Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: LFAVRNdcDEliVBBny080JCM3oe7Ez22m9z799fpQAcY=
Subject key identifier: F1:2E:4F:44:5F:3B:32:84:2A:87:CA:2B:F7:CB:5F:23:C7:E4:56:D1
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 0199FDDA1929FA9789C5DAF0175E9CB137E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 095F
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: Jupwirf5StVnrtL1kWK7rYsubakTAAn/4pwR3qwNqlE=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:19:29:fa:97:89:c5:da:f0:17:5e:9c:b1:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=f12e4f445f3b32842a87ca2bf7cb5f23c7e456d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:7d:f7:7b:fe:51:26:9c:e0:77:e3:63:e3:
44:f6:b1:9c:28:23:8a:46:f5:26:f5:99:f8:18:4e:
81:08:b6:96:93:df:43:87:31:ae:83:d7:50:18:c6:
0a:5b:35:eb:5b:cc:ba:09:44:ef:b4:10:35:90:81:
2d:e0:15:55:49:ad:80:82:a7:25:04:01:db:f6:2c:
ce:5a:23:24:ac:e4:84:b0:62:a6:da:cc:29:3f:9b:
6f:42:24:f5:28:aa:f2:14:0e:e5:d4:62:b4:6f:5e:
06:bd:0d:78:27:4b:84:ed:02:54:53:c1:58:21:b4:
aa:bb:c6:ad:01:52:a5:e3:08:f4:55:0c:5e:48:0b:
78:d1:f7:0e:95:bf:c9:24:b6:41:ca:ac:2e:59:54:
ab:f2:36:a7:af:ca:20:48:46:96:e0:2e:63:2f:cf:
58:e1:0c:d9:29:aa:a2:46:8e:7b:a6:4d:a3:45:aa:
9d:ce:68:f8:7a:d9:10:2c:85:02:a0:fc:d3:d2:52:
3f:10:f0:dd:32:d4:c7:dd:b4:50:26:80:6c:a1:b4:
ec:bd:0e:9d:c5:73:90:51:8f:92:7d:07:d2:ea:8c:
46:cc:d1:35:48:1c:0b:fa:86:5f:2c:e7:7c:02:68:
5e:ff:d5:ad:2d:4c:93:c1:80:55:ff:38:92:4d:b9:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2E:4F:44:5F:3B:32:84:2A:87:CA:2B:F7:CB:5F:23:C7:E4:56:D1
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0d:24:a8:fc:a0:4c:20:be:dc:71:11:37:e6:06:80:78:03:
33:27:47:63:4a:cf:f2:4f:c1:29:ba:4a:94:1d:52:b4:1f:f8:
b0:00:08:e9:e3:7a:d9:7d:14:46:d5:ac:c0:f8:c7:5b:c5:cb:
01:04:03:2f:e6:8a:8d:73:1c:c1:bd:cf:7f:9b:5b:02:fc:55:
7b:51:13:da:b2:f9:2c:0d:80:52:f0:c0:2e:89:4b:cc:32:75:
46:3f:e2:96:dc:10:91:3d:bb:b9:f4:91:e6:78:74:75:72:b0:
d6:33:99:f7:fc:17:2b:43:57:7c:35:5e:92:35:99:51:32:a9:
58:6e:e0:9e:82:62:1a:b9:d6:05:87:9e:a2:d5:22:a0:70:f3:
40:b2:9c:aa:d5:24:e2:92:dc:4c:6f:92:4c:08:bf:e8:9e:ca:
ee:37:e7:c0:31:76:98:7d:7a:92:77:55:d7:62:a7:47:50:13:
55:9a:e6:68:82:29:60:62:d9:a2:63:8d:59:89:de:14:01:39:
29:16:2c:f2:45:14:15:bd:34:99:56:87:0c:4b:44:66:65:c7:
f6:70:3a:26:25:f4:45:1d:e2:6d:12:58:ab:d4:97:28:f0:44:
c9:54:57:d9:9c:58:79:56:ed:74:b0:7c:b9:c3:0d:94:a0:c1:
7f:ef:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:15 2025 by rpki-client