Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: mMAo3ZH+u2146+bRyCz9PeSy5I8QCFogJg223iREEK0=
Subject key identifier: B0:36:56:D7:A2:3A:62:A8:5B:17:A1:92:8E:FE:B0:99:9F:02:4F:AE
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 0199FE7DE252EF1BBC407D060AA0978B934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 0754
Signing time: Sun 19 Oct 2025 22:01:26 +0000
Manifest this update: Sun 19 Oct 2025 22:01:26 +0000
Manifest next update: Mon 20 Oct 2025 22:01:26 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: i1zWyVf5vc2f75v5z49Pw1b5LyfHAFPU8FHuZAYx834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e2:52:ef:1b:bc:40:7d:06:0a:a0:97:8b:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Oct 19 22:01:26 2025 GMT
Not After : Oct 20 22:01:26 2025 GMT
Subject: CN=b03656d7a23a62a85b17a1928efeb0999f024fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:9a:d6:53:35:ee:40:2e:b9:c5:f1:94:8b:
70:b9:ff:9e:42:04:42:64:5f:b1:39:44:c8:2f:96:
6e:bf:84:39:e8:10:4e:45:17:10:48:db:87:75:fd:
73:ad:ac:1c:09:15:2f:a4:f3:8c:92:c5:92:14:bd:
cf:73:51:f6:6b:cf:4e:5a:88:bd:8e:99:53:00:92:
9d:ce:e6:67:f6:48:7e:cd:78:7a:3b:15:c7:74:53:
34:51:b9:44:46:df:05:e3:4f:4f:77:de:e5:d5:de:
67:a0:ce:a6:2c:94:81:55:35:ff:52:d3:b9:09:d5:
3f:92:e8:2e:ac:86:56:71:85:c0:f0:46:68:a7:f9:
c5:90:a1:cc:06:fe:26:1a:d6:b1:8a:f2:28:28:6c:
37:e6:54:79:28:8a:8f:55:28:30:44:f5:b5:68:53:
17:84:86:60:4a:18:0f:7a:0a:cd:49:97:35:78:f2:
a3:84:5a:f7:c1:80:c9:db:32:96:e7:67:80:fa:d4:
6e:16:c7:17:5f:85:93:56:66:e7:8e:70:7b:a0:1e:
f1:a1:ec:a1:0d:4f:4a:92:c3:44:75:fd:36:f2:39:
5b:dc:48:2d:ce:a6:90:3b:2f:e8:d7:07:f1:a0:8a:
50:23:d9:a2:8c:89:d9:80:ce:d0:1e:cc:a5:28:ca:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:56:D7:A2:3A:62:A8:5B:17:A1:92:8E:FE:B0:99:9F:02:4F:AE
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ea:1e:9c:bc:14:49:9a:4a:bc:11:14:f0:d3:fd:ca:97:c9:
a3:90:a1:a9:0f:16:a5:16:ef:bf:b6:f4:5f:f2:26:65:4a:2a:
63:b7:37:52:49:e5:5d:a7:60:6b:ca:ea:fc:ea:6a:8f:e3:9e:
19:b2:25:a5:45:d3:65:ed:85:c2:3b:87:00:65:0a:a2:ea:ab:
53:3c:94:5f:a1:ca:82:2b:17:a9:27:f7:b7:51:0d:62:24:7a:
88:14:56:66:bc:56:d6:fc:1a:63:07:7d:b2:f7:c5:94:0b:5d:
0b:4b:51:40:47:ec:55:e2:28:b4:bf:8a:2c:09:8a:0e:ea:0a:
39:2b:0e:35:fa:03:be:56:fc:00:c5:ff:7a:29:0a:26:03:90:
ac:ba:c8:cb:13:46:83:09:05:05:e5:b2:48:08:0e:d9:a5:bf:
59:03:17:d4:ae:af:2e:cd:dd:36:4a:06:4f:d6:e2:f5:e7:25:
99:f9:7e:b1:af:e1:d6:1d:6e:2e:78:a1:e6:e2:63:39:d7:33:
de:fa:e0:d8:06:d2:58:8a:fb:4f:3a:4a:c3:01:9d:a6:48:47:
24:89:9a:23:9c:c5:ff:2d:37:f8:85:4f:ff:b4:78:b8:02:69:
e3:9a:58:34:0f:fe:9f:37:83:df:7c:2a:0d:36:a9:ff:5b:3c:
3a:6d:03:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+feJS7xu8QH0GCqCXi5NKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5
YWIxOTMwHhcNMjUxMDE5MjIwMTI2WhcNMjUxMDIwMjIwMTI2WjAzMTEwLwYDVQQD
EyhiMDM2NTZkN2EyM2E2MmE4NWIxN2ExOTI4ZWZlYjA5OTlmMDI0ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwKa1lM17kAuucXxlItwuf+eQgRC
ZF+xOUTIL5Zuv4Q56BBORRcQSNuHdf1zrawcCRUvpPOMksWSFL3Pc1H2a89OWoi9
jplTAJKdzuZn9kh+zXh6OxXHdFM0UblERt8F409Pd97l1d5noM6mLJSBVTX/UtO5
CdU/kugurIZWcYXA8EZop/nFkKHMBv4mGtaxivIoKGw35lR5KIqPVSgwRPW1aFMX
hIZgShgPegrNSZc1ePKjhFr3wYDJ2zKW52eA+tRuFscXX4WTVmbnjnB7oB7xoeyh
DU9KksNEdf028jlb3EgtzqaQOy/o1wfxoIpQI9mijInZgM7QHsylKMpqDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA2VteiOmKoWxehko7+sJmfAk+uMB8GA1UdIwQY
MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt
NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz
LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOoenLwU
SZpKvBEU8NP9ypfJo5ChqQ8WpRbvv7b0X/ImZUoqY7c3UknlXadga8rq/Opqj+Oe
GbIlpUXTZe2FwjuHAGUKouqrUzyUX6HKgisXqSf3t1ENYiR6iBRWZrxW1vwaYwd9
svfFlAtdC0tRQEfsVeIotL+KLAmKDuoKOSsONfoDvlb8AMX/eikKJgOQrLrIyxNG
gwkFBeWySAgO2aW/WQMX1K6vLs3dNkoGT9bi9eclmfl+sa/h1h1uLnih5uJjOdcz
3vrg2AbSWIr7TzpKwwGdpkhHJImaI5zF/y03+IVP/7R4uAJp45pYNA/+nzeD33wq
DTap/1s8Om0Dog==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:01 2025 by rpki-client