Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: UFp/hoYsvjDzjkQ77YuaLjgp4GbtKtnOltSmzF63P/g=
Subject key identifier: 7C:C6:B2:D0:E8:51:E2:A6:B2:45:1A:46:CE:75:A6:F2:AE:6A:FF:4F
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019A71B9494CBE6DA130C70FF6E84CE38755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0BEE
Signing time: Tue 11 Nov 2025 07:02:39 +0000
Manifest this update: Tue 11 Nov 2025 07:02:39 +0000
Manifest next update: Wed 12 Nov 2025 07:02:39 +0000
Files and hashes: 1: bc1HzFd4K_TGK4SLLf_54MD78AY.roa (hash: tkj1ydGWI4MOgmRQ4K/5dC6Xa1S3Lun92GS8MzVs/EM=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: mJTi87QG8GYWOUwk6xqQuXRKGUPwV2Zu+XVHMwT+sbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:49:4c:be:6d:a1:30:c7:0f:f6:e8:4c:e3:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Nov 11 07:02:39 2025 GMT
Not After : Nov 12 07:02:39 2025 GMT
Subject: CN=7cc6b2d0e851e2a6b2451a46ce75a6f2ae6aff4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:9d:54:18:16:45:66:58:3b:46:70:bc:0f:
88:fd:ed:ae:e4:55:6c:b9:d0:c8:67:51:13:04:c1:
8f:ce:e8:e9:f8:87:a9:00:b0:3b:00:33:20:c5:40:
e2:e4:43:19:92:6d:a2:9f:24:9e:17:b6:9b:9c:1e:
81:0e:20:a8:93:32:3f:83:e4:cc:cf:00:27:a9:47:
33:4e:20:1b:b6:0e:c6:2e:15:76:57:a0:4b:30:16:
91:a8:dd:a4:ce:9b:7a:07:df:91:6f:4d:37:af:a7:
97:32:b2:73:20:d1:08:f6:7b:aa:6c:49:6b:ac:29:
3b:fb:04:aa:da:ec:b9:2f:36:f2:40:e5:24:d4:64:
80:df:7d:6a:73:88:c7:b7:72:c6:78:8a:97:d4:1a:
63:c6:db:3a:81:49:7a:d5:e7:e7:24:9b:c0:34:21:
ec:1d:7e:28:3e:d1:d9:f2:a3:80:ce:8b:d3:f8:7d:
d9:5f:2a:68:07:3a:e4:34:cd:95:8e:68:0d:a8:4e:
6e:ad:10:41:2c:61:e0:19:c6:bb:d3:05:2d:f9:0d:
5a:7b:0f:e3:a6:32:46:1f:38:46:93:b4:8a:59:09:
fb:c5:02:3f:4e:a6:c5:ed:8d:b0:31:5f:8f:b6:11:
98:c8:bc:3c:69:91:37:09:d6:3c:be:99:2e:12:36:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:B2:D0:E8:51:E2:A6:B2:45:1A:46:CE:75:A6:F2:AE:6A:FF:4F
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1f:50:77:29:ea:60:cc:a4:32:f0:63:11:10:67:94:ff:d7:
04:39:1f:e4:5a:96:af:8c:f0:6a:b1:1b:32:97:be:c5:2d:21:
96:cf:ee:d7:5f:ab:fb:95:ab:69:4a:90:b6:9c:64:8f:f2:c7:
aa:0c:5f:ce:cc:5d:69:c3:8e:82:fa:8a:18:36:b7:f7:67:b2:
90:8a:79:76:7f:ca:26:86:31:fc:9b:0d:b4:a6:42:1f:b4:63:
bc:2f:3d:89:cf:c5:e9:df:79:23:21:38:a5:ef:00:30:f0:dd:
a1:5d:d4:43:1e:52:c5:c7:b3:a3:76:98:02:dd:26:70:ed:61:
24:e8:79:59:60:0d:b0:f3:f7:17:8d:89:71:0a:b3:a2:87:37:
eb:60:77:2d:b2:cd:66:73:75:1b:1a:de:3f:a6:a9:9d:99:54:
be:01:57:a1:c6:81:81:7a:80:a3:36:8a:46:bc:c3:f8:80:2f:
0d:01:ef:70:eb:4e:bb:66:1b:df:ce:51:25:a3:e0:ac:33:04:
8b:2c:6b:c8:76:06:a0:81:76:fe:c8:0f:84:da:60:98:f5:1f:
9a:c8:6c:e7:f6:c5:fe:08:b4:4a:92:73:c8:d9:22:32:01:d2:
43:f0:c1:8b:b2:de:70:14:ce:e8:67:e9:55:ff:fb:fe:40:44:
cf:34:17:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuUlMvm2hMMcP9uhM44dVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTkzMDU4N2I0ZmQyZmVmNzI4ZjA1NmVjYTg2ODg0MjJj
M2I5N2MwHhcNMjUxMTExMDcwMjM5WhcNMjUxMTEyMDcwMjM5WjAzMTEwLwYDVQQD
Eyg3Y2M2YjJkMGU4NTFlMmE2YjI0NTFhNDZjZTc1YTZmMmFlNmFmZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE+dVBgWRWZYO0ZwvA+I/e2u5FVs
udDIZ1ETBMGPzujp+IepALA7ADMgxUDi5EMZkm2inySeF7abnB6BDiCokzI/g+TM
zwAnqUczTiAbtg7GLhV2V6BLMBaRqN2kzpt6B9+Rb003r6eXMrJzINEI9nuqbElr
rCk7+wSq2uy5LzbyQOUk1GSA331qc4jHt3LGeIqX1Bpjxts6gUl61efnJJvANCHs
HX4oPtHZ8qOAzovT+H3ZXypoBzrkNM2VjmgNqE5urRBBLGHgGca70wUt+Q1aew/j
pjJGHzhGk7SKWQn7xQI/TqbF7Y2wMV+PthGYyLw8aZE3CdY8vpkuEjZvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzGstDoUeKmskUaRs51pvKuav9PMB8GA1UdIwQY
MBaAFK2pMFh7T9L+9yjwVuyoaIQiw7l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgt
Mzg5MWU2ZmVmZWE0LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgtMzg5MWU2ZmVmZWE0
LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx9Qdynq
YMykMvBjERBnlP/XBDkf5FqWr4zwarEbMpe+xS0hls/u11+r+5WraUqQtpxkj/LH
qgxfzsxdacOOgvqKGDa392eykIp5dn/KJoYx/JsNtKZCH7RjvC89ic/F6d95IyE4
pe8AMPDdoV3UQx5Sxcezo3aYAt0mcO1hJOh5WWANsPP3F42JcQqzooc362B3LbLN
ZnN1GxreP6apnZlUvgFXocaBgXqAozaKRrzD+IAvDQHvcOtOu2Yb385RJaPgrDME
iyxryHYGoIF2/sgPhNpgmPUfmshs5/bF/gi0SpJzyNkiMgHSQ/DBi7LecBTO6Gfp
Vf/7/kBEzzQXdA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:01 2025 by rpki-client