Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: p4OdWG4klIEZlIKBjDwKzJGQreFd//OhoxzZgbzSqtk=
Subject key identifier: 7C:34:78:B5:4A:E2:E9:C9:92:C8:FB:33:2D:3C:B4:92:2A:A3:27:3B
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 0197C237AF4A639A5039FDFC279E58F18F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0837
Signing time: Mon 30 Jun 2025 19:01:58 +0000
Manifest this update: Mon 30 Jun 2025 19:01:58 +0000
Manifest next update: Tue 01 Jul 2025 19:01:58 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: Wj9VyavTvgRyPRloZQPU+ikk25gz6QzFniWw4niwPWU=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:af:4a:63:9a:50:39:fd:fc:27:9e:58:f1:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jun 30 19:01:58 2025 GMT
Not After : Jul 1 19:01:58 2025 GMT
Subject: CN=7c3478b54ae2e9c992c8fb332d3cb4922aa3273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:33:89:f9:73:a4:ec:2b:d8:ad:dc:54:29:
d4:e8:2b:56:a1:9e:67:ae:44:1c:fb:69:c2:74:40:
e5:26:6b:94:c2:fa:95:25:36:a4:79:eb:e7:a6:69:
e6:42:0f:66:ef:16:da:3a:9b:a1:df:b5:5f:d0:89:
49:9a:98:07:15:11:b4:ec:36:97:ef:14:70:99:61:
01:55:26:12:70:49:f4:f0:e7:05:9c:eb:3e:10:ca:
7f:58:ef:48:54:26:12:f8:c3:f7:ee:45:b1:d0:d4:
6f:6e:a0:95:7e:b7:ad:5e:18:de:b1:c3:c3:18:ab:
d1:1e:7a:2f:60:c1:47:b0:d3:2d:a4:b2:d0:60:d4:
af:db:df:53:53:f1:f7:6c:a4:23:01:a0:16:fb:3e:
59:1a:07:a6:7e:cf:5b:89:c5:11:67:30:d3:08:e6:
25:19:9e:99:57:4e:20:9d:87:5a:e4:fd:02:53:40:
d2:80:79:42:25:07:cd:c3:4b:d3:6b:d6:d0:90:c8:
97:0a:9e:cb:57:89:67:62:69:dc:18:41:77:eb:10:
d3:71:f8:1c:82:69:12:32:a5:5f:3f:5b:95:b1:c3:
f2:90:02:fc:6b:dc:df:3a:75:29:e6:ab:4a:cb:e2:
32:a5:3b:3c:1f:62:e8:12:3f:01:0f:dd:e7:76:2a:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:34:78:B5:4A:E2:E9:C9:92:C8:FB:33:2D:3C:B4:92:2A:A3:27:3B
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:db:39:f7:bd:83:99:fd:3c:15:ea:a9:a3:79:fb:63:0c:
fb:86:d2:5a:dd:0c:e3:e9:14:93:dd:93:45:f3:25:30:1d:06:
a3:13:39:83:f4:2e:27:5d:a3:9a:f4:d1:50:62:ef:b8:32:63:
56:8a:83:47:dd:c3:77:48:20:13:2c:77:06:10:86:87:bd:c4:
a1:46:c6:60:91:3c:53:ec:a0:d6:79:af:10:88:3d:51:eb:b8:
e0:12:7c:49:3f:fb:1b:58:d5:99:40:c9:7c:70:86:66:e5:f3:
87:1e:c5:a7:fc:b4:d5:26:4b:6e:1a:ab:06:d1:07:c5:1a:60:
23:f0:ac:a0:8e:ae:dc:68:b9:32:6a:89:6b:f0:01:01:3a:ee:
cb:40:9c:bf:f9:76:1b:5a:26:37:f2:2c:ff:e7:37:5a:32:76:
e4:6c:63:04:5e:8d:cc:8d:5b:e5:fe:c7:38:fd:7b:4d:39:9c:
4b:da:70:a8:46:16:f5:e0:90:f3:1d:84:6a:15:e9:43:ea:bd:
fe:45:ca:94:95:be:ed:bf:c2:9c:64:d3:9f:08:90:74:56:18:
77:57:02:3e:85:4e:a5:d6:6b:29:5c:0c:86:3d:fb:fa:cb:2a:
92:15:ee:e1:2c:72:f4:ac:b3:c1:7a:7d:ee:c3:f7:75:db:56:
fb:68:06:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:50:36 2025 by rpki-client