Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: U0JL2ev58/pySzrsDIsaIp99pd3qSX5n+i3oNLiGshE=
Subject key identifier: F8:80:B0:7F:13:83:AB:79:73:A1:E5:1F:2A:12:CB:8A:3E:E5:06:B1
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 019745F9392F5F3104BF3CC5400CF5356A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 0D3C
Signing time: Fri 06 Jun 2025 16:00:50 +0000
Manifest this update: Fri 06 Jun 2025 16:00:50 +0000
Manifest next update: Sat 07 Jun 2025 16:00:50 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: CSkBLIAkmrm73+XdqKYDt+X3niERcbOc7r8Dsv0/NFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:39:2f:5f:31:04:bf:3c:c5:40:0c:f5:35:6a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Jun 6 16:00:50 2025 GMT
Not After : Jun 7 16:00:50 2025 GMT
Subject: CN=f880b07f1383ab7973a1e51f2a12cb8a3ee506b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:0d:f6:af:9c:f4:8c:fc:97:95:40:61:18:
13:5a:b2:e4:b0:c3:a8:4e:e3:70:18:52:a8:88:cb:
35:cf:fa:0b:52:7a:57:68:54:40:00:2a:4a:8c:9f:
a1:bd:16:e3:b1:8b:d7:3d:5c:38:f0:75:62:c4:66:
04:da:95:81:38:f2:58:73:03:50:2d:b8:1e:44:b1:
22:07:7f:06:db:53:92:e7:7e:6b:f8:64:66:9f:12:
29:c8:2d:a1:2a:4e:dd:55:02:c4:3a:69:c0:4c:fa:
f4:00:e9:57:14:0f:7a:6c:00:18:9f:6b:9b:9f:d4:
82:6e:e8:32:b7:8c:07:52:7c:48:f8:10:00:88:b8:
99:46:08:27:a5:f9:43:f4:8a:6f:eb:12:a3:7b:a9:
e7:59:35:52:71:c2:5c:e6:62:6a:a8:03:c4:80:93:
5d:94:a0:e1:be:d3:71:a9:d9:5b:c3:8b:a8:4c:4c:
5c:9f:41:97:d9:e1:93:b5:7b:20:ca:3f:6e:39:e0:
07:f4:ae:71:72:32:af:b9:bf:4e:9e:bc:82:9b:ac:
21:e9:ee:c2:a5:9c:b8:be:98:1d:41:02:9f:76:dd:
40:93:4f:9c:c4:02:11:40:42:4d:d9:3e:33:0d:90:
be:94:fd:b6:a4:1b:b2:e9:d2:70:72:8f:dd:a1:03:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:80:B0:7F:13:83:AB:79:73:A1:E5:1F:2A:12:CB:8A:3E:E5:06:B1
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:44:49:cc:9b:0d:b3:31:c4:23:cd:21:61:61:70:8b:bf:d5:
f5:fe:36:e8:6c:5e:ab:aa:df:e8:84:0f:e5:72:55:66:56:af:
5d:71:de:e5:d1:98:89:a8:2d:c6:17:1e:c2:ec:17:57:39:5a:
f3:de:31:56:34:d9:36:e0:7f:23:63:55:42:41:7c:90:54:11:
b1:e3:b5:fb:2d:c7:77:bb:81:4e:ef:f1:0b:ac:4c:03:a3:11:
08:fc:1f:7b:00:9b:7b:f4:57:e7:ea:b1:7b:83:3f:21:9a:42:
ed:35:65:9d:c5:1a:7f:b0:59:00:ef:6f:f5:c5:df:f3:24:43:
e4:46:61:bb:87:b3:ce:ab:65:59:cc:d1:3b:28:6d:72:f4:89:
83:20:cd:b7:77:78:ca:c0:ad:b1:7c:cf:55:6c:75:35:0d:54:
ae:40:16:66:79:9a:38:a4:d2:b6:d4:fa:3d:19:6d:0a:82:b3:
6d:f4:cd:80:3f:b2:1b:37:8f:c1:85:e3:a1:72:86:80:b2:21:
90:6d:ff:44:0d:84:59:74:d0:d3:0b:32:23:65:19:91:68:5e:
83:e3:32:dd:0f:0e:fc:c4:ef:1e:74:34:da:f5:8a:ef:df:40:
57:95:44:81:a2:59:33:05:dc:fa:93:ae:20:de:4a:44:18:67:
fb:d5:ca:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+TkvXzEEvzzFQAz1NWpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh
YjFiZTAwHhcNMjUwNjA2MTYwMDUwWhcNMjUwNjA3MTYwMDUwWjAzMTEwLwYDVQQD
EyhmODgwYjA3ZjEzODNhYjc5NzNhMWU1MWYyYTEyY2I4YTNlZTUwNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLMN9q+c9Iz8l5VAYRgTWrLksMOo
TuNwGFKoiMs1z/oLUnpXaFRAACpKjJ+hvRbjsYvXPVw48HVixGYE2pWBOPJYcwNQ
LbgeRLEiB38G21OS535r+GRmnxIpyC2hKk7dVQLEOmnATPr0AOlXFA96bAAYn2ub
n9SCbugyt4wHUnxI+BAAiLiZRggnpflD9Ipv6xKje6nnWTVSccJc5mJqqAPEgJNd
lKDhvtNxqdlbw4uoTExcn0GX2eGTtXsgyj9uOeAH9K5xcjKvub9OnryCm6wh6e7C
pZy4vpgdQQKfdt1Ak0+cxAIRQEJN2T4zDZC+lP22pBuy6dJwco/doQMz+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiAsH8Tg6t5c6HlHyoSy4o+5QaxMB8GA1UdIwQY
MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt
NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw
LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0RJzJsN
szHEI80hYWFwi7/V9f426Gxeq6rf6IQP5XJVZlavXXHe5dGYiagtxhcewuwXVzla
894xVjTZNuB/I2NVQkF8kFQRseO1+y3Hd7uBTu/xC6xMA6MRCPwfewCbe/RX5+qx
e4M/IZpC7TVlncUaf7BZAO9v9cXf8yRD5EZhu4ezzqtlWczROyhtcvSJgyDNt3d4
ysCtsXzPVWx1NQ1UrkAWZnmaOKTSttT6PRltCoKzbfTNgD+yGzePwYXjoXKGgLIh
kG3/RA2EWXTQ0wsyI2UZkWheg+My3Q8O/MTvHnQ02vWK799AV5VEgaJZMwXc+pOu
IN5KRBhn+9XKhg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:13 2025 by rpki-client