Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: vck82duyOk4MvF8q1zs1DsdnVqYO6bsq4V2nUEctZtQ=
Subject key identifier: A0:A1:F6:D1:19:A4:3E:20:C4:E3:65:4B:D3:41:8E:64:AD:6C:AD:80
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 019A725C3B09FCECD955077CF32F3F635E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 0790
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: dq69eBGp3spj9FPmeUxzCpmOQ+2MWtW2QWiXtbvfVns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3b:09:fc:ec:d9:55:07:7c:f3:2f:3f:63:5e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=a0a1f6d119a43e20c4e3654bd3418e64ad6cad80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:b7:41:3c:ff:e9:30:ca:b1:87:4a:f5:7b:
03:9e:49:e2:ac:19:61:18:7d:8c:f5:92:8a:f9:56:
c3:8c:3b:b0:2d:91:a6:4f:47:96:d4:56:5d:15:6f:
05:b4:00:bc:2e:21:9a:2c:35:4d:85:ba:31:76:85:
8a:c3:1c:07:c6:6a:ff:c8:5b:cf:81:80:4d:cc:26:
40:98:94:ef:cb:35:c8:b0:9f:20:11:3f:c0:7e:d8:
21:ab:2d:1b:76:5d:c7:28:10:43:25:62:d4:8a:e4:
4a:19:0a:69:fa:71:87:7a:18:2d:24:95:59:96:60:
2d:72:37:b4:81:fb:3a:35:14:e8:e9:2f:4e:01:0f:
d5:d5:7e:a5:99:50:08:34:04:60:3b:b3:f0:9a:6b:
40:65:23:9d:a0:95:58:4a:31:22:88:c2:8d:e4:3a:
70:f4:b8:ab:22:4b:36:c8:bd:02:98:c6:ad:8c:1e:
ef:6d:35:47:00:eb:d4:da:7c:4e:c4:d0:21:61:be:
56:0b:ae:7f:3b:19:44:43:58:80:b2:6f:8f:e1:81:
a8:2f:75:59:c9:d5:a9:5b:a1:c5:1f:1b:ae:04:9e:
c7:a5:10:7c:6d:18:35:20:b1:6d:95:4e:03:70:35:
8d:61:86:2b:bf:41:46:be:e8:9e:ef:7d:1a:26:9b:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:F6:D1:19:A4:3E:20:C4:E3:65:4B:D3:41:8E:64:AD:6C:AD:80
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:95:5a:b5:9f:52:f9:1d:14:24:74:81:7b:98:1e:91:dd:2f:
1b:d4:e8:68:f6:5b:60:54:2f:5a:e8:66:21:6e:4e:29:c7:eb:
e1:ac:bd:3f:03:89:65:22:9d:54:20:2a:3d:79:24:d6:59:f6:
e2:4a:45:b3:8a:7b:96:06:66:e7:89:39:bd:ff:df:46:44:78:
26:2f:af:1b:e9:48:cb:77:8a:63:80:4f:a0:3c:b1:44:a5:3b:
a2:59:a5:4b:9e:cb:55:b6:ba:2c:34:8b:b6:f7:fa:ca:fe:03:
37:eb:3f:33:61:48:37:a9:5b:87:64:3b:c5:b3:08:38:84:f4:
f5:8f:9c:54:b9:e5:61:0a:3b:46:a9:69:f8:28:37:c8:98:a8:
6a:d5:17:ea:5a:4d:24:67:08:12:07:7b:12:f7:8a:d3:48:3b:
d5:c8:15:5c:d8:7e:2b:c7:60:cd:c9:be:46:80:95:3d:b1:24:
a2:34:81:03:e8:ca:3b:43:3b:2e:7c:be:88:20:0f:88:c3:d0:
04:a6:a0:8e:3a:9b:15:63:a9:55:26:ad:0e:33:f3:3f:87:8b:
c6:cf:c6:bd:22:a6:2a:90:02:5e:32:12:51:36:b7:41:34:04:
6f:56:c2:6f:94:2a:16:da:61:a6:da:7d:d8:9c:50:18:f3:95:
fa:e8:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:47 2025 by rpki-client