Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File: cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier: nMMsrU3FJfueCtGgQLbw3jxPCe5X4vNfM4Whob4UVJg=
Subject key identifier: B2:EE:29:AF:5A:02:7A:B7:A4:57:6A:EC:67:D3:56:38:99:E5:7B:2C
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial: 019A71B81F7F16238A7A2D144DCBA9AA6EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number: 0802
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: Q+kITY1suW/gz7r8e5RwZG6ZB/1zfx0Yti/61Kd64Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1f:7f:16:23:8a:7a:2d:14:4d:cb:a9:aa:6e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=b2ee29af5a027ab7a4576aec67d3563899e57b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:51:b0:a9:56:e5:7b:3f:a4:d4:f4:4f:96:
6a:33:c9:06:9d:47:6a:e6:14:dd:da:71:20:14:69:
d1:9f:bb:e5:fe:2b:3c:88:0a:36:73:de:26:88:31:
d1:d3:a3:85:c6:06:bf:d5:85:d2:15:5a:55:35:17:
3f:28:56:a8:e9:3c:0b:e7:f8:a3:c3:61:8f:fd:98:
55:39:70:12:2c:7d:d1:5e:7d:c7:63:c9:71:30:ce:
22:d9:f6:8b:f4:1e:0e:82:de:92:1a:e0:a1:6a:ec:
fe:66:40:d5:6e:53:fa:3a:be:9b:0e:4e:b2:7a:29:
19:e0:14:1a:78:0c:70:b8:09:70:d7:f1:74:3a:b7:
b3:ed:c8:43:1c:b1:dd:57:bc:5d:9a:43:51:a5:27:
bb:bb:4d:fb:14:73:27:1c:1e:17:bd:8d:ef:22:ae:
70:92:c4:5c:0f:8a:fe:07:84:9e:03:f0:e1:ff:bc:
cf:64:0c:0a:7a:56:59:44:06:0e:92:4d:fa:ac:15:
4b:d6:d3:26:30:e6:30:8c:f3:c5:9f:a3:dd:70:c9:
ac:43:4a:59:37:dc:45:71:1b:b8:f3:9c:8d:f2:85:
c5:03:0a:8b:f5:f4:de:95:3a:6b:c2:3d:45:71:be:
fb:52:39:19:cb:fe:c4:92:72:f0:e6:b7:a5:b2:1d:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:29:AF:5A:02:7A:B7:A4:57:6A:EC:67:D3:56:38:99:E5:7B:2C
X509v3 Authority Key Identifier:
keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5b:7c:2f:a1:98:cf:4a:ab:17:73:3d:ff:50:af:84:be:09:
5e:e4:29:14:0c:0d:b1:72:ff:e2:0a:b7:39:a1:84:3e:bd:b3:
8d:73:ea:8f:90:a8:52:45:83:eb:35:14:41:eb:84:02:18:c4:
bf:87:01:c6:e4:d5:e6:a4:58:e0:34:cf:43:03:86:75:90:3c:
7e:1d:7c:d0:66:06:3e:2e:a2:c3:cd:54:c7:ec:ed:55:f1:f6:
82:13:20:69:4a:a5:0e:fc:ee:86:86:40:24:23:a7:2d:34:f0:
8f:66:49:cf:28:01:10:08:85:03:0f:8a:dd:b5:12:8b:f1:c8:
bd:65:48:fc:81:cf:5d:79:91:e6:f6:ff:99:f8:65:08:d2:85:
71:32:0c:7a:2e:57:59:99:53:7a:b7:4a:9a:e3:76:69:ed:6c:
95:ed:39:bc:c5:cf:38:e0:33:6d:fe:f8:72:56:55:a4:38:10:
7e:e1:04:07:aa:94:06:8a:b6:c7:72:92:d5:42:02:5c:e3:57:
ee:f5:c8:ea:e2:37:6c:e7:97:5b:89:1b:99:a7:a0:30:91:6a:
f8:c9:45:b2:b7:a7:ed:59:4b:3a:17:77:6b:11:ae:e4:78:02:
13:62:65:d4:98:5e:86:a5:0f:61:27:5f:02:f6:7c:cc:60:59:
a8:4e:da:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuB9/FiOKei0UTcupqm63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjc4YjY4MWI2NjE3ZmVkNzBjZTg2N2ZiOWE4YzZmMjVj
ZmRhNTUwHhcNMjUxMTExMDcwMTIzWhcNMjUxMTEyMDcwMTIzWjAzMTEwLwYDVQQD
EyhiMmVlMjlhZjVhMDI3YWI3YTQ1NzZhZWM2N2QzNTYzODk5ZTU3YjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHNRsKlW5Xs/pNT0T5ZqM8kGnUdq
5hTd2nEgFGnRn7vl/is8iAo2c94miDHR06OFxga/1YXSFVpVNRc/KFao6TwL5/ij
w2GP/ZhVOXASLH3RXn3HY8lxMM4i2faL9B4Ogt6SGuChauz+ZkDVblP6Or6bDk6y
eikZ4BQaeAxwuAlw1/F0Orez7chDHLHdV7xdmkNRpSe7u037FHMnHB4XvY3vIq5w
ksRcD4r+B4SeA/Dh/7zPZAwKelZZRAYOkk36rBVL1tMmMOYwjPPFn6PdcMmsQ0pZ
N9xFcRu485yN8oXFAwqL9fTelTprwj1Fcb77UjkZy/7EknLw5relsh3g+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLuKa9aAnq3pFdq7GfTVjiZ5XssMB8GA1UdIwQY
MBaAFHD3i2gbZhf+1wzoZ/uajG8lz9pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2Et
ODM3YjEwYzJjNjM2LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2EtODM3YjEwYzJjNjM2
LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVt8L6GY
z0qrF3M9/1CvhL4JXuQpFAwNsXL/4gq3OaGEPr2zjXPqj5CoUkWD6zUUQeuEAhjE
v4cBxuTV5qRY4DTPQwOGdZA8fh180GYGPi6iw81Ux+ztVfH2ghMgaUqlDvzuhoZA
JCOnLTTwj2ZJzygBEAiFAw+K3bUSi/HIvWVI/IHPXXmR5vb/mfhlCNKFcTIMei5X
WZlTerdKmuN2ae1sle05vMXPOOAzbf74clZVpDgQfuEEB6qUBoq2x3KS1UICXONX
7vXI6uI3bOeXW4kbmaegMJFq+MlFsren7VlLOhd3axGu5HgCE2Jl1JhehqUPYSdf
AvZ8zGBZqE7a+A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:38 2025 by rpki-client