Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: bjULR5pKEAf68nPNKNaru4cxHbxTDwOZVtiAlUoQgrs=
Subject key identifier: 75:ED:7E:42:EC:35:1E:8A:C4:3E:D0:87:78:E4:6A:C9:C3:86:E5:72
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 019A4C612E1A59A1E7311840DC24F843D7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 0ECD
Signing time: Tue 04 Nov 2025 01:00:28 +0000
Manifest this update: Tue 04 Nov 2025 01:00:28 +0000
Manifest next update: Wed 05 Nov 2025 01:00:28 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: LhzhK/vKFf3cZQYl1UpMYgFMtArN8+ju0gqNjbOiwF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2e:1a:59:a1:e7:31:18:40:dc:24:f8:43:d7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Nov 4 01:00:28 2025 GMT
Not After : Nov 5 01:00:28 2025 GMT
Subject: CN=75ed7e42ec351e8ac43ed08778e46ac9c386e572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:a5:c1:e6:09:6d:60:93:fe:07:95:5b:ee:
54:26:00:c7:7a:c2:1f:9d:5e:01:0d:c0:5d:42:d4:
e3:84:9f:a6:ca:a6:48:2c:64:6f:89:57:54:b2:f0:
63:a3:45:8b:38:3a:08:5c:b4:b2:78:49:64:be:de:
44:63:fa:65:7c:12:23:a7:fd:82:41:87:a5:47:78:
98:21:6e:c0:49:15:c2:58:e9:b3:90:59:0f:45:0f:
92:ee:e7:38:df:84:31:9d:a9:40:23:f6:d6:89:9c:
9a:17:d9:09:26:20:e5:8b:7c:5e:49:8b:1f:ef:e9:
c1:4c:ed:c4:05:68:c5:8f:27:9a:e6:aa:70:73:72:
2e:3e:fd:f4:66:d8:36:c0:b5:b5:5f:4d:f4:1c:0c:
f4:91:d8:38:9e:4d:a7:76:fb:bc:1f:85:3f:10:56:
fb:c4:e2:2e:24:2e:22:34:d4:28:72:8d:a2:9c:90:
d7:47:eb:ef:9e:c1:f0:73:e5:27:52:43:ca:66:28:
98:ea:a7:59:d3:b2:77:cc:8f:b9:70:d9:74:af:62:
f1:1e:64:8b:7a:e3:db:07:17:73:87:03:b0:ad:b5:
ca:c6:d0:84:62:df:a5:f2:d5:b3:22:93:3a:39:94:
f5:52:38:9e:e5:e8:59:27:b3:c0:29:6e:3f:ce:a4:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:ED:7E:42:EC:35:1E:8A:C4:3E:D0:87:78:E4:6A:C9:C3:86:E5:72
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8a:54:64:7c:4a:6a:59:f7:d6:ee:f9:18:be:af:07:fc:e4:
b3:ff:af:8b:9d:49:da:a3:2e:d2:fc:03:d8:02:9f:d2:cf:df:
9b:63:1b:2c:20:32:6f:64:23:c8:74:25:38:42:ba:6b:2d:be:
3e:72:bc:8f:50:db:db:30:d3:9b:04:27:01:5b:0b:48:7a:4e:
6f:36:ec:88:c1:ca:7d:5e:f6:6a:a5:55:c1:c7:b7:fa:17:31:
98:5d:93:96:de:54:55:f9:4d:aa:36:d3:71:68:b9:b1:f7:4e:
19:f4:aa:91:66:30:ea:18:8c:df:f4:95:76:5d:19:44:8a:b0:
7e:4a:9e:3a:ee:46:ea:f5:87:82:5e:1f:6e:39:6c:84:31:2c:
f5:f3:24:6f:4f:47:7a:67:34:af:47:63:04:2c:1b:49:0f:d7:
34:ab:f2:fa:58:a7:17:eb:4f:af:c5:19:cd:38:f5:5b:0d:d5:
4c:9b:58:4e:bd:20:19:2d:41:f3:90:57:bf:ef:4b:be:de:9f:
77:dc:ed:09:9e:d1:4c:f7:74:ad:e4:60:41:ef:a9:30:9d:2c:
18:a1:1c:90:c6:08:eb:00:20:ca:01:2e:58:75:78:43:1f:ad:
d9:48:d1:99:70:cc:53:f7:ed:f7:21:c5:30:85:4c:20:11:a6:
e9:2f:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:22 2025 by rpki-client