Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: rxZMDDLl5+O/BbFkwAwUUI7GcVRvFAuUZKRGs+13mZM=
Subject key identifier: 18:F9:E9:40:A2:5E:AF:24:39:87:13:2E:BE:EE:B7:14:D5:E9:5F:2F
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019613581C9EF84C0985AFE2051D7AA52DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0758
Signing time: Tue 08 Apr 2025 03:01:03 +0000
Manifest this update: Tue 08 Apr 2025 03:01:03 +0000
Manifest next update: Wed 09 Apr 2025 03:01:03 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: UD+v5mi4OeB9EACM8hW8el6YmagzSjsRKJAfx9s9pU8=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:1c:9e:f8:4c:09:85:af:e2:05:1d:7a:a5:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Apr 8 03:01:03 2025 GMT
Not After : Apr 9 03:01:03 2025 GMT
Subject: CN=18f9e940a25eaf243987132ebeeeb714d5e95f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:6b:37:86:8c:ba:d0:dc:f1:0b:6e:55:a8:
5f:38:22:33:71:58:61:0c:76:ce:5a:b4:a5:ff:ff:
9e:2a:c0:ec:b9:81:89:2e:7b:c8:c1:30:7e:ae:50:
dc:24:3b:6a:2e:90:e8:76:15:9d:00:5b:db:17:69:
c8:cf:dd:88:bb:f3:ea:a6:34:5d:4d:5b:fb:07:75:
17:5c:f6:c6:41:5c:8b:8f:6c:b1:93:14:f9:8d:66:
95:80:26:f6:dd:e1:45:74:bd:ba:d1:1d:3c:e4:f5:
38:06:6d:05:1d:27:f5:41:e0:c8:9b:32:5a:8e:64:
fe:d1:63:fe:f9:a3:50:2f:19:15:7f:5a:3b:a8:ba:
cc:86:03:b0:ff:b2:df:10:6f:2e:44:1d:60:06:5d:
9b:0d:23:5b:c5:b6:cc:f7:91:0e:1a:ff:82:e7:ae:
1d:a6:0c:a8:11:b3:ee:6e:6a:9e:0c:80:42:d3:86:
4f:e2:b0:4c:93:44:cb:2a:8c:c8:1c:c9:38:f0:64:
ed:44:ba:7f:a1:66:3d:8b:7e:4f:d3:c4:15:da:b2:
46:dc:d1:96:7a:f5:6c:47:a4:60:67:7a:ef:b4:74:
5d:4f:55:b4:5f:81:e1:fb:3c:ae:53:22:03:19:15:
2b:2b:8c:f6:69:66:f2:1f:11:20:41:c3:ef:ec:b8:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:E9:40:A2:5E:AF:24:39:87:13:2E:BE:EE:B7:14:D5:E9:5F:2F
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:cb:e2:a4:5e:e4:b3:54:09:28:1f:d0:9a:32:3c:e7:99:
d1:2b:bf:38:e0:25:42:ac:79:c8:3a:bd:a2:22:88:f9:17:8b:
b0:a6:f5:5b:fd:65:27:41:c1:1f:f7:2e:69:27:80:ff:31:08:
30:2e:bc:13:91:22:2c:2d:de:62:56:be:6e:3d:cf:e3:1d:2d:
c3:23:b4:c3:c8:7c:61:40:17:f5:ed:26:38:91:41:8a:67:46:
a4:5e:fe:78:f4:50:3b:bb:78:ea:84:a8:56:af:a7:e5:59:5b:
d9:2f:75:55:cf:d2:dd:5b:e1:5d:91:03:1e:e0:2d:bd:b9:74:
b7:f7:06:5c:56:ac:e7:d2:df:d6:70:1e:44:9d:1f:a1:48:25:
dc:2d:95:1d:9f:4d:7e:39:cb:3c:d2:04:0d:bc:fc:d4:28:c0:
82:fa:ef:2e:a8:ad:03:96:ec:c9:78:af:42:11:67:12:63:29:
11:21:16:78:3d:33:07:3d:a2:83:50:3b:3f:21:ef:ed:76:5a:
d4:79:87:a5:6b:fb:1c:15:3d:bd:67:30:2d:c0:98:76:c2:fc:
eb:0a:59:cb:43:61:49:b3:c0:49:a8:6d:4d:24:a8:75:3f:40:
31:73:af:10:96:3e:94:28:67:27:2c:5f:fe:de:aa:6d:87:ec:
6e:76:8b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTWBye+EwJha/iBR16pS3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl
MDdkNWUwHhcNMjUwNDA4MDMwMTAzWhcNMjUwNDA5MDMwMTAzWjAzMTEwLwYDVQQD
EygxOGY5ZTk0MGEyNWVhZjI0Mzk4NzEzMmViZWVlYjcxNGQ1ZTk1ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NVrN4aMutDc8QtuVahfOCIzcVhh
DHbOWrSl//+eKsDsuYGJLnvIwTB+rlDcJDtqLpDodhWdAFvbF2nIz92Iu/PqpjRd
TVv7B3UXXPbGQVyLj2yxkxT5jWaVgCb23eFFdL260R085PU4Bm0FHSf1QeDImzJa
jmT+0WP++aNQLxkVf1o7qLrMhgOw/7LfEG8uRB1gBl2bDSNbxbbM95EOGv+C564d
pgyoEbPubmqeDIBC04ZP4rBMk0TLKozIHMk48GTtRLp/oWY9i35P08QV2rJG3NGW
evVsR6RgZ3rvtHRdT1W0X4Hh+zyuUyIDGRUrK4z2aWbyHxEgQcPv7LjBEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj56UCiXq8kOYcTLr7utxTV6V8vMB8GA1UdIwQY
MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt
NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh
LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARrL4qRe
5LNUCSgf0JoyPOeZ0Su/OOAlQqx5yDq9oiKI+ReLsKb1W/1lJ0HBH/cuaSeA/zEI
MC68E5EiLC3eYla+bj3P4x0twyO0w8h8YUAX9e0mOJFBimdGpF7+ePRQO7t46oSo
Vq+n5Vlb2S91Vc/S3VvhXZEDHuAtvbl0t/cGXFas59Lf1nAeRJ0foUgl3C2VHZ9N
fjnLPNIEDbz81CjAgvrvLqitA5bsyXivQhFnEmMpESEWeD0zBz2ig1A7PyHv7XZa
1HmHpWv7HBU9vWcwLcCYdsL86wpZy0NhSbPASahtTSSodT9AMXOvEJY+lChnJyxf
/t6qbYfsbnaLnw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:27 2025 by rpki-client