Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File: tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier: Hp8wE06QpE7lvtUXeRHf1S3QMMUwGL2kCsuDV587xFc=
Subject key identifier: 25:F6:CC:35:5A:07:BD:D1:4E:31:6A:39:A7:65:00:FD:DC:BB:D5:1F
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer: /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial: 019A71B88395D8C0880FD6228CC0753F054A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number: 12DE
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: 7s86q6hoDhwtBwlAfPYU+ZIkl8JADkYok1pL9X1J/fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:83:95:d8:c0:88:0f:d6:22:8c:c0:75:3f:05:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=25f6cc355a07bdd14e316a39a76500fddcbbd51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:f4:ab:d1:d2:fd:73:27:39:f3:c9:54:30:
cb:df:5a:b0:00:18:02:5f:e4:19:27:71:c9:18:6c:
0f:6e:7e:97:73:82:8c:f2:57:bd:5c:a8:3e:61:72:
5d:11:fa:fb:60:2d:45:96:c5:cf:8a:ed:23:91:79:
f2:e6:52:16:6d:5e:78:66:f3:10:f3:dc:88:02:80:
5c:ac:e4:67:4d:ec:69:9f:0c:56:c6:79:a5:cb:e6:
87:7d:ce:49:de:60:d0:b1:01:70:75:9c:76:f5:f7:
88:5d:f6:a3:57:91:e7:d8:ba:b3:1d:ba:f9:9f:3f:
45:1d:f1:9c:7b:31:1f:55:8e:90:1d:c3:5b:85:cc:
23:4d:68:12:62:4c:c8:28:2e:ec:da:93:d0:cd:bd:
08:de:9d:cf:67:26:1a:e1:de:52:22:f5:06:c4:96:
2f:49:17:7d:00:a5:70:09:40:a7:bf:a9:6a:3e:81:
18:ad:5e:f3:9e:c1:dc:30:d4:d7:17:f1:37:51:19:
69:9e:6b:88:e1:cc:8c:f6:17:bf:6b:bd:8a:39:52:
76:12:ca:f1:c8:60:89:10:ce:75:93:fb:20:2a:c0:
9f:4c:89:cd:64:21:62:88:ce:80:e7:d4:c7:cd:43:
e7:5b:ec:89:07:6c:57:50:2c:df:93:8e:75:18:5a:
22:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:CC:35:5A:07:BD:D1:4E:31:6A:39:A7:65:00:FD:DC:BB:D5:1F
X509v3 Authority Key Identifier:
keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7f:96:bb:b6:ca:26:59:ce:bd:01:d6:63:f1:e7:76:27:97:
ba:14:41:80:77:25:2a:d4:7b:43:3a:b6:c0:dc:ab:7b:cd:e0:
7d:9f:bb:fb:65:09:0a:de:3b:17:16:97:bf:02:17:8d:5e:8e:
be:3c:42:dc:ae:fe:f4:9a:18:2c:98:53:90:45:5f:4f:d4:d4:
c2:32:cb:cc:c0:91:05:1a:7b:8d:b1:63:a3:0e:25:4c:e2:ec:
f6:12:c2:fb:96:5d:42:36:5a:6c:1c:66:0a:3f:a6:f0:e7:83:
9a:0d:fc:92:a0:22:44:aa:6d:92:9c:4f:39:96:9f:fc:0d:67:
2d:15:4c:76:3d:2d:61:76:ea:cd:00:bf:99:1c:b0:c9:e0:30:
67:ad:be:60:7b:36:f2:40:e1:50:38:22:9f:bb:e1:41:85:94:
df:dd:8b:d4:3a:5d:76:07:99:b2:e0:87:04:0a:34:24:0d:8c:
0f:d4:06:fc:78:fd:b1:85:ed:b7:e7:dc:7b:d1:18:14:e8:92:
65:06:12:cf:bb:eb:87:15:ac:52:60:5c:52:59:da:39:df:1e:
a2:a8:f4:4f:27:85:47:38:da:59:6e:7d:28:ca:b1:63:c2:2d:
70:7b:cd:d4:88:00:4c:42:0a:26:e1:71:1f:f3:9a:41:de:3f:
36:59:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client