Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: F+rO6yiXbP/S+L2O0UMt3SCQvn05zvM584jksXeNkh0=
Subject key identifier: 0C:48:86:F4:37:67:F7:13:83:99:1F:83:95:F5:96:B8:7F:38:94:D0
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 0199FD34278979360B9405AF92242B3CFFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 0EA4
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: BTnM3x53RoLUKvcZ0RGm7lJ6QmJP2HWe2gBubHQRDq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:27:89:79:36:0b:94:05:af:92:24:2b:3c:ff:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=0c4886f43767f71383991f8395f596b87f3894d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:07:09:bb:c3:22:87:19:2b:28:d2:f4:50:
a9:4e:79:b8:5c:73:4a:98:c2:6f:4a:eb:f8:b1:a2:
e2:ae:5d:41:40:4c:66:26:af:25:90:2d:26:6e:83:
be:4d:08:51:ee:49:10:8b:9d:c8:2e:b9:2a:31:52:
3a:cd:39:60:15:00:5f:b9:fd:93:db:87:00:13:a5:
93:96:c4:dc:b9:26:78:dc:13:43:5b:74:f5:7d:cb:
56:ae:e0:77:d7:86:29:44:f4:49:3d:d3:49:61:84:
0f:dc:40:2c:61:df:b4:52:5e:37:61:e2:ea:c0:b8:
4e:c4:46:c3:fd:a6:b6:3c:db:4e:38:4f:b3:85:75:
af:72:af:2a:19:c6:79:eb:44:c0:29:eb:d4:73:b6:
4d:5e:4d:eb:17:45:d9:3f:3b:ef:94:b4:08:38:22:
a8:25:8f:0a:af:35:1e:e3:7c:dd:86:b3:24:00:b9:
54:80:11:a8:6a:a9:75:2a:4b:cd:37:1a:65:6c:ec:
d5:a5:c3:5d:66:f4:31:2b:76:e2:35:6c:5f:9c:3a:
1a:88:74:d2:51:13:dd:64:40:6b:05:7f:b2:9d:34:
b6:4d:04:c4:29:1c:d7:ee:5d:3b:f1:92:ad:31:9c:
bb:7d:88:17:38:bb:82:8e:ac:2f:73:1d:6e:54:22:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:48:86:F4:37:67:F7:13:83:99:1F:83:95:F5:96:B8:7F:38:94:D0
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0f:f5:7c:c3:b8:7c:30:94:66:a3:0b:68:80:36:db:23:1b:
8f:7c:91:4a:d0:8b:28:1a:31:fa:d2:e0:71:8f:17:dc:38:53:
ad:1a:b6:8c:5b:2a:0f:23:69:42:21:26:6d:e3:d5:d9:36:b2:
05:6f:74:03:a4:1e:37:cb:2a:29:00:86:a3:37:f7:af:c8:2b:
40:69:b4:e6:3b:5b:ee:87:ef:d4:0c:a0:f1:5b:2c:22:a2:33:
90:8d:47:ea:8e:b3:67:f7:75:de:23:73:95:4e:a1:cd:d8:83:
14:29:0c:bf:1b:ba:7c:62:be:a5:7e:c3:2f:10:ac:31:3a:0a:
1d:4a:0c:c8:22:97:2a:1e:42:df:47:5b:39:a6:03:6c:a1:b1:
9f:ad:69:47:96:10:f1:5e:c8:ef:91:ce:43:6d:94:d9:7b:3b:
68:bb:0c:c3:64:7c:53:04:ed:a3:17:99:0d:85:6c:1a:5b:ec:
5b:aa:e3:52:f8:5d:48:12:45:57:a5:4c:58:bd:06:19:72:c9:
11:16:15:d6:d5:2b:6a:97:0d:7c:db:24:e6:14:96:b2:bb:8f:
33:91:bf:ec:f1:52:50:9d:f8:2b:61:8f:6f:96:c3:d9:b2:4b:
e0:9d:c4:36:70:5e:63:f5:4f:4d:d4:0b:84:39:47:50:9a:2c:
ad:f9:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:59 2025 by rpki-client