
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: npIAuZTQ6BAvcmxjMeX33tLIPYygY2vJ6cWms8o+Mvw=
Subject key identifier: ED:8F:FB:58:09:8E:2D:67:CC:91:51:BA:78:CD:2A:A8:9E:A5:E7:B7
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 0199FCC6A6B694ED119620E605CB613B7E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0C0B
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: lz9yGAiay0AHbOkOZJUSRnLHTDIkV/1xfD3IRvuwt6g=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a6:b6:94:ed:11:96:20:e6:05:cb:61:3b:7e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=ed8ffb58098e2d67cc9151ba78cd2aa89ea5e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:ce:f2:61:b0:02:90:c0:59:6c:44:23:db:
a6:85:1b:6e:d0:77:da:f5:97:bb:4c:e9:1b:24:0d:
94:f5:b3:41:cf:cf:53:ae:e1:df:ac:c9:06:0d:30:
42:20:09:e7:0f:4f:0d:78:8a:5f:93:6e:59:57:ca:
f7:74:22:f8:a3:3e:3d:f1:d2:a2:b0:ec:b8:cf:f9:
63:98:d0:79:93:95:81:9e:f9:38:6f:3e:27:56:e6:
b2:66:6f:fc:e4:8f:49:13:9f:01:d4:49:ae:37:b5:
a3:c4:49:b0:6d:af:fe:b6:4b:34:8c:08:ea:f5:5c:
7c:7f:51:e7:79:68:12:8f:bf:42:74:e0:58:5d:59:
14:72:66:5a:84:cc:77:e3:ae:f9:2b:f6:3f:c3:87:
6c:9c:df:d0:7d:22:b3:49:25:4e:04:94:e4:fb:4b:
e5:81:5c:44:c2:e0:f5:f8:09:62:ee:21:78:be:b8:
97:83:e0:fe:64:34:4a:30:1d:ca:28:e2:13:5e:28:
58:d6:ea:7c:ad:a9:47:50:6a:50:64:42:fb:a2:b7:
58:af:66:7d:c0:9d:d5:c4:78:dc:6b:fd:d6:88:28:
f5:4f:df:18:82:b0:bd:aa:cc:af:92:11:97:ce:39:
67:5a:65:2f:04:b0:cf:16:b7:00:3a:ad:81:eb:1f:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:FB:58:09:8E:2D:67:CC:91:51:BA:78:CD:2A:A8:9E:A5:E7:B7
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:92:0b:4b:2a:9b:89:e2:60:cb:68:d1:5e:0e:8f:3b:7d:a3:
33:ea:6e:61:a5:66:46:00:a1:28:05:7f:3d:49:5f:d4:c1:f2:
69:e8:b8:e1:82:2d:4d:2d:f8:70:44:80:a8:f6:87:db:06:36:
06:c6:6e:ff:35:e1:94:7e:b3:77:9c:ee:1c:61:2b:6b:2a:82:
bb:13:18:f6:fc:9e:be:3b:fc:b9:f7:cf:4e:66:53:b7:ee:17:
00:ea:4f:a3:65:49:f6:46:88:f3:48:3a:74:ef:c7:95:3b:64:
79:32:b0:ed:1a:47:c4:b4:92:c8:d7:f6:4a:c2:ac:67:34:28:
28:b2:f2:b2:37:b5:e7:a6:0f:05:7b:45:3e:21:7d:f3:f9:a0:
0d:27:1f:b7:d8:f6:df:7e:e2:88:4e:79:ed:b7:37:5c:a1:9a:
2c:5a:30:4a:7d:9d:a7:84:c2:92:ed:a5:05:be:f7:97:6e:37:
19:b3:35:12:4e:af:83:93:8b:c4:9c:d7:e4:c1:a8:24:0e:3a:
ee:6c:16:6a:37:5b:c5:ac:98:8b:53:c3:1e:d9:13:8d:0c:17:
e6:2b:21:48:e9:97:59:90:01:4d:87:1c:a0:0c:7d:a5:48:48:
d5:c1:02:d6:1d:9c:ee:6c:53:56:27:d5:c9:b5:a9:4e:33:56:
c8:f8:a0:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqa2lO0RliDmBcthO355MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNjMxOWZlNzg1OWMzNDJmN2NkOWY3MTEzMDZmNTY1OTA4
MjhkNjAwHhcNMjUxMDE5MTQwMTQxWhcNMjUxMDIwMTQwMTQxWjAzMTEwLwYDVQQD
EyhlZDhmZmI1ODA5OGUyZDY3Y2M5MTUxYmE3OGNkMmFhODllYTVlN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2rO8mGwApDAWWxEI9umhRtu0Hfa
9Ze7TOkbJA2U9bNBz89TruHfrMkGDTBCIAnnD08NeIpfk25ZV8r3dCL4oz498dKi
sOy4z/ljmNB5k5WBnvk4bz4nVuayZm/85I9JE58B1EmuN7WjxEmwba/+tks0jAjq
9Vx8f1HneWgSj79CdOBYXVkUcmZahMx34675K/Y/w4dsnN/QfSKzSSVOBJTk+0vl
gVxEwuD1+Ali7iF4vriXg+D+ZDRKMB3KKOITXihY1up8ralHUGpQZEL7ordYr2Z9
wJ3VxHjca/3WiCj1T98YgrC9qsyvkhGXzjlnWmUvBLDPFrcAOq2B6x+MmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2P+1gJji1nzJFRunjNKqiepee3MB8GA1UdIwQY
MBaAFExjGf54WcNC982fcRMG9WWQgo1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWIt
NTU4MzBmOWVkZGU0LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWItNTU4MzBmOWVkZGU0
LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpILSyqb
ieJgy2jRXg6PO32jM+puYaVmRgChKAV/PUlf1MHyaei44YItTS34cESAqPaH2wY2
BsZu/zXhlH6zd5zuHGErayqCuxMY9vyevjv8uffPTmZTt+4XAOpPo2VJ9kaI80g6
dO/HlTtkeTKw7RpHxLSSyNf2SsKsZzQoKLLysje156YPBXtFPiF98/mgDScft9j2
337iiE557bc3XKGaLFowSn2dp4TCku2lBb73l243GbM1Ek6vg5OLxJzX5MGoJA46
7mwWajdbxayYi1PDHtkTjQwX5ishSOmXWZABTYccoAx9pUhI1cEC1h2c7mxTVifV
ybWpTjNWyPig5A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:45 2025 by rpki-client