Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: Lm5v4vO5idwJ5YDAYgahU0KSYjWsMs9eRylgHbindFI=
Subject key identifier: CF:3A:35:42:62:46:14:53:95:BE:8A:60:97:48:88:39:0A:43:58:64
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019A4F21C051591F096799CAD4509ABA5BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0BDC
Signing time: Tue 04 Nov 2025 13:50:03 +0000
Manifest this update: Tue 04 Nov 2025 13:50:03 +0000
Manifest next update: Wed 05 Nov 2025 13:50:03 +0000
Files and hashes: 1: bc1HzFd4K_TGK4SLLf_54MD78AY.roa (hash: tkj1ydGWI4MOgmRQ4K/5dC6Xa1S3Lun92GS8MzVs/EM=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: ASEXdFdeJtk+MSUWd5cKdB0NLtTDEIdXuKuSHvRHw10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:21:c0:51:59:1f:09:67:99:ca:d4:50:9a:ba:5b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Nov 4 13:50:03 2025 GMT
Not After : Nov 5 13:50:03 2025 GMT
Subject: CN=cf3a35426246145395be8a60974888390a435864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:7d:33:7e:0d:4f:54:22:61:6e:af:67:8d:
9f:2f:fb:81:75:70:f7:52:fb:6e:71:6b:d1:20:5c:
b7:45:4d:9e:a8:46:15:9d:31:7a:d5:9c:5d:04:ca:
46:16:99:9f:07:8c:b6:b9:b6:07:d6:2d:98:31:a6:
55:b0:32:a0:c4:66:17:60:fa:74:a6:3d:1b:9a:14:
cd:4c:cc:26:79:c1:c1:d6:19:7a:ae:41:9b:66:a2:
be:91:c8:74:0b:89:e9:08:94:ec:7e:b6:ef:aa:e7:
0f:69:b9:b3:51:78:e5:02:5f:ab:1d:ba:d0:9f:ba:
8a:76:2f:91:2b:da:7e:f0:88:25:a1:46:d3:e3:8c:
3a:0e:86:82:39:80:8b:2e:f0:95:cc:ae:15:b3:eb:
55:9a:8a:8a:f9:f2:68:f7:f7:f7:d4:07:5c:35:26:
3a:8f:1c:c0:df:3a:54:6b:23:d6:dd:a4:a5:57:9b:
62:6d:77:b4:82:38:ad:48:83:bd:90:7f:b1:ef:38:
e4:ea:fc:b1:95:57:a0:a9:7a:06:9e:82:8a:c5:fe:
48:d3:3e:7d:d6:5f:8f:0c:9c:6f:a6:56:3b:99:13:
67:91:d9:17:3f:61:62:09:0b:1d:b7:8f:d4:33:65:
8b:29:bb:98:ab:15:6f:aa:35:56:d7:42:1e:e7:53:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:35:42:62:46:14:53:95:BE:8A:60:97:48:88:39:0A:43:58:64
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:26:4a:41:8d:72:5b:ca:e8:74:4e:34:57:5c:65:aa:ae:c1:
c0:ef:e3:63:d4:e3:f4:b4:5e:74:98:48:c8:79:f3:ce:16:b3:
79:7a:a2:f9:a9:3f:86:2f:60:1b:03:00:53:2f:0d:43:9c:06:
83:c3:66:8e:7e:f7:c6:c3:4c:1d:57:50:1f:fb:85:60:39:9b:
8a:7f:20:e7:e9:85:9a:13:ee:10:59:d9:9e:15:48:21:82:b9:
fe:b6:b0:36:75:be:69:b8:b4:de:18:6e:c9:a3:86:60:df:70:
f7:bb:c3:33:32:f5:87:de:0d:3b:df:df:5e:a3:e1:d0:7a:c9:
bb:9b:71:66:aa:ce:cc:b3:d7:9a:5d:0e:d4:7f:69:e0:f5:c5:
02:d3:04:91:67:45:cd:dd:f4:98:ea:b9:d5:40:dd:e9:eb:bd:
c9:ac:72:da:9f:db:1f:a1:2c:78:bb:4d:09:a8:4f:74:7c:58:
90:36:78:1a:89:49:6e:1a:4b:87:b6:a4:81:d5:da:d8:94:6d:
5e:9b:99:de:c3:26:5e:c4:6c:7f:d4:5f:d3:94:5b:99:f8:ab:
0a:ff:6f:82:46:62:f9:e7:c0:5c:e4:6a:ef:09:1d:2a:c9:60:
be:b3:3f:62:75:dc:77:99:73:cf:49:40:a8:b9:d0:51:02:3f:
15:1e:68:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPIcBRWR8JZ5nK1FCaulvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTkzMDU4N2I0ZmQyZmVmNzI4ZjA1NmVjYTg2ODg0MjJj
M2I5N2MwHhcNMjUxMTA0MTM1MDAzWhcNMjUxMTA1MTM1MDAzWjAzMTEwLwYDVQQD
EyhjZjNhMzU0MjYyNDYxNDUzOTViZThhNjA5NzQ4ODgzOTBhNDM1ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CJ9M34NT1QiYW6vZ42fL/uBdXD3
UvtucWvRIFy3RU2eqEYVnTF61ZxdBMpGFpmfB4y2ubYH1i2YMaZVsDKgxGYXYPp0
pj0bmhTNTMwmecHB1hl6rkGbZqK+kch0C4npCJTsfrbvqucPabmzUXjlAl+rHbrQ
n7qKdi+RK9p+8IgloUbT44w6DoaCOYCLLvCVzK4Vs+tVmoqK+fJo9/f31AdcNSY6
jxzA3zpUayPW3aSlV5tibXe0gjitSIO9kH+x7zjk6vyxlVegqXoGnoKKxf5I0z59
1l+PDJxvplY7mRNnkdkXP2FiCQsdt4/UM2WLKbuYqxVvqjVW10Ie51PlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM86NUJiRhRTlb6KYJdIiDkKQ1hkMB8GA1UdIwQY
MBaAFK2pMFh7T9L+9yjwVuyoaIQiw7l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgt
Mzg5MWU2ZmVmZWE0LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgtMzg5MWU2ZmVmZWE0
LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniZKQY1y
W8rodE40V1xlqq7BwO/jY9Tj9LRedJhIyHnzzhazeXqi+ak/hi9gGwMAUy8NQ5wG
g8Nmjn73xsNMHVdQH/uFYDmbin8g5+mFmhPuEFnZnhVIIYK5/rawNnW+abi03hhu
yaOGYN9w97vDMzL1h94NO9/fXqPh0HrJu5txZqrOzLPXml0O1H9p4PXFAtMEkWdF
zd30mOq51UDd6eu9yaxy2p/bH6EseLtNCahPdHxYkDZ4GolJbhpLh7akgdXa2JRt
XpuZ3sMmXsRsf9Rf05RbmfirCv9vgkZi+efAXORq7wkdKslgvrM/YnXcd5lzz0lA
qLnQUQI/FR5obQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:13 2025 by rpki-client