Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
File: cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft (raw, json)
Hash identifier: E6aSfigRqCnFe8wWawNQWx7ponpF5Y/uxoXmmpKiZxA=
Subject key identifier: 5A:6A:C5:E4:0E:40:66:33:53:2B:77:D9:34:79:93:B1:E0:88:F1:F6
Authority key identifier: 70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
Certificate issuer: /CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Certificate serial: 019A4EF422507736E00BCD6DB14273AFE630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
Manifest number: 07F0
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: 7vwEs2K4HN_LwUWqzjIICNGiknc.roa (hash: wTMMtevJNZjpsr8DvgOjhFZoAuNt0W+HiAbIshmL9sQ=)
2: cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl (hash: sYh3Ccj6K/uGm5WI6HtUHFsgaxGzrbppN5NgKYrcqIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:22:50:77:36:e0:0b:cd:6d:b1:42:73:af:e6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f78b681b6617fed70ce867fb9a8c6f25cfda55
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=5a6ac5e40e406633532b77d9347993b1e088f1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:03:28:40:cc:e7:13:2e:89:1b:2d:b8:5b:
2c:4d:40:45:45:45:cb:13:f7:af:32:83:f8:9f:e8:
4d:18:63:0f:bd:8a:02:82:66:8d:39:49:01:6f:51:
52:ef:79:e2:aa:5a:78:af:98:9b:b4:38:41:3c:02:
16:67:d0:69:18:e8:c1:a5:f1:4a:59:b1:97:91:50:
44:c9:c3:8e:7e:0c:44:7c:81:0c:c2:a7:1b:db:f3:
aa:9a:bd:68:da:40:43:4e:eb:76:1c:4b:51:e5:f9:
fc:8c:b3:d1:88:ef:eb:71:08:2e:00:e1:ce:9e:38:
3c:02:c2:6a:ad:53:ba:44:24:5f:f0:63:17:8f:24:
b2:ea:39:85:c4:27:7e:82:61:b9:3a:f4:55:82:24:
c0:03:2b:d9:ee:f6:2e:2c:df:eb:93:42:b8:0b:2c:
20:18:c5:ed:7f:f3:cf:6c:80:c6:92:8f:4e:f2:69:
a9:cc:c1:d8:75:d7:d7:23:39:9a:1f:11:96:18:bc:
a0:14:87:37:78:ea:07:e3:63:d1:e3:2b:44:23:aa:
75:5b:36:98:c0:44:c9:ac:12:61:83:ee:79:3b:12:
5a:ec:aa:5a:da:fc:14:d1:c1:bb:94:10:62:e2:5a:
5c:74:02:b8:86:5f:52:71:9d:5d:dd:03:87:f5:da:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:C5:E4:0E:40:66:33:53:2B:77:D9:34:79:93:B1:E0:88:F1:F6
X509v3 Authority Key Identifier:
keyid:70:F7:8B:68:1B:66:17:FE:D7:0C:E8:67:FB:9A:8C:6F:25:CF:DA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPeLaBtmF_7XDOhn-5qMbyXP2lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/56ae15-1ca5-4d69-9a3a-837b10c2c636/1/cPeLaBtmF_7XDOhn-5qMbyXP2lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:07:b9:6c:a3:6f:64:b4:7c:e2:c9:a7:26:9f:43:98:dd:75:
b7:16:1d:a6:a9:3c:f1:ec:76:cd:21:0d:19:42:45:6d:d6:bd:
c1:30:12:45:ad:61:cd:19:4b:cb:50:20:49:f2:04:ad:3b:11:
4e:c5:0d:d8:ee:10:89:ff:32:70:06:e4:2a:da:d4:d9:29:64:
12:9a:9e:be:48:09:5a:e6:41:d0:30:8c:21:bf:c9:f7:5c:7a:
af:f8:ae:e7:67:6f:78:71:d4:b9:20:82:d9:ae:3c:46:e5:9b:
d8:21:7a:c0:33:98:53:a9:72:98:2c:a8:08:e5:d0:9d:06:26:
84:88:79:f3:ec:c0:23:6d:e9:03:5e:2b:a8:54:1b:fb:9a:1b:
f0:57:4b:6e:1e:60:80:d7:cd:c7:17:aa:78:a4:34:de:41:68:
65:bd:b3:d3:26:7f:fd:60:27:9b:e5:75:b8:2a:91:0a:83:83:
9a:ae:9f:dc:30:f4:ec:8c:23:44:71:70:9e:81:e9:47:dd:0e:
c7:72:4a:f6:f6:e1:37:bb:89:ae:83:09:41:73:d9:f8:16:6d:
df:cf:5e:2e:f1:8a:0c:3b:e3:87:09:22:e3:1f:d4:45:de:b4:
45:21:dd:62:09:17:d0:b7:96:c9:8e:4d:80:80:60:ca:0e:66:
50:c2:08:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9CJQdzbgC81tsUJzr+YwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjc4YjY4MWI2NjE3ZmVkNzBjZTg2N2ZiOWE4YzZmMjVj
ZmRhNTUwHhcNMjUxMTA0MTMwMDEzWhcNMjUxMTA1MTMwMDEzWjAzMTEwLwYDVQQD
Eyg1YTZhYzVlNDBlNDA2NjMzNTMyYjc3ZDkzNDc5OTNiMWUwODhmMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIoDKEDM5xMuiRstuFssTUBFRUXL
E/evMoP4n+hNGGMPvYoCgmaNOUkBb1FS73niqlp4r5ibtDhBPAIWZ9BpGOjBpfFK
WbGXkVBEycOOfgxEfIEMwqcb2/Oqmr1o2kBDTut2HEtR5fn8jLPRiO/rcQguAOHO
njg8AsJqrVO6RCRf8GMXjySy6jmFxCd+gmG5OvRVgiTAAyvZ7vYuLN/rk0K4Cywg
GMXtf/PPbIDGko9O8mmpzMHYddfXIzmaHxGWGLygFIc3eOoH42PR4ytEI6p1WzaY
wETJrBJhg+55OxJa7Kpa2vwU0cG7lBBi4lpcdAK4hl9ScZ1d3QOH9dqZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpqxeQOQGYzUyt32TR5k7HgiPH2MB8GA1UdIwQY
MBaAFHD3i2gbZhf+1wzoZ/uajG8lz9pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2Et
ODM3YjEwYzJjNjM2LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81NmFlMTUtMWNhNS00ZDY5LTlhM2EtODM3YjEwYzJjNjM2
LzEvY1BlTGFCdG1GXzdYRE9obi01cU1ieVhQMmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwe5bKNv
ZLR84smnJp9DmN11txYdpqk88ex2zSENGUJFbda9wTASRa1hzRlLy1AgSfIErTsR
TsUN2O4Qif8ycAbkKtrU2SlkEpqevkgJWuZB0DCMIb/J91x6r/iu52dveHHUuSCC
2a48RuWb2CF6wDOYU6lymCyoCOXQnQYmhIh58+zAI23pA14rqFQb+5ob8FdLbh5g
gNfNxxeqeKQ03kFoZb2z0yZ//WAnm+V1uCqRCoODmq6f3DD07IwjRHFwnoHpR90O
x3JK9vbhN7uJroMJQXPZ+BZt389eLvGKDDvjhwki4x/URd60RSHdYgkX0LeWyY5N
gIBgyg5mUMIIzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:08 2025 by rpki-client