Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: HgF52AqvKfEN5VotDT3r0kEscQVoZi9IE0TH3xA6ho8=
Subject key identifier: D2:79:10:F2:F1:84:3B:24:F8:36:33:EA:58:88:02:A1:67:27:AA:48
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 019922FAE2184DA16731D1280F5905FB11AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 0E33
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: wDqXzM4GVDInEZ5eUTLzxjL2fHsrPLyL0IM0DgR0QfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e2:18:4d:a1:67:31:d1:28:0f:59:05:fb:11:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=d27910f2f1843b24f83633ea588802a16727aa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:c0:34:cc:53:0e:2b:da:8d:e0:c3:b1:d0:
c5:d0:7c:01:94:50:42:d1:48:b1:11:77:ec:33:a2:
c3:0b:cd:7a:1c:14:a1:3e:08:6e:84:e1:54:c7:23:
ab:ae:97:69:0a:d7:bd:7a:ca:e4:23:db:5e:8f:74:
31:64:b7:6f:f7:25:13:1c:5f:9b:64:73:de:34:7e:
29:90:71:b5:00:3e:b0:a7:a0:6f:15:d4:6f:2e:c1:
a4:14:36:73:de:f2:4a:e1:5f:9a:75:d5:e1:ff:67:
48:e4:6d:e3:6b:eb:cf:84:6c:64:3c:c2:4b:df:b7:
9e:3e:7f:5f:5b:3a:45:89:3e:dc:86:07:09:5e:fc:
83:b5:1c:81:83:ea:d5:87:b6:7b:22:6e:1e:99:39:
c0:37:27:69:f0:fa:b4:db:7a:85:21:56:0f:de:2c:
c9:ca:ff:b4:3e:29:bb:b3:1b:41:d4:ba:53:9a:21:
de:3f:af:63:af:11:6f:c9:e2:81:47:c8:40:00:f7:
d6:95:34:4f:44:be:84:a6:dc:e4:79:50:28:b1:de:
d1:fa:ae:34:b7:bb:e1:17:91:25:80:ef:20:48:23:
49:2e:7a:b2:ea:da:27:8c:79:6c:90:f5:82:18:ff:
76:fc:b9:11:7b:2c:3c:fc:de:38:19:79:7f:1c:45:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:10:F2:F1:84:3B:24:F8:36:33:EA:58:88:02:A1:67:27:AA:48
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:07:36:21:db:8e:2d:14:21:7f:93:db:34:45:a5:ee:75:85:
33:b2:b1:43:38:65:23:ae:1c:0c:9e:28:4c:a3:cf:8c:7b:fd:
5c:8c:70:6f:0d:89:e1:65:ec:70:1f:e4:2c:94:fb:ea:6e:9d:
55:e2:68:4e:76:78:0d:2d:a5:8d:61:f1:53:82:34:7e:21:eb:
1f:b7:40:e2:6b:e7:72:41:47:ba:9e:c9:77:57:ec:32:f5:38:
e5:38:10:b0:36:3d:07:88:9d:7a:13:32:27:10:00:55:1f:c8:
73:68:94:e8:85:28:61:bc:49:31:9c:12:4b:e0:d5:ef:f2:a0:
06:aa:f5:b1:0d:b9:71:fb:20:e4:da:44:14:57:9f:c8:a6:ce:
5c:d2:cc:68:1c:1a:4a:ba:26:e2:94:9d:75:2d:d0:30:31:fc:
58:9d:30:b1:f1:2c:ee:dd:4d:5d:61:47:6b:bc:4a:e1:ad:14:
b1:48:58:be:f1:fc:1a:05:e0:da:18:4a:34:cb:f8:b3:a0:a4:
63:67:c8:52:ed:06:e7:e4:7e:45:14:cc:84:a0:61:e0:fd:f8:
da:9d:9e:55:fc:44:0b:8a:2c:48:eb:87:c2:e4:da:29:40:06:
f0:b8:25:58:af:aa:03:7d:f6:8a:7a:57:33:24:3f:9b:1b:ac:
6b:57:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:19 2025 by rpki-client