Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: dY1gDqdmmdS4EQyK6Vy0fUe3X9ut/rua0Vh55Tx+UQM=
Subject key identifier: 5D:EE:66:67:8E:54:B6:F5:DE:16:6F:0C:17:5B:99:48:FD:61:BF:8D
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 0198D65F4D31111A4551DDFFDE90592C2809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 08C6
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: ktyhLpqVsvIb9MpCZODhhyeE07FEePwoGtQt60iQZ2E=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4d:31:11:1a:45:51:dd:ff:de:90:59:2c:28:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=5dee66678e54b6f5de166f0c175b9948fd61bf8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:5c:7a:e6:73:88:33:57:fa:ce:74:6c:39:
a5:03:63:76:d5:02:a6:6a:e1:df:24:35:51:a6:ee:
46:57:a2:b6:03:38:6a:f1:ff:2a:ba:a4:fd:42:fa:
04:a5:99:8a:ec:36:be:a8:48:c4:1f:0b:73:45:7a:
78:09:99:1c:5c:b2:76:1e:db:28:54:ac:e7:72:2d:
e7:c4:50:90:3c:d5:9e:9e:25:87:c0:1c:c1:4f:f5:
bf:d4:4d:62:89:9f:da:bf:0e:21:e5:8e:55:e9:b5:
4a:a9:d3:c0:61:c4:73:cd:c9:fd:5c:16:c6:91:8a:
5c:a6:51:06:d5:74:22:98:c7:aa:17:e5:2a:a5:44:
3e:a5:36:98:d5:5a:a8:d3:1a:d3:e4:cb:1c:b4:33:
f1:f2:f7:58:93:d2:ef:69:65:41:ed:01:b1:5d:89:
73:bd:11:b2:bd:07:de:39:58:43:fe:28:e5:06:13:
01:ce:54:a4:26:cf:3c:3d:9c:1e:56:cb:e8:38:21:
11:57:32:c5:9e:2d:bc:e9:f7:20:68:82:ba:05:c0:
3b:1c:bf:d9:73:66:28:6a:93:5e:ec:2b:b3:88:a9:
f9:05:f3:41:73:1e:b4:da:a9:9c:52:12:0d:88:f4:
6a:cc:b1:f5:66:04:7d:bd:fa:3b:08:b3:72:ca:38:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EE:66:67:8E:54:B6:F5:DE:16:6F:0C:17:5B:99:48:FD:61:BF:8D
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:d1:9a:92:83:4f:2f:47:3c:cf:16:88:91:07:cb:38:41:
5e:f4:7e:6c:5d:0e:3b:9f:98:ca:be:22:63:21:c9:70:50:c6:
b2:62:cc:22:41:d2:50:23:3e:ce:9a:bd:b3:a3:9d:46:bc:33:
55:7f:33:1d:55:82:b0:04:ae:fa:43:4a:93:40:5e:eb:44:eb:
ff:7e:9c:f6:22:ed:0c:d7:11:96:df:72:cb:3f:9e:28:6e:6d:
72:ed:9a:e6:6d:da:0c:71:65:51:eb:45:db:39:f1:06:1a:f3:
cc:2c:97:59:d5:ca:70:0e:a2:48:4d:47:aa:a8:f8:4a:6f:ff:
86:4f:34:78:6e:ef:c8:9c:93:4f:39:0d:6b:b0:ff:08:81:55:
4e:56:aa:66:7d:0d:c5:bf:d5:5b:40:4c:03:8e:a3:c3:77:93:
f8:a1:11:09:d7:79:f4:7c:28:b8:28:3f:3f:5b:c1:fe:aa:a0:
97:c6:9c:a7:57:f9:3f:04:7f:12:5c:6d:6c:43:49:72:d7:2b:
59:af:63:de:02:87:45:ff:b0:44:83:3b:f2:1c:88:34:d6:e4:
a8:8f:5c:b8:1e:02:4c:50:ce:d9:2b:6f:d3:97:78:c9:70:71:
0d:01:a3:26:7d:f2:74:53:a3:13:e0:d5:9e:f3:db:99:e4:90:
10:26:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:41 2025 by rpki-client