Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: gQJ486ws1EcEdThaP1FwwVUwkCxbjvFyhKOmkINPG30=
Subject key identifier: EE:44:74:50:08:2F:19:89:6A:B9:C7:38:97:9C:CB:6D:5B:17:53:3A
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01974E208219C8E255A332D7C8CAE9540D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 07FB
Signing time: Sun 08 Jun 2025 06:00:42 +0000
Manifest this update: Sun 08 Jun 2025 06:00:42 +0000
Manifest next update: Mon 09 Jun 2025 06:00:42 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: ycnQCS7z95mymxRaEwB+gnPsO7gShn3+shFp4/D8Svg=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:82:19:c8:e2:55:a3:32:d7:c8:ca:e9:54:0d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jun 8 06:00:42 2025 GMT
Not After : Jun 9 06:00:42 2025 GMT
Subject: CN=ee447450082f19896ab9c738979ccb6d5b17533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:f4:59:a5:e2:fd:8a:ed:a4:d7:7a:04:44:
df:b6:52:4f:5c:76:64:01:bb:5b:7b:ec:29:4e:eb:
b5:6f:cb:22:7f:2c:2e:a2:7f:5f:10:bf:01:bb:02:
1d:37:06:38:db:95:d6:39:4f:8a:9a:52:f9:f3:ef:
88:95:78:29:cf:c2:56:3c:5f:8f:c0:b1:25:51:ad:
81:7c:2a:be:3b:38:37:e0:1a:97:98:5d:67:6f:b1:
3d:74:a7:46:1d:a3:da:26:82:7d:cb:d1:9a:b2:e0:
34:5d:13:f1:6c:81:71:3c:9f:ba:96:12:aa:d0:9b:
53:d4:e2:3c:f9:1f:d7:4f:68:66:b9:f8:19:19:d0:
65:d4:13:3d:c0:92:71:6d:0a:89:1f:f9:13:f8:64:
31:66:b7:2d:05:49:01:8f:92:46:f0:c3:c2:f5:e2:
f2:2f:8f:8b:1e:a9:c4:35:b3:9c:8f:5a:c3:f0:12:
d0:a2:40:f1:c4:f9:ea:47:bc:61:06:7b:1f:1f:95:
c3:d4:c2:2e:64:ff:aa:92:0c:6d:94:59:3a:d6:9e:
b9:a7:98:59:cb:5b:01:81:24:00:f8:31:15:5b:9a:
ca:89:90:8f:bb:ce:d3:b5:df:19:3b:58:ae:24:c3:
da:4a:32:4d:04:dd:db:79:34:44:60:9a:9c:83:ba:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:44:74:50:08:2F:19:89:6A:B9:C7:38:97:9C:CB:6D:5B:17:53:3A
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3f:f5:ed:94:dc:b3:ef:bf:e7:e7:1b:f4:a0:10:e7:de:e1:
79:2f:7a:17:ce:e8:a8:01:a3:b7:60:bb:af:9d:02:ab:5d:2f:
1b:19:4d:87:7e:a8:b0:06:38:20:8e:fa:5c:18:a7:3e:0a:ae:
c7:6a:77:20:8c:bc:00:f1:79:a1:99:94:3a:f7:9c:89:9a:d1:
d7:44:10:24:6d:4d:ce:d8:43:45:25:1d:8a:1d:b9:f5:75:58:
65:8d:b9:e8:00:12:8b:55:81:47:e2:36:19:21:76:b1:aa:4e:
bc:58:f8:61:34:4d:20:bb:f2:a3:f1:a9:14:fb:58:eb:46:14:
07:16:a2:f3:a5:3f:5e:ff:58:0a:61:0e:15:21:23:5f:28:2a:
8a:8d:58:86:fb:51:cf:ff:3f:0e:6d:00:98:97:b2:dc:e6:d2:
fd:a8:43:00:ae:d3:d5:2a:b6:ea:50:83:a8:67:e2:48:a9:e8:
8e:37:74:31:82:dc:fe:97:00:42:05:76:67:25:0a:ab:78:fa:
a2:e5:02:04:52:11:ff:10:71:8b:9a:91:9c:ed:0c:2a:69:6b:
da:83:31:e9:de:09:2d:f4:f0:97:71:26:95:f3:35:83:4b:1f:
30:bf:49:5b:88:7e:0d:5e:aa:32:8d:69:f4:f2:43:e1:1d:da:
3e:9c:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:12:11 2025 by rpki-client