Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: my4RCI5E7rp3aBs4fQwstsdWREHjYtJexwlRtrsG+2o=
Subject key identifier: 1F:AE:B8:1F:00:BA:7F:79:B4:82:AD:54:8A:4F:3C:8D:79:0B:FD:BD
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 0199FBEBCF4C96ECA6B1FB4D618F0D7654D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 04F1
Signing time: Sun 19 Oct 2025 10:02:39 +0000
Manifest this update: Sun 19 Oct 2025 10:02:39 +0000
Manifest next update: Mon 20 Oct 2025 10:02:39 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: QDRzuXlAc+4WtQPiim9RvjdMUA+7VRSQ14IEeROQy88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cf:4c:96:ec:a6:b1:fb:4d:61:8f:0d:76:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Oct 19 10:02:39 2025 GMT
Not After : Oct 20 10:02:39 2025 GMT
Subject: CN=1faeb81f00ba7f79b482ad548a4f3c8d790bfdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:39:22:01:51:41:d0:74:e6:c5:a7:59:84:
07:f4:ac:e0:13:e6:ed:2a:84:f5:68:4f:cd:fb:fe:
60:12:b9:5d:f7:79:52:ed:3c:82:54:1c:ae:fe:1f:
52:22:80:63:f4:21:d4:9a:5a:1e:c9:46:e5:b3:97:
e7:aa:b4:2f:f3:f2:4e:a3:aa:a3:d9:e4:ed:d8:2b:
2c:af:a4:35:eb:b8:88:0f:33:02:f6:3d:88:ab:48:
3a:0b:b8:d2:56:03:06:d7:d5:2e:1f:cd:5b:d6:23:
9b:64:5d:81:0f:41:33:8d:72:02:51:2a:0d:66:d3:
40:25:8e:b4:02:6d:b6:57:d4:ab:41:a1:ff:11:a3:
f7:19:fd:11:19:ac:fa:97:9b:39:83:f1:c2:4b:84:
5f:e6:75:66:ce:2e:de:b2:62:24:42:22:a3:01:c9:
29:1c:4b:86:5d:10:d8:4b:95:43:4b:28:fc:f8:9c:
11:af:fb:8d:f4:df:25:71:80:5a:bb:b7:d4:39:2b:
b8:d2:45:93:8e:a5:cd:bd:92:f9:6d:85:1c:12:bb:
3e:8f:5a:aa:6a:eb:bb:0b:3b:e8:6b:c1:90:59:71:
8f:33:ee:04:fa:a0:17:cd:32:61:91:d1:69:03:bb:
2d:0f:80:66:d8:26:07:0f:43:76:ad:57:7e:88:ab:
e2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:B8:1F:00:BA:7F:79:B4:82:AD:54:8A:4F:3C:8D:79:0B:FD:BD
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:24:9a:01:dc:b2:e7:9b:b2:e2:18:78:c6:26:dc:e7:36:
6f:85:9e:77:5c:0e:a3:26:78:0f:20:43:97:e7:8a:8f:99:0a:
ad:4e:8b:db:65:2e:62:25:c4:0c:16:c7:73:b4:01:29:73:1e:
5c:5a:3f:15:27:bb:a1:ac:87:f2:26:c2:fd:59:c4:2d:7b:53:
87:7d:90:c6:00:3b:1b:0c:c4:53:27:ac:0d:f2:e1:fb:dd:7f:
5c:4b:dd:cd:4f:5f:ce:8f:87:f6:7c:4d:01:b1:e4:bb:eb:6b:
7c:bb:95:ac:db:dc:bd:99:7d:8b:37:20:e4:45:8b:4b:a9:30:
38:e5:0f:b7:b5:12:fd:2f:9b:d0:90:07:d3:6e:55:c1:58:c7:
4e:4a:13:ba:c1:2d:29:10:05:3d:34:31:fe:a9:2b:6d:0b:90:
df:34:2c:1b:2a:e4:9c:d0:3b:87:e6:33:d0:f7:ec:08:51:b1:
5f:6d:c1:93:43:04:44:ae:4a:bc:22:0d:7e:69:eb:f7:83:7a:
e1:44:bd:cd:67:92:fb:60:33:8b:05:f3:8d:51:e4:9d:a8:bf:
8a:25:fb:b1:b9:4e:6a:85:f6:82:c8:2a:69:8f:34:c8:08:bf:
83:0f:d2:fd:64:4e:17:75:cb:74:9c:68:d1:a6:ee:c0:1e:85:
4b:1f:9f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:36 2025 by rpki-client