Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: t4dLCdqecjFAHgyPU7kze/RhEPCS78tiWX9/Q0ERZ3s=
Subject key identifier: F6:4D:B9:61:FF:6E:F3:8D:76:9F:CB:78:B2:89:54:5A:C8:8D:6B:CA
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 01968D3942C6AFF86A7E9D3FCDB1F31D0692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 032A
Signing time: Thu 01 May 2025 19:01:02 +0000
Manifest this update: Thu 01 May 2025 19:01:02 +0000
Manifest next update: Fri 02 May 2025 19:01:02 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: Y+joTIDrRtnX/e7C2xZsVRTjpeyojw3mtqlqyW58PWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:42:c6:af:f8:6a:7e:9d:3f:cd:b1:f3:1d:06:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: May 1 19:01:02 2025 GMT
Not After : May 2 19:01:02 2025 GMT
Subject: CN=f64db961ff6ef38d769fcb78b289545ac88d6bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:63:b9:1b:c5:a0:0f:fb:36:d0:64:41:31:
89:86:59:9f:12:42:57:2d:ef:7d:d8:c2:11:dc:02:
79:48:fd:0c:89:62:7d:e4:c7:aa:4e:81:63:e8:2e:
4d:88:f0:e7:02:e7:f6:cb:db:b8:02:0c:41:2e:5b:
04:a6:c7:06:9d:77:f9:5d:7b:8a:4c:be:db:26:80:
7e:c3:ce:7a:f7:6c:ca:83:fb:96:30:12:82:45:3b:
b3:88:e6:a4:1d:8d:7a:c7:62:56:32:a0:ae:ba:12:
29:7b:cf:60:80:aa:74:46:41:1a:d9:2d:a0:23:fb:
8e:85:de:85:f3:87:f5:09:58:61:f4:40:46:8f:38:
a4:ab:b4:6a:72:0a:f4:8e:94:7d:c8:3d:9c:99:8d:
13:d8:b2:04:34:0f:74:48:6b:32:9d:09:1d:29:7e:
32:96:60:6f:9c:6e:7d:0d:f6:f8:9d:a9:24:e2:eb:
7b:c5:79:89:de:0c:a2:7f:8a:54:20:cd:5c:af:b2:
30:04:81:ae:8b:e3:85:90:b1:ae:38:19:9b:57:04:
15:2d:73:c5:00:23:10:10:db:55:c3:c3:b2:2d:ae:
4b:f4:1b:ed:20:98:e6:53:e4:e2:d4:ca:cd:22:8a:
cf:72:f2:7b:c3:ce:08:18:66:0c:05:0b:5a:fa:d0:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:B9:61:FF:6E:F3:8D:76:9F:CB:78:B2:89:54:5A:C8:8D:6B:CA
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:7a:1e:88:54:ae:e4:75:fe:c0:38:f0:de:bc:52:a0:9d:
fc:32:74:12:5e:d6:77:f4:cd:d3:5c:1b:c8:b6:17:09:36:a9:
5d:c4:bb:79:2e:9d:ba:db:dc:76:8f:7d:2d:88:e5:d7:59:b8:
0a:8d:02:29:9a:d6:0b:8d:79:8f:7f:ca:66:2c:8b:4a:49:f1:
8c:b7:94:1a:b7:0a:b6:d2:6c:34:5d:43:83:d2:3e:f2:bb:b3:
97:d7:8f:be:aa:41:fa:8b:51:bc:d0:6c:65:3e:01:1c:20:2e:
68:5a:39:c9:2e:28:f5:66:b5:e5:fc:ad:1e:cb:ed:08:7d:59:
b2:bf:4a:4e:a2:da:98:cb:7c:12:06:2c:2c:21:54:cc:b2:30:
0e:3d:97:79:25:a0:2b:cc:73:cd:f1:7e:cf:83:c7:68:aa:90:
ff:7d:90:8d:7f:a4:e3:13:2d:10:38:78:95:51:c0:42:a3:84:
94:f1:1a:5e:70:ae:49:0a:13:a6:e2:23:8d:bb:f3:40:ba:32:
c6:87:ac:d4:7b:3c:66:4c:7d:b6:23:7d:6d:aa:f7:70:8f:1e:
56:09:32:95:d1:ec:b9:ae:f4:37:93:e1:34:fb:af:d0:f5:6e:
56:5a:77:cd:b7:32:fa:3e:7d:28:aa:89:f0:f0:86:4e:81:ad:
42:d5:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:39:12 2025 by rpki-client