Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: aOqCne3InjJlMNCq0V1B8TNpDa00GRG5ZS+emqSz/xU=
Subject key identifier: 08:36:CE:10:8F:44:E4:16:BA:B5:99:C3:5B:0B:5D:21:4F:3E:8F:BC
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 019750EA8353EC62D2928075A0A3FD4E551A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 05F1
Signing time: Sun 08 Jun 2025 19:00:35 +0000
Manifest this update: Sun 08 Jun 2025 19:00:35 +0000
Manifest next update: Mon 09 Jun 2025 19:00:35 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: a8A2VUm2Gn8LuhDplGJto9S8HnhsoArzR9D97SAGSLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:83:53:ec:62:d2:92:80:75:a0:a3:fd:4e:55:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Jun 8 19:00:35 2025 GMT
Not After : Jun 9 19:00:35 2025 GMT
Subject: CN=0836ce108f44e416bab599c35b0b5d214f3e8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:9d:ee:e9:ee:1b:c1:46:d7:49:23:40:46:
ba:b7:f7:70:65:8a:94:5f:60:c1:1e:69:2b:d2:14:
6f:bc:2f:57:0c:45:0b:a7:fa:b1:1e:64:c7:b0:95:
02:6f:cf:36:3d:45:14:0e:3a:8f:57:65:08:70:84:
4f:43:29:87:9c:f6:31:20:46:31:cc:c4:df:20:a2:
b2:55:49:fe:9c:98:4f:83:f1:9a:0d:29:42:ec:f0:
f6:4e:36:c9:9f:89:67:a1:e7:19:f0:86:8b:8d:cc:
ca:bb:65:d5:13:21:87:4a:7b:a7:1f:c4:68:5e:f5:
2e:8a:57:46:11:3d:71:83:f9:c4:7c:6d:72:23:ce:
1c:fd:a8:0e:81:bc:f5:8f:64:12:b8:5d:56:ba:5b:
26:af:d2:56:a6:32:e1:93:8b:46:78:f6:8c:d9:0c:
4b:94:c4:71:fc:04:9c:16:94:82:1c:d5:2d:86:b5:
67:31:f7:64:de:70:98:59:13:81:6d:da:d4:ed:1a:
db:17:e4:a6:8e:41:6e:10:94:cd:25:5a:f2:45:aa:
26:2b:ad:d8:f7:de:00:7c:64:e2:d4:83:e0:49:98:
42:f7:d9:84:9e:38:6e:5d:bf:bd:06:39:6c:20:42:
42:1c:ad:a1:68:fa:1a:58:fd:be:b6:99:8b:27:df:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:36:CE:10:8F:44:E4:16:BA:B5:99:C3:5B:0B:5D:21:4F:3E:8F:BC
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:de:90:c9:20:4a:4d:da:e4:ba:22:53:9a:bc:ed:d3:4d:
e4:18:10:56:7c:9d:90:76:cd:97:be:c9:39:67:cb:85:18:b7:
2e:23:4a:62:cd:f6:c5:0a:a3:c3:95:52:3d:0e:a1:28:87:43:
1b:06:15:64:3b:80:78:b8:cb:f4:82:64:fa:40:02:95:74:00:
09:2b:8e:d3:69:10:dd:16:fe:7f:bc:1e:ae:3d:af:53:1c:18:
12:19:ff:bf:5d:12:a0:ed:44:1d:ca:ec:23:69:91:a9:1a:57:
04:71:3c:a2:8e:bf:99:f8:59:10:39:14:d7:ed:2d:9d:0b:a7:
74:21:a7:9a:bd:e6:b4:02:0f:92:62:42:e1:ce:e8:81:70:84:
1b:2e:63:d1:55:2f:87:6d:e3:c4:f5:65:b4:bf:ff:90:8a:15:
01:a9:e6:91:37:3c:0f:e3:f4:e0:1e:a8:99:25:a3:8c:4f:b3:
14:7d:ed:50:b0:01:85:0a:ee:f5:28:32:1c:97:6f:2a:de:b7:
bd:41:62:ef:4d:85:ca:df:28:84:6d:1b:01:47:ea:ef:6f:65:
96:fb:e1:7d:86:fe:4e:cb:23:e8:fa:7f:99:41:7c:50:b8:e9:
44:25:5f:4a:92:e1:80:2e:30:5d:bb:d9:7c:40:81:fc:42:b5:
95:5d:df:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6oNT7GLSkoB1oKP9TlUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5
YWIxOTMwHhcNMjUwNjA4MTkwMDM1WhcNMjUwNjA5MTkwMDM1WjAzMTEwLwYDVQQD
EygwODM2Y2UxMDhmNDRlNDE2YmFiNTk5YzM1YjBiNWQyMTRmM2U4ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEGd7unuG8FG10kjQEa6t/dwZYqU
X2DBHmkr0hRvvC9XDEULp/qxHmTHsJUCb882PUUUDjqPV2UIcIRPQymHnPYxIEYx
zMTfIKKyVUn+nJhPg/GaDSlC7PD2TjbJn4lnoecZ8IaLjczKu2XVEyGHSnunH8Ro
XvUuildGET1xg/nEfG1yI84c/agOgbz1j2QSuF1Wulsmr9JWpjLhk4tGePaM2QxL
lMRx/AScFpSCHNUthrVnMfdk3nCYWROBbdrU7RrbF+SmjkFuEJTNJVryRaomK63Y
994AfGTi1IPgSZhC99mEnjhuXb+9BjlsIEJCHK2haPoaWP2+tpmLJ996xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg2zhCPROQWurWZw1sLXSFPPo+8MB8GA1UdIwQY
MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt
NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz
LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+vekMkg
Sk3a5LoiU5q87dNN5BgQVnydkHbNl77JOWfLhRi3LiNKYs32xQqjw5VSPQ6hKIdD
GwYVZDuAeLjL9IJk+kAClXQACSuO02kQ3Rb+f7werj2vUxwYEhn/v10SoO1EHcrs
I2mRqRpXBHE8oo6/mfhZEDkU1+0tnQundCGnmr3mtAIPkmJC4c7ogXCEGy5j0VUv
h23jxPVltL//kIoVAanmkTc8D+P04B6omSWjjE+zFH3tULABhQru9SgyHJdvKt63
vUFi702Fyt8ohG0bAUfq729llvvhfYb+Tssj6Pp/mUF8ULjpRCVfSpLhgC4wXbvZ
fECB/EK1lV3fqg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:41 2025 by rpki-client