
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: 4kBqiLqW2uhNMYzd1vbvrXXnv0H1mKysg7FAO5YRsf0=
Subject key identifier: 6B:12:74:D3:C1:F3:BF:34:CA:3E:BB:32:DA:8D:5D:1E:B5:2F:9F:81
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 01969DF58584B80D7D1B0807AC08EA1FF254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 0CE5
Signing time: Mon 05 May 2025 01:00:35 +0000
Manifest this update: Mon 05 May 2025 01:00:35 +0000
Manifest next update: Tue 06 May 2025 01:00:35 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: UOwEw3ti2K4Ud307VdTHTQHKklCLZyw92/dREq00trA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:85:84:b8:0d:7d:1b:08:07:ac:08:ea:1f:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: May 5 01:00:35 2025 GMT
Not After : May 6 01:00:35 2025 GMT
Subject: CN=6b1274d3c1f3bf34ca3ebb32da8d5d1eb52f9f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:6d:b9:c1:2f:b2:84:c5:a0:41:b9:a6:7e:
3e:78:09:78:87:4c:43:5d:f2:fb:83:87:d2:ab:28:
bc:0b:7d:12:74:86:ac:8e:ea:5a:1a:0f:5e:45:68:
bf:2c:ef:0d:d8:73:31:e2:d6:53:04:c8:1c:42:2c:
e2:e3:7e:4d:ef:18:8e:41:a8:f1:92:2e:d9:ff:bc:
bb:e7:10:c9:9a:52:c0:2b:cf:0f:e8:1e:2c:cf:21:
03:77:c8:a4:ed:fb:c6:48:b5:21:c1:db:62:ff:6d:
6d:df:04:15:bd:48:17:e5:0e:89:2b:0c:38:56:e5:
d3:03:65:a3:67:fe:ed:29:b4:af:5e:47:70:88:dc:
10:3b:6e:2a:25:ee:15:dd:d5:ce:c7:a0:a1:60:c5:
da:52:17:c9:98:71:1a:02:e8:86:0f:5b:8a:d4:28:
95:3c:5c:10:b7:1f:32:10:87:3b:71:9f:50:c0:53:
6e:c1:23:be:11:50:e5:48:a4:3a:3c:83:04:e0:f5:
88:8e:9b:94:bd:49:5c:ef:e5:78:d7:4a:7c:56:98:
f0:b5:70:80:24:50:dd:b3:19:34:17:e1:40:65:41:
5d:2f:78:fb:cd:dd:72:25:19:e4:d0:c6:5c:6b:33:
d5:ae:98:d0:6b:96:2b:ef:0d:55:fb:cd:95:33:6a:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:74:D3:C1:F3:BF:34:CA:3E:BB:32:DA:8D:5D:1E:B5:2F:9F:81
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bc:63:a5:57:d1:a4:66:99:2c:91:b3:29:79:e1:f6:df:11:
11:28:dc:50:c6:e9:f0:f4:25:7d:53:7a:18:41:30:6e:2e:9d:
9c:25:3f:6b:34:c3:56:68:7a:eb:88:a0:4a:41:53:49:a2:e9:
ba:2d:58:df:24:f7:87:ef:2d:97:d6:20:15:14:cc:7f:07:4b:
94:f6:88:d2:e2:0c:a2:db:81:9c:0c:5e:5f:f4:c7:a9:50:ae:
1d:dc:3e:29:fc:e4:69:20:10:27:2e:37:7d:c9:90:d8:39:a0:
94:51:bb:69:1b:77:10:f0:1a:ff:e2:fa:1d:27:bc:fd:2d:7a:
a3:f7:c0:a1:38:72:a6:97:9f:80:c5:b1:7e:f9:b4:1b:40:c5:
59:6c:47:a7:cb:c4:6a:bc:b1:60:08:01:85:80:cf:b1:4a:29:
e7:92:3c:3c:fa:20:e8:53:78:52:6d:fd:e0:f8:f3:3e:c7:78:
d2:bc:76:32:4f:66:d4:45:62:38:0d:25:5c:42:c0:83:63:f2:
ce:ea:61:7e:2c:79:88:5b:a2:4b:e4:ed:89:85:03:8a:66:c3:
cf:4e:40:4f:97:21:de:f2:10:fb:72:d3:21:74:e7:40:71:f3:
5e:12:b5:87:18:f8:d2:b1:2c:36:5f:41:4b:60:9d:6a:d4:38:
80:00:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:34 2025 by rpki-client