Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: XXTR2JTWM+rfIdxJtllzUfoHNzJ+9UdOk3GRm9o4pMI=
Subject key identifier: 4C:A3:4F:0C:12:50:CB:BD:4F:8D:AE:0F:92:C3:06:F7:4B:02:A5:97
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019856EAEB310FFB5E9EF16CF5CF4E02AE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0884
Signing time: Tue 29 Jul 2025 16:01:32 +0000
Manifest this update: Tue 29 Jul 2025 16:01:32 +0000
Manifest next update: Wed 30 Jul 2025 16:01:32 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: c2WOh3vCXmR2nBXhhK3BJ98szKcIdzGMmLhkxOMwG2M=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:eb:31:0f:fb:5e:9e:f1:6c:f5:cf:4e:02:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jul 29 16:01:32 2025 GMT
Not After : Jul 30 16:01:32 2025 GMT
Subject: CN=4ca34f0c1250cbbd4f8dae0f92c306f74b02a597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:8f:77:24:2e:ce:d6:43:1c:a8:01:20:99:
46:9a:04:69:3b:d8:11:96:59:f8:99:35:1d:26:b4:
ea:76:92:ef:74:ac:16:e3:f7:66:03:7c:19:b4:d1:
21:95:d3:f4:ad:83:95:8d:16:d1:0c:6b:24:ac:49:
b1:ec:7f:0a:76:91:0d:0d:cc:95:93:9e:2c:62:be:
da:6c:2f:34:b6:28:ee:3c:ac:51:86:ed:0f:a8:53:
90:29:e6:4c:c5:2a:53:3e:52:09:fa:96:81:9a:81:
17:b0:9b:08:76:f8:0c:19:eb:d2:b2:30:e9:01:2a:
4f:f8:df:48:a0:ee:fe:88:22:4e:99:e9:cb:55:72:
49:17:d0:db:b1:14:cd:30:f0:6b:7c:d0:a0:bf:9d:
1d:9d:79:0e:f0:94:14:c1:3c:aa:f1:80:66:1e:f7:
e4:2b:25:f4:c9:03:cb:1e:57:d2:3d:23:e8:d3:86:
19:be:16:e6:03:7c:49:1c:0a:d8:74:c6:3d:61:bd:
49:ba:cb:1d:2e:e0:54:d4:c5:5e:3c:5d:c3:d6:b5:
5d:4f:64:a2:de:f8:b4:84:fd:1f:e2:b0:ca:29:4c:
e0:25:e3:55:e4:01:21:99:aa:35:d2:3f:f7:15:18:
96:0e:15:c1:c5:25:12:31:64:08:78:35:7d:fe:b1:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:4F:0C:12:50:CB:BD:4F:8D:AE:0F:92:C3:06:F7:4B:02:A5:97
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:e2:cf:11:7c:b8:7c:3a:c7:2d:b2:a7:c1:b4:1e:5c:18:
e9:6c:6f:28:1f:94:30:d7:a8:3d:fe:ca:7f:08:24:8b:f7:af:
8a:91:78:bb:49:88:88:82:e0:5c:9a:f8:88:14:05:d1:12:1c:
bf:13:03:fe:04:9b:62:01:df:5b:0d:bf:fc:e7:89:75:e4:62:
cd:ee:82:af:4a:9d:3a:d9:f8:04:e0:05:f9:6d:64:21:92:0a:
72:19:01:2f:0b:9e:d1:20:8e:63:70:d6:33:6a:8c:f7:51:33:
f0:14:18:0e:50:bc:d1:4b:0c:4e:b9:25:3e:72:6c:a6:72:4a:
de:c1:61:44:38:d5:3c:39:88:3c:90:35:0e:48:58:e3:d9:6c:
78:9b:1b:19:26:57:4b:1a:ac:bc:2e:ef:1e:04:aa:a3:e4:f6:
12:98:6b:1b:4e:a4:06:38:31:ca:eb:69:c7:bc:87:02:00:5d:
e6:19:d9:65:b1:c3:45:c3:19:50:80:48:f1:54:95:52:09:06:
0d:f1:ef:3c:6d:35:62:0e:aa:95:f8:c7:75:a0:df:df:f4:b3:
88:fb:5a:07:84:9b:d7:d3:1c:21:f3:ef:02:20:8d:2b:44:b0:
15:f5:1f:5f:dc:77:a8:60:38:d6:6a:cf:00:95:72:66:15:a9:
00:60:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 22:03:43 2025 by rpki-client