Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
File: TZGXarBr_68-KPhChts-4gPgfV4.mft (raw, json)
Hash identifier: eBwo7ugOjC1jFGIaDjkHakO9vrg1tKeetb+q4LOm9wc=
Subject key identifier: EA:BB:0E:27:6C:F2:54:6D:44:2D:28:77:48:CC:27:27:03:05:4A:E5
Authority key identifier: 4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
Certificate issuer: /CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Certificate serial: 01976929C797647645647F4AD64500023A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
Manifest number: 0809
Signing time: Fri 13 Jun 2025 12:00:35 +0000
Manifest this update: Fri 13 Jun 2025 12:00:35 +0000
Manifest next update: Sat 14 Jun 2025 12:00:35 +0000
Files and hashes: 1: TZGXarBr_68-KPhChts-4gPgfV4.crl (hash: shb8Pw962xgnjtcWwMAnAxgBvt6pOUzsWG0PjSBbTUI=)
2: jDCzVV2I4qF_67ASFJySD4Hfru8.roa (hash: A4zZSY3sGEO/+5yX265FaorQ6ReAKBhpkrkEEiGEIe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c7:97:64:76:45:64:7f:4a:d6:45:00:02:3a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d91976ab06bffaf3e28f84286db3ee203e07d5e
Validity
Not Before: Jun 13 12:00:35 2025 GMT
Not After : Jun 14 12:00:35 2025 GMT
Subject: CN=eabb0e276cf2546d442d287748cc272703054ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:32:4c:8c:24:7e:c0:4e:67:b8:9e:e2:c6:
95:37:53:a1:4a:6d:2f:2f:25:68:ba:38:4c:ea:03:
18:e1:7e:1b:16:5b:f1:e5:73:93:a5:35:4d:a2:e1:
95:7f:18:64:ec:23:2d:4f:13:8b:b8:29:9c:0f:30:
7a:f0:33:9f:80:5a:0b:b8:c3:15:35:2b:1e:97:a2:
e8:bb:b2:4e:a5:8b:fb:03:23:13:a3:4a:73:ce:1b:
ac:63:a3:72:e8:b4:d4:ef:dc:22:00:47:22:bd:1e:
c5:4f:7d:6d:fe:0e:bb:da:d6:f0:15:54:08:a8:9c:
b4:d7:d6:16:48:ae:3a:f7:d6:04:c9:68:f4:9d:74:
d7:6b:f0:7e:dc:9a:41:23:98:52:86:25:eb:ff:c5:
a7:75:ac:7c:db:99:e6:34:13:f7:c8:6e:2c:ba:7a:
ae:61:dd:30:6b:a3:a5:a4:f6:ee:e7:57:94:8e:49:
ae:2c:18:be:54:1c:cb:ae:a0:48:d7:d5:22:ae:53:
ab:6c:82:07:bf:31:8d:f4:01:9c:08:77:aa:1c:da:
13:81:53:3b:a0:a9:a7:98:13:c8:6d:21:5a:09:52:
a9:75:53:74:8b:5f:b4:4f:84:42:a5:4c:c3:cd:3b:
4d:21:a3:a6:4c:7d:7b:6c:73:fe:05:71:f0:9e:5b:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:0E:27:6C:F2:54:6D:44:2D:28:77:48:CC:27:27:03:05:4A:E5
X509v3 Authority Key Identifier:
keyid:4D:91:97:6A:B0:6B:FF:AF:3E:28:F8:42:86:DB:3E:E2:03:E0:7D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZGXarBr_68-KPhChts-4gPgfV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6d7c9f-3c0d-4f8d-98a0-486c06edefea/1/TZGXarBr_68-KPhChts-4gPgfV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9e:73:81:18:ae:50:3f:09:e1:bb:7a:12:7a:68:ea:d8:bc:
af:35:8b:df:eb:5c:8b:d9:02:59:7d:a6:c4:86:46:aa:fa:cf:
4c:d9:48:2f:03:6b:f9:36:10:0c:dd:0b:61:63:a8:5c:5a:c5:
54:8f:98:8d:43:67:24:b6:dc:d7:73:75:23:72:41:bf:98:3e:
c2:57:b3:d6:31:ff:0d:90:70:e9:97:c8:aa:21:02:26:92:4f:
6e:ed:e6:51:ee:fa:98:77:97:5c:32:43:14:23:78:41:f6:b2:
3b:2d:20:23:d8:27:49:11:14:be:75:3c:97:82:32:d7:f1:db:
08:b0:8a:c9:f2:07:76:7a:f3:18:30:b6:95:33:fe:43:fb:97:
2e:4d:69:1d:2e:71:ed:f6:f9:a4:b0:b4:be:18:69:29:b5:96:
93:7d:43:b9:d8:f5:4e:48:ca:e1:b3:42:81:4d:cf:c7:4f:bc:
86:51:1d:ed:3a:71:19:d7:74:4c:57:e0:3b:a2:36:0d:b5:90:
9a:cd:df:1d:1e:e2:72:fd:16:99:62:69:00:9e:e4:18:aa:a7:
e3:1d:df:62:1d:4e:40:fc:57:ef:4e:84:4f:ac:7a:a1:cf:74:
6e:54:93:9e:50:d6:87:2c:b5:97:84:83:fc:eb:8f:13:b4:63:
f2:7f:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:29 2025 by rpki-client