjVlODA1OTg3
NGNiZWYwHhcNMjUwNDE5MTkwMTQxWhcNMjUwNDIwMTkwMTQxWjAzMTEwLwYDVQQD
EyhiYzZmZjMwNDg0MzNmYWFiNGMxYWNjYzUyMGMwYjMxODc0OTNhN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdHfVKYWNDY9r0S6V4Km8BKVKAf
RpJPvwPs0qXXf3zvjvGyG00I89O0nKTxhS+cpXFdBKuVqJC4ogF5OLNiWr7+DcIU
YdkS+J/++BZR8eIVcn8AM+po6dMEhupSezDFkjy145Yi4l7YRWNXiKtTNeYqhyw6
dUSBg6WIME7rtpfrq4LWAHyPdinrqQuyv3UKeUcOoo1KkBotW84ffxlp0sqV1Ith
Hv18elRt1IoLVC6ok1BwVMpOBTz0tQrnCeeCk0iBXC/dE4n3ooKm9Fl7rATGTiOo
0YFp7A2zPfaxtkfwXGIP+9Rd+T6trVtDaQQgF8SfZeWGxwozQb1rlpPwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxv8wSEM/qrTBrMxSDAsxh0k6fpMB8GA1UdIwQY
MBaAFLYJXJ90exyem9xXF6cl6AWYdMvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMt
YmRiOTNlYzAxNzllLzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMtYmRiOTNlYzAxNzll
LzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKVEFk1L
I+xe9k5kgO1Nq21hqSeTmhc32+V4zJVuNiD/o3im66M/IPpXaLfV2+W6dT/UGTGt
a8F1cjGSlVl1CHEF7D+Cx0EWOPZyusXa05A5qFCGEQp2aKB2XfiremhsIlBZpwQ5
QvnU5W/9Sbu9gk6SsCxp2qht1qjehXhLgJTzIE47yp7daLjtclf+KsEuo0wTe+8+
wAaExZPcCnwiDXrkeVEu37xeTMxnJyZlaeDtseutadiJ6yapvaKLTg+RQp1rRprf
HDOiavttv3ttkk+X6CDu9snFxyc683X2pXI6Y8OCr/6xp6OEcvJaPFmZTIzIXoV7
DRqsCASU1QyUVQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:35 2025 by rpki-client