Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: KgAD2NLQdB6LDH66QS8SbNsLCqIIgHKnk7/BV1XqpT0=
Subject key identifier: A6:B2:B2:8C:26:6C:41:C7:43:57:16:C2:90:E0:04:70:AD:7C:B9:0E
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 019A50E3EB8DA10FB44AE71D7552EA3DA302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 098A
Signing time: Tue 04 Nov 2025 22:01:45 +0000
Manifest this update: Tue 04 Nov 2025 22:01:45 +0000
Manifest next update: Wed 05 Nov 2025 22:01:45 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: 6YYI26vptspEK4OEiXEATj21QrT/i9akpYLqi2C59h8=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:eb:8d:a1:0f:b4:4a:e7:1d:75:52:ea:3d:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Nov 4 22:01:45 2025 GMT
Not After : Nov 5 22:01:45 2025 GMT
Subject: CN=a6b2b28c266c41c7435716c290e00470ad7cb90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:27:f6:30:57:bb:34:20:6c:db:79:20:14:
a1:5e:29:74:99:1f:49:a9:7d:37:e1:6c:f4:9a:9f:
49:36:24:0d:ee:8a:c2:0e:95:67:cb:51:ee:5a:1b:
ee:f4:7d:3f:80:8d:9e:84:2a:7f:68:ba:cf:76:3b:
7b:67:7f:e1:97:18:cd:2f:95:18:0d:8b:48:92:c6:
d6:5a:f3:44:7f:c9:20:ff:e7:bd:8a:7a:e2:68:2d:
e9:d4:2a:0f:ec:98:28:85:ee:05:cf:3b:1f:9d:d3:
92:01:98:3a:0c:3f:3d:99:15:08:0f:66:4f:13:20:
b5:62:df:6d:11:60:ad:73:c7:ff:3c:d5:73:76:d0:
e8:6e:02:68:11:f3:d9:b9:36:75:86:02:26:db:4f:
ee:a7:a5:f7:b6:72:80:97:d3:c7:5a:10:ec:e0:5e:
4f:e0:90:26:e8:25:12:a4:ac:c6:62:a7:d3:0a:5e:
c6:e5:09:3b:b6:e1:ed:2e:e8:68:cd:15:f0:f9:a8:
a3:3e:75:84:6c:ab:b4:83:29:de:f5:5a:e7:59:29:
12:24:a3:57:0f:ae:ea:78:ce:51:23:9b:77:8b:33:
c7:7b:7c:f6:05:9d:22:56:b4:01:cb:02:fb:98:cf:
86:d1:c6:b9:d1:81:76:a3:c0:95:7c:c1:d0:6b:2d:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:B2:8C:26:6C:41:C7:43:57:16:C2:90:E0:04:70:AD:7C:B9:0E
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6a:58:2a:ed:3f:6f:bb:4f:04:7c:7e:30:c1:02:1d:ca:55:
4c:17:83:e9:ae:db:8a:d4:c9:5b:fd:e5:f7:ea:87:09:dd:e0:
82:62:14:81:f5:69:17:f3:0a:c9:4d:1f:af:9e:6a:bc:6d:77:
1d:78:99:d9:74:45:aa:7b:57:33:05:ba:59:ca:10:0c:84:f2:
10:e3:60:3b:21:f5:bc:07:46:db:46:c5:f5:20:7f:75:ce:5e:
02:48:af:cf:fa:96:35:c3:a6:9d:6f:04:f4:ac:c8:09:b7:ee:
40:b7:22:a8:7b:84:2d:41:c7:d3:fb:f8:6a:51:e2:1a:bb:f9:
ab:0a:0e:ed:e3:b7:f6:0f:3a:1c:b4:3f:5e:0c:97:45:95:a3:
3e:6f:5c:83:fe:4c:ca:cd:df:c3:db:90:f9:23:f3:c1:16:1b:
bd:98:77:bc:e4:d9:4a:c1:fc:00:2b:31:e3:be:98:51:a3:24:
b1:0b:4d:02:24:d2:8f:7d:63:6e:ba:03:2c:56:bd:c1:e5:16:
3b:53:61:27:db:f3:57:05:73:4f:ec:d8:c1:7f:1f:db:84:5c:
5b:95:ca:4b:3b:45:78:67:77:cf:89:3d:3d:56:d7:34:a9:fc:
f2:84:c4:b2:2c:19:b4:4d:e6:9e:0c:00:92:f1:af:20:03:3e:
00:60:eb:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4+uNoQ+0SucddVLqPaMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTE5NzZhYjA2YmZmYWYzZTI4Zjg0Mjg2ZGIzZWUyMDNl
MDdkNWUwHhcNMjUxMTA0MjIwMTQ1WhcNMjUxMTA1MjIwMTQ1WjAzMTEwLwYDVQQD
EyhhNmIyYjI4YzI2NmM0MWM3NDM1NzE2YzI5MGUwMDQ3MGFkN2NiOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumcn9jBXuzQgbNt5IBShXil0mR9J
qX034Wz0mp9JNiQN7orCDpVny1HuWhvu9H0/gI2ehCp/aLrPdjt7Z3/hlxjNL5UY
DYtIksbWWvNEf8kg/+e9inriaC3p1CoP7Jgohe4FzzsfndOSAZg6DD89mRUID2ZP
EyC1Yt9tEWCtc8f/PNVzdtDobgJoEfPZuTZ1hgIm20/up6X3tnKAl9PHWhDs4F5P
4JAm6CUSpKzGYqfTCl7G5Qk7tuHtLuhozRXw+aijPnWEbKu0gyne9VrnWSkSJKNX
D67qeM5RI5t3izPHe3z2BZ0iVrQBywL7mM+G0ca50YF2o8CVfMHQay3/xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaysowmbEHHQ1cWwpDgBHCtfLkOMB8GA1UdIwQY
MBaAFE2Rl2qwa/+vPij4QobbPuID4H1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAt
NDg2YzA2ZWRlZmVhLzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82ZDdjOWYtM2MwZC00ZjhkLTk4YTAtNDg2YzA2ZWRlZmVh
LzEvVFpHWGFyQnJfNjgtS1BoQ2h0cy00Z1BnZlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWpYKu0/
b7tPBHx+MMECHcpVTBeD6a7bitTJW/3l9+qHCd3ggmIUgfVpF/MKyU0fr55qvG13
HXiZ2XRFqntXMwW6WcoQDITyEONgOyH1vAdG20bF9SB/dc5eAkivz/qWNcOmnW8E
9KzICbfuQLciqHuELUHH0/v4alHiGrv5qwoO7eO39g86HLQ/XgyXRZWjPm9cg/5M
ys3fw9uQ+SPzwRYbvZh3vOTZSsH8ACsx476YUaMksQtNAiTSj31jbroDLFa9weUW
O1NhJ9vzVwVzT+zYwX8f24RcW5XKSztFeGd3z4k9PVbXNKn88oTEsiwZtE3mngwA
kvGvIAM+AGDr+g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:02:55 2025 by rpki-client