Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: kJROci5qaehkn9ZM68S7q6ECupkwORrLpr411ur+niY=
Subject key identifier: 2A:0C:5C:CA:EF:DC:FE:A2:81:34:25:0B:2B:DF:1C:68:A0:8B:27:66
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 01989749F06054C97DB6C20980C6177033A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 069A
Signing time: Mon 11 Aug 2025 04:01:01 +0000
Manifest this update: Mon 11 Aug 2025 04:01:01 +0000
Manifest next update: Tue 12 Aug 2025 04:01:01 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: dWgTDhH1CyfrwUSX+jyjLt/cQGaIS+EWk66UVcTxNuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:f0:60:54:c9:7d:b6:c2:09:80:c6:17:70:33:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Aug 11 04:01:01 2025 GMT
Not After : Aug 12 04:01:01 2025 GMT
Subject: CN=2a0c5ccaefdcfea28134250b2bdf1c68a08b2766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:1a:bf:c1:96:31:67:4e:8b:8e:60:d0:d8:
5a:03:59:d3:b7:7a:53:b8:3c:48:10:52:6e:e8:5a:
11:a3:3a:c1:2f:a5:27:34:90:62:34:9c:e5:48:11:
f2:fc:e5:93:f2:f6:89:41:d7:d1:ad:fa:11:d4:a6:
c4:5c:f0:cd:00:8a:1d:d0:e2:66:23:db:95:f4:bc:
17:cc:1d:09:4c:ca:70:34:14:eb:62:97:ee:da:79:
59:c4:23:c2:7e:7a:74:e1:81:77:6f:1e:83:0c:50:
fc:67:52:01:b6:c7:70:2b:65:aa:f1:82:41:c7:5a:
82:b2:0d:59:2d:f8:51:6c:91:5e:03:56:fc:91:bb:
a9:86:19:9f:cf:26:5b:86:da:d7:46:50:31:a8:c3:
83:bd:21:b3:4c:29:fd:6b:bf:f6:b4:64:66:61:a4:
ba:fd:60:f4:de:a4:a4:58:b6:77:ed:9b:81:68:f9:
a4:b0:4f:7b:29:b4:1f:1f:7f:14:a5:c8:21:a0:e4:
d6:76:1d:29:c1:3b:1d:24:ba:75:f0:c5:4a:9f:8d:
34:2d:9d:c6:59:5f:2e:cd:04:35:62:95:04:41:2d:
07:3d:23:96:00:68:53:26:30:23:85:d3:47:c7:16:
8d:4f:12:86:b5:0e:57:c8:25:a8:02:7e:bd:1d:35:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:5C:CA:EF:DC:FE:A2:81:34:25:0B:2B:DF:1C:68:A0:8B:27:66
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f5:d7:33:3a:64:4f:e0:51:3c:2c:8a:1a:fe:a8:b9:1d:c2:
94:41:fc:41:2e:ab:fd:9e:d0:53:82:15:81:cc:34:89:6f:e8:
f8:65:6f:f1:e9:dd:ae:b1:51:6a:df:7a:8f:95:ce:48:1a:90:
62:13:76:61:80:2d:de:56:13:c4:61:dd:55:f0:14:1d:06:b7:
d1:47:ef:6d:ed:b8:75:3a:1b:8a:96:b6:42:a1:e0:22:08:d2:
a2:56:23:d3:c7:62:d3:ed:7a:d8:49:8d:c0:ee:e8:e5:dc:a4:
21:a2:9d:1c:ca:22:0a:e3:5c:9f:d9:29:45:4b:e6:8f:14:23:
ba:6e:62:78:26:ff:81:a0:d2:a7:03:e1:92:29:8a:e1:a2:69:
27:f6:c1:6e:f3:2d:3c:f9:85:48:7c:8c:d2:9c:d8:3f:03:94:
65:b3:56:8a:87:37:58:0b:50:98:f5:31:8f:ad:99:6f:bf:b0:
a0:a1:6a:12:e1:63:d8:69:0a:db:30:c8:12:bc:76:58:1a:9f:
d1:99:ec:7a:19:1b:a1:8c:9f:14:2c:6b:51:a6:0c:ee:3d:79:
a1:e3:6f:14:55:ac:e3:6a:b4:bd:f3:94:13:6f:56:a6:20:24:
ff:9c:89:0c:7f:fe:45:aa:d8:12:41:4f:a3:9d:95:32:f0:5b:
86:1d:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:19 2025 by rpki-client