Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: 99uT+z9nJ1RteMPN60ZvfMext0G110N2kY5jBfOy/ZY=
Subject key identifier: 67:5A:86:08:AE:BA:BB:76:35:3E:AE:75:20:D9:2B:6E:C9:4C:AD:28
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 01992255C60BA3839E802F333D536A8127F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 06E2
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: yMVkD25ISsyrdd8lPVKGQYUbIoH6ge14EbmNkR4DGUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c6:0b:a3:83:9e:80:2f:33:3d:53:6a:81:27:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=675a8608aebabb76353eae7520d92b6ec94cad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:69:11:63:a3:95:24:d8:28:d7:5d:e6:4b:
a4:ae:6e:ec:ce:cf:f9:4b:d1:d0:62:ac:b2:5f:b4:
cc:ec:77:47:2a:24:b5:13:ea:95:d3:fb:26:18:df:
25:e3:3e:09:64:ef:6b:79:58:9c:30:dd:2f:05:2b:
a5:e5:2b:2e:13:c3:c3:ae:31:21:c0:5b:a1:69:1c:
d5:76:e1:b4:cf:05:f6:ae:d6:6e:77:ff:a2:04:e0:
f7:ed:80:f8:38:74:10:67:a6:22:40:af:09:52:45:
07:dc:56:a0:a2:dc:ec:7e:7f:27:b9:6e:f8:ba:7d:
5c:64:d4:32:81:c8:a5:d1:67:9c:dd:ac:ca:9c:d0:
b0:6f:59:97:60:74:12:40:61:ae:df:d9:87:d0:9b:
89:79:a3:30:f5:7f:b8:57:c6:cd:d7:41:12:a4:59:
b9:b7:31:76:4a:19:aa:11:a5:66:93:ae:d1:89:7e:
3e:76:3f:a5:70:ea:9e:c4:71:0a:f3:af:60:cd:ca:
0f:08:3d:c8:08:f4:5d:60:a0:eb:0f:af:93:10:39:
df:04:51:d4:dc:c3:74:6f:94:50:40:90:37:29:13:
46:b3:4f:b0:f4:1f:62:11:11:1d:2c:61:fc:a7:01:
f5:bb:79:75:82:8e:9b:ff:7d:f5:90:ed:d2:53:fd:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:86:08:AE:BA:BB:76:35:3E:AE:75:20:D9:2B:6E:C9:4C:AD:28
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:7b:b5:04:83:5e:51:b5:68:9d:dc:da:1e:56:43:d0:5f:
66:f5:2e:65:81:5d:6d:51:20:7e:ec:44:1b:f6:9e:e4:b3:29:
40:98:7f:c6:f3:55:d8:b0:d9:27:d5:7f:ed:4a:a5:09:a5:61:
e2:3f:fd:6f:c8:e5:2b:08:96:2c:06:df:20:15:9d:06:53:ee:
e0:e0:89:61:12:ed:11:8f:7b:a8:3b:2f:c4:b2:e9:9d:fd:35:
73:6d:c6:08:97:28:9a:a6:aa:66:72:68:04:11:0a:40:b6:e3:
14:6d:e9:2c:83:81:73:35:99:ca:2f:10:9e:74:ac:6e:36:b8:
ff:00:ad:0c:7b:d8:b0:4e:b2:44:d0:cc:a7:9a:3d:e1:df:5b:
f9:db:90:92:9f:e8:49:72:58:ac:40:95:81:bd:36:20:5e:63:
f1:a7:40:80:38:34:99:48:50:d3:6a:b4:92:bf:13:e1:e8:09:
ca:d1:ff:f6:d9:de:19:63:60:c8:05:38:f6:62:4d:71:8e:05:
e6:c7:52:b0:a8:02:bc:ec:c6:76:bb:d4:ed:fb:96:45:0b:88:
b5:49:28:5f:9e:69:aa:cb:e7:72:25:62:62:9d:de:b2:a4:4c:
0d:1a:77:c5:af:92:cd:62:94:36:99:a4:9d:52:e7:02:89:dc:
3d:1b:92:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVcYLo4OegC8zPVNqgSf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5
YWIxOTMwHhcNMjUwOTA3MDQwMTEwWhcNMjUwOTA4MDQwMTEwWjAzMTEwLwYDVQQD
Eyg2NzVhODYwOGFlYmFiYjc2MzUzZWFlNzUyMGQ5MmI2ZWM5NGNhZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v5pEWOjlSTYKNdd5kukrm7szs/5
S9HQYqyyX7TM7HdHKiS1E+qV0/smGN8l4z4JZO9reVicMN0vBSul5SsuE8PDrjEh
wFuhaRzVduG0zwX2rtZud/+iBOD37YD4OHQQZ6YiQK8JUkUH3Fagotzsfn8nuW74
un1cZNQygcil0Wec3azKnNCwb1mXYHQSQGGu39mH0JuJeaMw9X+4V8bN10ESpFm5
tzF2ShmqEaVmk67RiX4+dj+lcOqexHEK869gzcoPCD3ICPRdYKDrD6+TEDnfBFHU
3MN0b5RQQJA3KRNGs0+w9B9iEREdLGH8pwH1u3l1go6b/331kO3SU/3VqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdahgiuurt2NT6udSDZK27JTK0oMB8GA1UdIwQY
MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt
NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz
LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbp7tQSD
XlG1aJ3c2h5WQ9BfZvUuZYFdbVEgfuxEG/ae5LMpQJh/xvNV2LDZJ9V/7UqlCaVh
4j/9b8jlKwiWLAbfIBWdBlPu4OCJYRLtEY97qDsvxLLpnf01c23GCJcomqaqZnJo
BBEKQLbjFG3pLIOBczWZyi8QnnSsbja4/wCtDHvYsE6yRNDMp5o94d9b+duQkp/o
SXJYrECVgb02IF5j8adAgDg0mUhQ02q0kr8T4egJytH/9tneGWNgyAU49mJNcY4F
5sdSsKgCvOzGdrvU7fuWRQuItUkoX55pqsvnciViYp3esqRMDRp3xa+SzWKUNpmk
nVLnAoncPRuSUA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:49 2025 by rpki-client