Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: mwd7PYq5XDPFBYBSyyLCSMSVMxN4hAuC/bdEg512k3I=
Subject key identifier: 14:FD:E8:93:85:5F:30:9A:52:EF:75:8B:E6:24:BE:20:A5:8B:F3:B6
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 019A228A72D40CEA6CBD17A34CC719E45556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 0505
Signing time: Sun 26 Oct 2025 22:01:29 +0000
Manifest this update: Sun 26 Oct 2025 22:01:29 +0000
Manifest next update: Mon 27 Oct 2025 22:01:29 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: i7d8FW93VUZ4LBn1oy4dqXJ8JAxJ4rppa5SLgkB4tEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:72:d4:0c:ea:6c:bd:17:a3:4c:c7:19:e4:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Oct 26 22:01:29 2025 GMT
Not After : Oct 27 22:01:29 2025 GMT
Subject: CN=14fde893855f309a52ef758be624be20a58bf3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:03:58:1b:a4:8c:7a:bf:99:86:55:b5:3d:
42:3d:d4:65:d6:31:28:ce:8c:57:97:7f:59:ed:d4:
b5:63:17:1e:61:44:43:2e:a1:9d:bd:bc:fa:82:2c:
72:0f:e7:51:3a:8b:f4:86:e2:72:3f:7e:17:31:b5:
d1:2b:83:31:cf:64:86:0f:87:87:a6:2d:22:1b:d2:
eb:81:23:53:e7:ee:5b:f6:da:7d:0d:52:1c:27:42:
01:24:af:9f:ba:05:d0:f1:bd:a8:87:d0:73:1a:5c:
cd:45:98:ad:92:f4:e9:57:d2:ac:1a:db:84:c8:34:
23:35:f2:3c:98:9b:65:96:92:0a:1f:18:1e:83:36:
a2:a2:76:70:d9:26:f6:15:78:3a:05:42:e6:b5:b6:
3f:6e:c3:77:f0:99:09:e1:8f:4a:c9:1a:20:e5:e1:
ed:3e:df:e7:0d:ca:ed:d7:57:05:0e:7a:89:8d:61:
63:37:bd:af:e9:5d:a3:26:46:bf:28:d1:de:e4:d2:
a8:73:c2:fa:86:3b:d5:b7:80:13:cd:0e:8c:17:66:
c8:61:11:84:b9:a8:57:e3:42:bb:12:05:a8:be:09:
b2:2d:c8:e8:43:24:e6:5a:92:c5:16:69:c6:9d:8c:
ab:3f:d6:63:d7:fd:d8:13:b6:8b:a8:de:1b:35:9a:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FD:E8:93:85:5F:30:9A:52:EF:75:8B:E6:24:BE:20:A5:8B:F3:B6
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:46:b6:86:de:db:30:e2:67:85:a7:25:d3:46:57:f7:e6:
d4:f7:88:9d:ad:db:4e:4d:cd:58:ca:18:52:d0:3d:4d:6b:d7:
47:83:2e:ff:d7:3c:9e:bc:d8:78:8b:41:fe:14:67:ef:0d:97:
03:e0:39:df:ac:54:20:29:06:68:81:45:23:83:80:db:53:ee:
62:2f:6d:8b:e4:b7:24:2a:38:92:3a:f3:af:3b:d2:a9:ad:4f:
c0:68:72:7f:f8:c0:53:53:01:76:85:bb:7d:ef:66:33:68:c9:
4f:88:be:95:90:43:78:0b:e0:53:e4:85:ce:e8:ee:b4:eb:da:
e8:47:48:14:dd:80:cb:d6:48:81:2e:cb:5b:3e:d6:43:66:3b:
f7:f3:ef:02:ed:10:97:4b:5c:e2:12:b2:ed:36:77:6a:09:6f:
f6:18:b5:3b:f7:32:d7:2f:23:e5:0d:89:8f:cd:6f:84:ce:f7:
dd:2a:a7:fe:b8:28:d0:bb:67:5a:3a:77:15:dd:5a:9b:60:0e:
49:63:d2:d0:89:41:f0:cc:93:05:2b:04:32:4f:ea:81:ca:10:
81:7f:ee:e5:01:0c:d8:82:02:32:2d:14:70:16:78:cf:6a:00:
22:e1:ef:f6:44:77:68:c1:97:1f:20:ab:c5:93:24:a6:10:9e:
d7:fb:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:52 2025 by rpki-client