Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: 8TiQxCiPbTIlR8z0W0XsBYNNSmW+uE9vBJyHSA4qjn8=
Subject key identifier: D4:13:56:C0:CC:70:C0:EC:AA:B0:6C:BA:53:72:F7:D4:9F:46:D9:40
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 0198D473C4555EAA1B61D4D9294EACAA6E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 0458
Signing time: Sat 23 Aug 2025 01:03:33 +0000
Manifest this update: Sat 23 Aug 2025 01:03:33 +0000
Manifest next update: Sun 24 Aug 2025 01:03:33 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: 1rAh33fFlaRB9ga+522zSaIETe/iwK6Is2kD8YzVUuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c4:55:5e:aa:1b:61:d4:d9:29:4e:ac:aa:6e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Aug 23 01:03:33 2025 GMT
Not After : Aug 24 01:03:33 2025 GMT
Subject: CN=d41356c0cc70c0ecaab06cba5372f7d49f46d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:db:7e:78:f1:f8:7c:3f:2a:38:af:d3:97:
95:4a:b6:5c:23:53:b6:d0:e2:fb:00:97:f9:bd:92:
4d:d0:df:df:92:6b:3a:e5:e7:64:9a:13:c9:7d:47:
04:df:e2:dc:df:13:42:07:ed:26:cc:09:0d:9c:1d:
8b:2e:73:f5:45:b3:0c:7d:78:c0:14:a8:ea:28:8e:
bc:a3:43:bf:f7:77:54:6d:fc:8f:96:7a:46:2a:bc:
03:75:55:ab:91:5b:8f:4f:a7:bc:74:5b:c7:8c:2f:
f3:f3:c6:19:e7:12:a7:28:83:dc:49:12:fb:d3:c4:
47:2b:45:dc:96:4c:30:84:bc:69:26:31:58:86:71:
ad:28:42:e9:3d:db:9d:ff:69:de:8b:4a:e7:ea:6e:
bf:f6:c1:be:41:a5:91:51:7e:37:c5:12:f5:8e:c4:
e1:2b:55:26:32:1a:1b:22:75:b1:97:35:1e:cd:2a:
b1:1a:25:29:9d:30:df:a1:da:95:d2:ee:f5:1d:36:
2e:51:d0:be:6f:f4:77:bc:fe:47:d5:a2:db:15:cf:
34:1a:2e:cc:82:dc:17:97:d7:5e:07:cf:7c:be:43:
4a:f8:07:86:76:98:47:55:17:da:7a:6e:59:76:e2:
4a:20:99:76:5a:f0:4c:30:fe:8d:c7:6e:00:74:08:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:56:C0:CC:70:C0:EC:AA:B0:6C:BA:53:72:F7:D4:9F:46:D9:40
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:25:92:fd:87:11:27:af:b4:23:f6:d8:d6:d3:2d:b9:28:61:
56:90:93:3a:93:48:c3:79:58:07:57:4f:f9:7e:cc:cc:84:3a:
85:85:91:06:a5:b2:28:03:48:94:7f:d9:73:8f:d9:75:24:6e:
cd:c1:d6:83:d1:10:73:dd:6a:d7:33:1c:d9:72:f7:a6:c9:7a:
c2:3c:15:91:58:6c:92:cf:57:4b:a4:c7:39:3b:76:50:22:26:
23:bb:19:aa:b5:8e:14:f1:50:82:4e:af:7f:50:e4:8a:ea:05:
86:c6:b8:0a:df:da:f2:bc:73:72:84:70:23:ac:31:c4:5c:d4:
71:ce:6b:34:c9:2c:db:3a:00:f8:4c:80:6d:ba:d5:79:d6:c5:
fb:6a:31:da:b7:9b:dc:d3:e3:98:98:2a:8b:62:87:79:d7:0c:
c7:fe:7f:80:58:89:d9:78:6b:f6:43:8e:b6:0d:99:97:16:f0:
86:e7:a0:b0:ac:38:02:1f:af:00:05:d9:2f:15:82:b4:88:23:
d2:df:be:1a:ff:a6:cb:18:05:a1:ef:a5:4d:e5:4d:fd:43:08:
43:15:59:58:e9:cf:7f:70:d5:05:19:45:41:1f:ef:08:24:bb:
8b:62:e8:95:52:59:90:11:7d:8d:45:2b:02:de:c2:d9:94:58:
5b:f1:29:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc8RVXqobYdTZKU6sqm6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzAxNmY5NjJiNWJmYjBjZTBlYWRiYTdmMDg3MzA5NjUw
MWUxMjMwHhcNMjUwODIzMDEwMzMzWhcNMjUwODI0MDEwMzMzWjAzMTEwLwYDVQQD
EyhkNDEzNTZjMGNjNzBjMGVjYWFiMDZjYmE1MzcyZjdkNDlmNDZkOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwvbfnjx+Hw/Kjiv05eVSrZcI1O2
0OL7AJf5vZJN0N/fkms65edkmhPJfUcE3+Lc3xNCB+0mzAkNnB2LLnP1RbMMfXjA
FKjqKI68o0O/93dUbfyPlnpGKrwDdVWrkVuPT6e8dFvHjC/z88YZ5xKnKIPcSRL7
08RHK0XclkwwhLxpJjFYhnGtKELpPdud/2nei0rn6m6/9sG+QaWRUX43xRL1jsTh
K1UmMhobInWxlzUezSqxGiUpnTDfodqV0u71HTYuUdC+b/R3vP5H1aLbFc80Gi7M
gtwXl9deB898vkNK+AeGdphHVRfaem5ZduJKIJl2WvBMMP6Nx24AdAgaNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQTVsDMcMDsqrBsulNy99SfRtlAMB8GA1UdIwQY
MBaAFHcwFvlitb+wzg6tun8IcwllAeEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpBVy1XSzF2N0RPRHEyNmZ3aHpDV1VCNFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MjZmYjQtZThjZC00NWYwLThkYzgt
NzY1ZTljMjAzYmUzLzEvZHpBVy1XSzF2N0RPRHEyNmZ3aHpDV1VCNFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MjZmYjQtZThjZC00NWYwLThkYzgtNzY1ZTljMjAzYmUz
LzEvZHpBVy1XSzF2N0RPRHEyNmZ3aHpDV1VCNFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAySWS/YcR
J6+0I/bY1tMtuShhVpCTOpNIw3lYB1dP+X7MzIQ6hYWRBqWyKANIlH/Zc4/ZdSRu
zcHWg9EQc91q1zMc2XL3psl6wjwVkVhsks9XS6THOTt2UCImI7sZqrWOFPFQgk6v
f1DkiuoFhsa4Ct/a8rxzcoRwI6wxxFzUcc5rNMks2zoA+EyAbbrVedbF+2ox2reb
3NPjmJgqi2KHedcMx/5/gFiJ2Xhr9kOOtg2ZlxbwhuegsKw4Ah+vAAXZLxWCtIgj
0t++Gv+myxgFoe+lTeVN/UMIQxVZWOnPf3DVBRlFQR/vCCS7i2LolVJZkBF9jUUr
At7C2ZRYW/Ep5g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:52 2025 by rpki-client