Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: cGjQJnt6HxSotz9Y7baNe5WTBm2ic8svC16yTKZyqLU=
Subject key identifier: B6:25:66:BB:85:0B:A1:E8:D5:F4:B2:F0:ED:1C:D4:A5:B5:89:D3:AD
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019A112934977AF2946FD48FC8B41EAFE49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0969
Signing time: Thu 23 Oct 2025 13:01:44 +0000
Manifest this update: Thu 23 Oct 2025 13:01:44 +0000
Manifest next update: Fri 24 Oct 2025 13:01:44 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: b6s/ZafKgjSzDVLCWEFQ8RfTlLjffk4FpSS33DsoxU4=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:29:34:97:7a:f2:94:6f:d4:8f:c8:b4:1e:af:e4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Oct 23 13:01:44 2025 GMT
Not After : Oct 24 13:01:44 2025 GMT
Subject: CN=b62566bb850ba1e8d5f4b2f0ed1cd4a5b589d3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:dc:27:56:c5:de:8b:98:ca:51:f4:27:af:
0f:bf:ef:b6:0b:4d:40:47:03:ad:4e:51:f4:f5:7e:
45:ef:13:fa:79:bb:3a:45:25:3e:af:69:c5:b7:d1:
d4:de:0b:a3:db:f7:15:f4:ae:5b:bc:cc:b9:b6:7c:
4d:cc:0a:d1:8d:9b:30:d3:78:8d:27:5d:e8:e4:63:
b1:02:ef:cd:26:c8:e5:8a:fb:33:ff:54:7e:7c:73:
03:30:18:27:6c:c7:53:99:2a:69:80:a0:5e:64:32:
53:99:81:c9:78:bd:40:1f:6a:b6:c7:a7:a7:ae:19:
42:e6:a4:56:f0:67:22:8d:03:18:6a:ce:4b:8f:e5:
bc:6c:8e:12:47:8b:8b:35:2f:20:e7:8c:01:df:70:
c3:fa:cc:42:bd:da:7f:c7:9d:aa:37:a6:73:61:2c:
02:e6:96:da:aa:8e:20:7c:ee:04:2a:82:51:a2:2e:
56:e8:e8:13:b8:98:4c:c8:fe:8d:9f:b1:49:50:b6:
24:bc:87:ad:ba:1b:e1:9d:58:87:e2:b4:a5:5b:bb:
0a:da:78:33:52:2f:67:2c:30:11:75:f4:3b:48:20:
47:9d:05:fa:44:40:3a:6b:5f:2f:c1:f6:2c:71:3d:
b5:5f:b6:c3:26:d2:02:9d:9a:92:39:8a:27:fd:38:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:66:BB:85:0B:A1:E8:D5:F4:B2:F0:ED:1C:D4:A5:B5:89:D3:AD
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2b:0b:8c:9f:94:2b:3c:ad:3c:80:ab:88:52:d2:17:4f:cd:
69:83:80:73:5c:db:92:b6:f2:1e:2c:64:ca:f9:bf:72:61:95:
30:91:d8:67:b8:be:2c:3f:08:9d:3d:01:47:fa:75:d7:2a:01:
38:cc:da:44:4b:01:ea:fc:a9:bb:0e:a5:0f:c3:56:eb:99:70:
36:59:bc:4f:e5:46:c7:1e:ee:7e:3f:39:57:0f:86:58:8f:94:
bf:fd:6a:ec:39:7f:69:ac:17:47:78:9e:16:ce:48:93:e1:49:
e9:db:4b:20:44:37:28:6f:4f:65:53:31:45:a0:ea:b0:26:e6:
2c:27:35:df:ec:7c:88:01:2d:39:77:33:5e:50:50:17:02:6e:
a0:87:cf:d7:ea:66:10:cf:9d:9c:0e:b2:d7:22:6b:72:d3:5c:
74:ea:2c:14:33:e9:0b:43:96:a7:59:65:29:19:e0:7d:b8:25:
8d:fd:71:ba:f7:1a:4a:2f:e7:f6:64:c8:85:d5:6a:bd:3a:f7:
93:b2:55:4a:11:a1:ed:d9:69:24:22:41:35:c4:f9:15:40:b8:
34:dd:42:07:b0:79:80:4b:2d:df:8c:b5:44:9f:9c:bc:b4:8e:
06:d9:9f:f7:f2:1a:f6:13:00:2c:85:ab:2e:a3:71:b0:0f:66:
85:9f:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:39:03 2025 by rpki-client