Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier: fflAZ5m/Xvu378+AbWXWyLquaX0BeFygmi2/llr+74M=
Subject key identifier: 62:BC:E8:12:8F:22:1E:79:8D:A2:DB:0A:9E:75:9F:BD:36:97:A0:1D
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial: 019A4EF4C9BD60CE85275A774450FE337E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number: 051C
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=)
2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: 85SpW29R4XwUF5ajjFsrlm53RtaNAJza0hcHNK8aRmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c9:bd:60:ce:85:27:5a:77:44:50:fe:33:7e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=62bce8128f221e798da2db0a9e759fbd3697a01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:13:1f:85:d3:92:34:da:28:7a:82:07:36:
c7:8a:77:5b:b0:73:62:e8:dd:dc:46:13:b5:8f:a3:
ab:df:97:c9:86:e8:f6:40:d7:1a:46:4f:77:b7:b1:
fc:d8:a8:83:7e:49:fd:ce:96:fb:3f:f0:71:63:a0:
0a:cf:3e:c5:44:ed:f3:1c:bc:e9:41:85:6c:ab:4b:
37:df:2e:5c:ea:f3:72:3c:36:0e:64:e6:db:49:37:
40:6d:29:0d:13:bc:1e:92:a0:82:92:5c:0c:39:b5:
c2:2d:83:c6:0a:54:6c:4e:b5:f5:71:9e:d5:07:95:
21:b0:16:95:ba:d5:72:cb:75:e6:93:d5:30:38:68:
ea:fc:f3:7c:b6:e1:74:80:3b:d5:a9:a7:5e:98:b4:
0e:bb:06:75:b2:59:80:59:a0:90:cf:00:d3:b6:6f:
c7:f1:ea:5f:8e:d2:4d:7b:1a:c9:87:2f:c8:d0:2d:
70:66:58:d6:3f:de:5c:03:d9:5a:5e:fb:8c:a0:a1:
29:c1:b4:42:82:44:b7:4e:91:0e:2c:0d:57:56:ba:
34:43:5e:35:5c:21:9b:c7:4c:64:c2:94:5b:a3:b1:
73:33:9a:c4:31:cc:97:b3:06:98:f7:e0:b8:eb:88:
e1:a6:ba:d1:e0:04:25:92:a4:7d:c4:26:3c:a0:33:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BC:E8:12:8F:22:1E:79:8D:A2:DB:0A:9E:75:9F:BD:36:97:A0:1D
X509v3 Authority Key Identifier:
keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ea:15:30:5c:f6:a8:e7:0a:ca:d4:01:bb:17:b7:63:ff:6a:
6d:8a:20:4b:f3:d1:7e:76:9a:56:d0:f4:be:66:74:45:9b:d8:
3e:00:01:82:f8:33:20:b8:ac:a8:da:22:a3:76:b1:99:1d:4c:
59:ce:d2:29:87:f0:ca:0e:eb:29:80:a9:c0:4c:39:3d:49:52:
ae:18:da:34:8a:70:f7:39:1e:ee:bc:1a:af:b2:8f:64:d7:a7:
9a:2b:75:56:af:d4:e1:a1:fb:32:b1:ab:08:c9:a5:9a:39:8d:
fc:1b:5d:58:20:f7:ca:d9:2b:c0:51:b0:79:da:62:8c:de:3d:
7b:de:e4:6b:4d:15:f3:7a:ca:62:4e:e1:1e:55:5c:bf:04:ae:
8d:3d:38:79:ae:f7:cb:07:5b:c9:a5:98:65:88:b2:43:ff:d7:
03:d3:3a:2a:61:0c:aa:e6:0d:b5:62:e8:77:0a:49:ea:73:e4:
c1:a4:1e:fb:91:43:63:41:39:1d:82:d9:10:74:ef:98:18:11:
4e:82:a2:7d:75:80:96:db:cd:ba:04:67:1b:af:1b:0f:bc:6b:
d0:8c:46:24:cb:81:3f:0a:98:ca:e2:f4:f0:17:30:c5:fe:fd:
40:f4:9b:e1:77:07:bc:ad:07:7b:6f:53:16:08:63:e2:d7:74:
61:e4:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:13 2025 by rpki-client