
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: Z9X2KerMZw2+VTtVpHKEFg3Alkwj07qp9JfY3GcHCZ4=
Subject key identifier: 8B:EC:13:5B:C9:CF:63:CF:AC:C4:C1:6D:C8:E9:F7:82:42:8F:56:41
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 01974BC431B2AAC3E1B16A6707B1A1E3B6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 0CFE
Signing time: Sat 07 Jun 2025 19:00:38 +0000
Manifest this update: Sat 07 Jun 2025 19:00:38 +0000
Manifest next update: Sun 08 Jun 2025 19:00:38 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: mSSP4VxrCTkwdUuVQq3Yx/pw15abeT9zraFfcR1fuwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:31:b2:aa:c3:e1:b1:6a:67:07:b1:a1:e3:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Jun 7 19:00:38 2025 GMT
Not After : Jun 8 19:00:38 2025 GMT
Subject: CN=8bec135bc9cf63cfacc4c16dc8e9f782428f5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:fa:4e:46:4b:e1:ed:77:b0:d3:63:58:bb:
f2:0b:05:c5:f3:22:ea:56:ad:4e:99:3a:1e:3a:f5:
da:ed:99:92:7b:12:c7:c4:c1:7c:db:79:27:34:06:
9b:88:90:3f:be:cf:5a:74:3d:2a:5e:96:2a:c3:e8:
3d:f2:7d:57:d9:3e:9b:29:0d:95:ed:1b:79:28:9a:
6e:3e:62:be:80:1a:17:ae:a6:2d:44:0e:91:31:9b:
e7:53:ac:bd:06:fa:6c:0e:4d:30:b8:7b:56:93:f3:
15:4b:42:22:d6:9f:62:52:93:3c:25:e1:64:75:02:
d3:c5:78:f6:6f:92:e1:de:da:07:d9:e3:81:f9:9a:
00:a8:97:64:08:6a:6c:16:44:80:e0:a1:9d:98:78:
33:e1:f9:ab:51:d3:a2:29:11:1a:a4:38:3b:46:08:
b8:d1:e7:06:7f:73:33:ea:3c:f9:45:6e:85:f5:53:
84:13:da:d4:4d:85:65:1d:3c:43:82:a9:39:ad:6c:
a7:d7:ce:d0:de:31:43:2e:da:4d:b8:76:de:6c:8b:
2b:6c:3b:93:e8:5f:45:79:a9:d7:b0:a5:38:11:5d:
5e:39:73:8f:87:2b:96:86:dd:36:59:7c:42:77:22:
37:16:26:63:ce:1d:b3:a5:40:5e:7e:e3:2c:99:b5:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:13:5B:C9:CF:63:CF:AC:C4:C1:6D:C8:E9:F7:82:42:8F:56:41
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dc:cc:6f:c3:06:90:07:2f:e1:1b:94:96:07:2a:d1:98:38:
75:83:f7:d5:46:ef:bf:51:66:e7:a3:c5:3b:02:01:7c:d6:fa:
58:f0:30:58:5e:ee:04:88:81:10:52:e3:99:33:0d:6b:de:ec:
b8:b5:e4:4f:e6:b2:6a:aa:c5:01:e3:f2:4e:59:a7:2e:56:01:
8b:18:46:0a:b4:21:af:fe:21:2f:e0:4e:d3:d0:49:18:80:57:
c3:e4:15:59:66:cc:33:8f:49:1e:05:1a:ff:11:1d:00:f0:a0:
c9:8a:6a:52:db:cf:53:b0:70:77:c0:78:88:64:78:b8:7c:64:
94:66:94:a3:3f:9b:49:99:6c:17:d7:3e:bb:ae:45:a8:de:fe:
db:50:d4:ac:29:63:65:d5:7f:a5:50:73:ec:ce:30:e1:a0:aa:
1c:e7:04:e8:63:ae:b9:85:7a:e4:ff:da:79:38:51:ca:fe:be:
05:22:93:37:74:3b:01:8d:05:34:1a:ba:ba:78:6d:39:a9:62:
ea:2a:d4:28:57:07:f6:c5:1b:da:6b:6c:91:e2:c9:b9:a9:0c:
8d:b8:7b:74:10:c0:52:ba:51:04:5f:79:33:92:b0:15:59:a4:
ad:ea:f2:b6:ea:d3:aa:7b:00:95:08:9d:40:00:cf:02:70:50:
0e:a9:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:56 2025 by rpki-client