Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: VkaSjOJ0RnRLb7LKVzjBzMV6u1vUhlt7MY3WFNC6Z1Y=
Subject key identifier: A0:09:6C:87:86:FC:BE:49:AB:D3:67:89:B2:66:D0:7A:E1:3D:CC:01
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 0197B6A10CA873A2BAFE349B19495204E991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 03C4
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: IwAepEuaoHorqyKE8ZZL4fHwUYaAocLMrY13DfYUcAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0c:a8:73:a2:ba:fe:34:9b:19:49:52:04:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=a0096c8786fcbe49abd36789b266d07ae13dcc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:89:ab:d0:99:cd:be:cb:db:37:e9:57:28:
b0:89:69:be:c8:78:8a:0d:2e:20:d7:aa:c0:05:da:
a1:d1:09:30:28:b9:24:f3:ff:79:e4:3c:b2:83:3d:
6a:43:bf:a9:e3:45:15:f9:1b:c7:1d:e9:9e:a7:b9:
23:f5:c7:0f:5d:57:7f:3a:6a:4d:a7:b1:97:0a:94:
d5:af:1b:5b:3d:b7:0d:f0:66:f4:42:3a:a8:9c:7e:
c1:bc:14:e4:8f:66:14:86:34:d5:77:bd:4b:d3:9d:
fc:e3:5c:7b:de:fb:1a:e3:d9:2a:0d:4e:02:83:32:
f5:0d:f9:de:b0:3a:88:2f:d9:03:13:15:08:6f:ec:
34:6a:47:ca:6a:b4:0a:9f:e0:63:77:6e:1d:99:91:
a4:42:37:58:cf:cd:49:a3:aa:55:62:73:b5:64:2b:
70:c1:47:b2:85:ae:dd:c4:aa:46:f5:59:5e:9e:bb:
0c:4e:88:70:cb:c7:55:10:8f:8d:42:92:4e:64:e9:
0a:55:81:c8:74:d6:2b:8d:54:17:ea:ec:09:fb:10:
b2:f5:22:90:f9:61:d7:09:4c:2d:b0:85:a3:28:dc:
bd:1e:5b:ff:d6:7e:2e:9a:a3:6b:61:77:72:ab:0f:
0b:11:56:40:71:8f:fd:40:92:cc:44:ef:a1:6f:d7:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:09:6C:87:86:FC:BE:49:AB:D3:67:89:B2:66:D0:7A:E1:3D:CC:01
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:65:fe:36:c2:54:0b:5a:44:e4:13:02:b3:3c:c6:2c:1b:7d:
ae:7b:09:6c:84:89:75:64:29:0b:53:e4:ab:25:8b:24:1b:3a:
53:3d:b0:77:15:32:03:4d:34:2b:28:89:4e:0c:56:ee:0b:b4:
d7:28:ba:b7:52:0d:5a:58:ab:aa:59:2e:a1:b4:73:17:c1:5f:
18:c9:53:8b:c1:30:f6:40:34:e7:d3:e5:49:83:4b:25:b0:ce:
65:55:d7:b6:23:1e:76:9d:cf:52:ef:45:7a:ce:e1:81:a1:dc:
a8:62:e4:3b:ad:69:66:3d:13:08:21:01:92:f5:d4:76:cb:a0:
19:61:63:4c:fc:8f:7a:0a:f1:fd:56:c9:a5:8a:d2:2f:04:50:
ab:43:bc:d3:51:9c:d0:80:a4:96:bb:c6:89:02:0c:ee:a2:9d:
bc:68:0a:73:d5:f0:00:a4:3d:36:77:cd:33:0b:76:69:2a:ff:
c6:00:0a:f7:6e:0d:bd:7b:52:07:73:ee:a5:44:2e:31:09:1e:
12:fa:9a:d8:6e:d3:dd:77:1e:74:2d:43:7d:8d:4e:d3:24:ee:
55:8b:ac:61:a7:2a:ac:cb:c0:91:e2:81:15:e1:73:3d:3c:12:
7a:6d:1e:9f:01:2b:a1:3b:c4:1f:3c:87:48:e5:3e:e8:88:30:
58:4a:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:31 2025 by rpki-client