Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: cRGuvlKyt8zChXGQzdaNNsHTaf2i1c+pysgBYCxAiNE=
Subject key identifier: 2B:B8:74:F6:3F:FD:46:BE:E2:A8:5D:E4:BF:54:69:48:0C:2F:0B:EC
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 0196BD80703662255F9A56167F802ED4EA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 0343
Signing time: Sun 11 May 2025 04:00:33 +0000
Manifest this update: Sun 11 May 2025 04:00:33 +0000
Manifest next update: Mon 12 May 2025 04:00:33 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: 89Hl+hA4axeqwAG4+E6Vr6dplR1nA8GnRAzw2hZIS+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:70:36:62:25:5f:9a:56:16:7f:80:2e:d4:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: May 11 04:00:33 2025 GMT
Not After : May 12 04:00:33 2025 GMT
Subject: CN=2bb874f63ffd46bee2a85de4bf5469480c2f0bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:d2:ee:96:21:4d:94:b2:f5:3d:cf:d9:42:
4c:c8:a6:73:19:1f:c1:5b:aa:01:64:5a:12:aa:2d:
f4:c6:41:41:08:f7:0e:5d:fe:eb:2e:85:96:8f:84:
3b:e3:b7:f2:50:ec:83:e7:07:90:68:36:20:6d:16:
5d:bd:e2:32:1e:3d:6f:54:b1:e9:1f:b0:74:62:bd:
53:89:73:30:0d:58:a8:db:52:c6:0f:53:43:18:80:
a1:2a:6e:a4:ff:76:c4:fd:b0:33:09:9f:ba:1e:9f:
03:b3:8a:d1:63:bc:f8:1c:96:41:67:27:fc:37:26:
a6:ec:8b:5b:8d:cf:21:7a:d6:8f:b9:92:82:bb:6b:
45:e6:39:86:7b:e7:e6:b3:a8:71:2c:21:1f:2b:9b:
1e:6c:22:f9:22:59:f4:b7:6d:eb:36:54:18:9b:22:
d8:3c:40:32:0e:64:5e:e4:d2:b5:70:f7:f6:70:9b:
af:9a:38:68:36:3d:46:34:c1:8c:15:d4:c2:6b:43:
14:31:c8:be:44:a5:b8:f5:8d:4a:47:e3:c7:89:ff:
71:90:ad:2e:dc:86:a3:3d:ad:8d:ab:f3:b2:c2:45:
2f:5e:82:6d:1f:85:c7:09:b7:75:c3:12:ed:35:2c:
7c:83:51:21:9d:e1:26:80:92:d3:a4:ec:44:fa:a9:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:74:F6:3F:FD:46:BE:E2:A8:5D:E4:BF:54:69:48:0C:2F:0B:EC
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:91:5f:28:39:66:50:8f:90:4a:7a:aa:e5:73:6f:76:3f:d3:
f4:0a:a7:0e:69:0b:86:9f:ce:f6:1c:75:20:13:60:ef:c4:4b:
6d:08:4d:27:bc:e1:21:16:dc:27:39:ce:f6:eb:66:16:98:11:
bd:9a:1a:b1:74:86:a0:89:c9:a1:4c:5e:f4:bf:6e:96:15:49:
76:2a:b4:12:96:46:03:f2:a6:16:be:09:f1:bf:e7:3d:d0:bb:
bf:6c:88:87:cd:9f:ea:a5:d4:9e:00:58:2e:bb:b9:ea:a3:15:
27:80:d8:f7:f6:27:93:9b:ad:09:6f:e4:d6:36:19:88:18:c6:
dd:a3:97:41:6a:11:01:07:cc:59:82:6c:1c:06:63:30:80:f0:
0e:e4:d8:b7:57:38:38:d4:ab:4f:1e:a0:91:fc:26:89:7d:32:
30:cc:2d:13:59:69:3b:03:e2:d4:2c:5a:87:94:ad:a9:f0:6a:
ec:d8:9f:69:e1:ac:0d:ad:ef:b2:60:f0:50:57:4e:f0:0f:27:
24:13:7f:17:62:82:b9:35:48:de:80:f5:0e:38:32:24:a6:e9:
84:b8:22:85:9e:51:04:dd:ae:c9:fe:a5:43:88:36:be:bf:ef:
62:df:75:3b:89:dc:cf:de:5f:a8:46:bd:bf:9a:a4:a0:b3:69:
80:34:a9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:11:33 2025 by rpki-client