Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: bXbM6SXK1wmgOOKGYFDlsG9VJ5M/y5NOfa4pBTV8rMw=
Subject key identifier: 7F:2D:53:BF:EC:C0:F3:97:BC:E0:59:68:ED:13:21:E3:D1:9E:E1:B5
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 0198D515AACAF2AE3CFB3D977A7178D74898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 06BA
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: InXnNMuQkFSkzjtLp2w51hQg+7MVrhD+YbD3g98BnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:aa:ca:f2:ae:3c:fb:3d:97:7a:71:78:d7:48:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=7f2d53bfecc0f397bce05968ed1321e3d19ee1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:f9:d3:ac:03:c9:fe:e5:f1:bf:c0:4a:61:
95:37:ff:ac:72:de:63:de:ca:09:35:18:2f:88:76:
d6:a0:d6:fe:4c:f7:47:2f:e8:c2:32:8e:1e:2e:fe:
b4:b9:a7:44:44:bf:86:f7:80:57:bb:24:8d:e1:0b:
fd:cb:12:ac:e8:d7:ce:6c:42:7d:79:7e:1a:2d:a1:
14:78:6b:a3:fe:1f:22:9d:12:bf:d2:df:00:57:85:
8d:5f:fd:c3:f5:d3:27:87:3d:ab:cd:67:cf:a5:69:
0f:bb:78:27:2d:e5:06:20:c6:10:c4:f4:4f:d5:56:
e6:5d:5a:2a:a5:96:18:a8:a1:cd:c0:1d:cc:a2:ce:
8a:bc:68:10:aa:b7:a1:b4:0d:68:b9:bf:7e:3a:71:
07:1e:a0:88:61:e3:8b:9e:dc:7f:fe:7f:80:ca:89:
5f:fd:d0:ee:eb:5a:05:fa:70:33:9d:2f:be:50:f6:
06:05:7b:d7:56:97:f9:4c:46:3d:8a:1e:44:f6:b6:
19:84:ed:9c:47:c6:58:d4:d3:f0:6b:30:01:b2:d4:
e9:32:39:c0:e4:bc:25:5d:a8:63:67:f2:46:ba:25:
be:1a:14:cd:8f:5e:62:e5:43:44:c9:53:c3:da:b7:
31:fb:bc:78:8d:a1:20:32:dc:7d:de:5b:f1:30:39:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2D:53:BF:EC:C0:F3:97:BC:E0:59:68:ED:13:21:E3:D1:9E:E1:B5
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f6:16:cf:21:08:a3:68:ba:cc:49:d2:c4:33:39:bb:bc:af:
b2:17:28:ec:aa:01:78:a1:54:ee:f5:5b:ce:c4:b4:02:31:8f:
43:37:7d:64:a7:13:10:44:d8:2b:f3:a4:5b:f6:03:53:20:ae:
60:ef:0e:a1:2e:bd:59:91:9d:63:7a:7d:3f:7e:65:87:84:77:
ab:3e:6d:2b:d6:b2:e6:7a:7c:07:80:a3:34:3f:6f:cb:47:17:
f3:42:4b:a6:f6:e1:20:7e:c3:d5:b3:37:9b:ac:1a:85:50:0a:
d4:d1:53:27:9f:e8:a3:8b:e7:02:8b:68:e4:b3:9f:95:72:05:
d7:2a:4d:42:30:34:a7:52:2b:fe:ab:b7:52:40:40:27:d2:7f:
41:b8:1a:77:b8:e3:6d:46:d0:61:35:76:8c:eb:b7:de:73:74:
90:dc:1b:1e:24:f7:b1:1b:8f:d4:da:e5:eb:9c:7e:2c:bf:65:
88:2c:af:58:26:d0:cc:35:7d:0e:d9:5b:c5:c0:41:92:76:fe:
dd:ac:b9:09:c0:59:75:a1:02:e1:51:52:eb:ca:fa:db:23:0c:
c7:19:c6:30:fe:3a:86:5d:c8:88:4a:58:c2:8d:64:af:f0:b1:
e3:37:ba:e6:1a:c1:62:ba:0c:43:2b:6a:cb:46:de:96:e2:be:
8e:de:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:33 2025 by rpki-client