
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier: in2icIzULEwlukWGb8sVCFVYjX5wkPs9kESwypDdfMI=
Subject key identifier: C9:FE:B9:93:15:E5:B7:F5:3A:2A:77:5D:E6:06:61:BE:1F:45:CF:50
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial: 01987C7786402E39E593F37742D2FD03EF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number: 0B44
Signing time: Tue 05 Aug 2025 23:01:04 +0000
Manifest this update: Tue 05 Aug 2025 23:01:04 +0000
Manifest next update: Wed 06 Aug 2025 23:01:04 +0000
Files and hashes: 1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: NW8kxWjV/9elj5nT1VH5bpOfTfaHT+wBfL8WEOrEGfc=)
3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:86:40:2e:39:e5:93:f3:77:42:d2:fd:03:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
Validity
Not Before: Aug 5 23:01:04 2025 GMT
Not After : Aug 6 23:01:04 2025 GMT
Subject: CN=c9feb99315e5b7f53a2a775de60661be1f45cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:e7:3b:74:d4:52:60:7d:72:ac:23:a2:67:
8e:0a:25:b3:eb:d2:24:7f:6c:e8:78:0f:95:84:a8:
44:f4:e2:d8:f0:86:d0:eb:f0:b3:28:ae:ca:35:11:
0d:68:e1:29:76:55:66:7a:1b:24:d2:ba:28:e8:8c:
ff:98:1a:84:44:c3:66:a4:fb:6f:53:e6:44:d8:d3:
62:f9:28:51:ca:a2:3a:f3:96:75:14:a7:45:6a:64:
c2:4d:6b:ef:42:74:e4:7f:fc:02:37:f0:76:42:d4:
9a:2a:83:26:47:7b:64:ed:1d:a6:17:e9:33:44:bb:
94:f9:4f:fd:ca:3b:e9:48:0c:cc:f8:1f:56:e6:fd:
77:ff:df:e3:40:cf:93:6e:fb:60:0e:c7:9b:e6:d4:
f7:1d:75:98:e6:46:73:23:5c:2f:b7:50:9d:77:3b:
2f:d9:e9:4d:2c:9e:33:5b:ee:48:31:31:a6:2e:e5:
f3:2e:47:5d:4d:a7:19:1e:35:d5:01:71:3e:51:f1:
6b:8a:8f:b4:c0:25:d8:b4:cb:33:d6:10:2e:f1:a0:
3f:7b:bf:c4:37:ad:39:65:b0:19:0b:2b:ee:fe:15:
eb:f5:a2:2f:be:22:29:d5:a2:90:67:16:9b:72:46:
fa:81:1f:2f:19:16:c4:07:0f:47:a6:c1:1e:55:4e:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:B9:93:15:E5:B7:F5:3A:2A:77:5D:E6:06:61:BE:1F:45:CF:50
X509v3 Authority Key Identifier:
keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:59:f9:c1:d5:bf:08:2e:02:c9:ac:12:fe:f6:95:f3:14:50:
36:58:84:ff:d3:01:80:4a:8c:e9:6a:55:36:b5:bf:91:ff:a1:
9a:7a:3d:64:6e:38:21:fd:50:4d:77:fe:f0:f7:dd:bd:08:28:
d8:13:29:64:b9:bf:4c:85:79:48:e9:3e:68:df:52:01:cd:4f:
44:c6:7b:1a:c5:67:08:71:71:cc:01:e5:4d:df:41:92:cf:a9:
6c:05:36:f3:00:5f:43:76:f5:2c:2f:0e:1d:35:b7:fe:e5:af:
9a:02:d9:2d:9d:ea:ef:47:d5:2f:66:13:26:01:cd:1d:cd:0a:
d0:f7:5f:07:f4:37:55:e4:b4:d9:95:c7:f9:b6:a3:99:52:1c:
6f:c3:24:da:5f:72:87:12:2a:22:ac:78:b7:7d:7b:3b:f5:90:
a2:7e:ce:8a:ce:fa:2b:20:46:cf:86:70:45:76:65:b2:2e:10:
74:45:dd:ae:b1:41:8d:45:24:f6:68:b6:b6:74:38:06:4b:ef:
fa:c6:93:d8:df:80:1e:87:70:85:3b:21:14:f5:4e:77:70:02:
82:0f:8e:13:27:f6:f0:65:c1:45:ca:3d:49:58:5e:54:da:25:
bd:ca:41:04:b6:c2:3e:10:f5:95:92:4d:2b:95:3d:cc:18:c4:
1a:af:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:23 2025 by rpki-client