Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: BmyXORN/FBhbEnaHGU6w6oCs0/JfgTmwLqQrquZWRWs=
Subject key identifier: 4F:3C:A2:98:8A:A6:F8:74:BA:F4:DB:C7:BF:0B:F5:E3:5B:72:12:22
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019922FAFC0BB6EEE5DECD624F05A1D828FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 0DF2
Signing time: Sun 07 Sep 2025 07:01:37 +0000
Manifest this update: Sun 07 Sep 2025 07:01:37 +0000
Manifest next update: Mon 08 Sep 2025 07:01:37 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: pWQMydxDWV1KGUED2nTXJxuOBVHl7ECUVnzDn6ODttY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:fc:0b:b6:ee:e5:de:cd:62:4f:05:a1:d8:28:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Sep 7 07:01:37 2025 GMT
Not After : Sep 8 07:01:37 2025 GMT
Subject: CN=4f3ca2988aa6f874baf4dbc7bf0bf5e35b721222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:23:b5:83:f8:fa:3e:75:33:8a:37:14:0f:
4b:fa:05:84:c8:82:fe:4a:ba:e3:12:98:c5:a5:8c:
a3:27:f4:55:ae:c2:e0:f0:9b:3a:6e:7c:3e:f3:a6:
6e:2e:2d:bd:2f:a3:50:a1:5c:a6:4d:34:b8:a3:7f:
78:ab:8d:e3:e8:a5:39:45:eb:d8:04:9c:a6:6e:8e:
48:29:28:7c:b2:51:77:b8:fd:50:a9:40:72:22:ff:
12:32:07:72:2c:c7:5f:42:5b:1e:5c:3a:27:53:60:
bf:f3:2a:62:7c:be:d7:0b:fe:0b:ab:a3:f0:22:e9:
20:e5:f8:78:fe:20:12:e6:6a:1e:d7:8d:39:03:6b:
89:46:70:1e:56:c2:9a:f0:16:8f:7d:ae:4f:58:6f:
fe:1c:ee:06:e9:57:a5:d3:c9:8f:a0:82:9e:77:5a:
22:76:fb:f6:3b:ee:08:d4:ca:ec:e2:8f:4e:be:e3:
a0:d7:35:f3:b6:05:de:cb:1e:16:98:ea:90:36:a1:
c1:76:6a:9c:d8:02:ab:60:3c:df:a5:e4:9b:c8:39:
12:16:ec:fc:12:db:25:d0:a3:53:9f:4b:5c:7f:be:
12:79:97:e2:90:bb:5b:eb:f3:ca:a1:fd:78:9c:00:
e7:70:34:59:68:37:c8:0f:d5:f4:24:55:af:f1:4e:
7c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3C:A2:98:8A:A6:F8:74:BA:F4:DB:C7:BF:0B:F5:E3:5B:72:12:22
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1a:6a:28:b6:c3:2d:29:8c:79:ed:44:ef:08:25:14:d3:c9:
56:62:42:0e:93:cd:4a:ef:3b:cb:d0:5d:ec:ed:05:6c:1b:97:
52:e3:13:0e:a0:97:59:58:2f:2e:dc:86:28:87:61:10:6d:db:
b2:8d:09:e4:fa:9c:a9:e5:ab:9e:a8:e7:f9:a5:93:78:7d:87:
03:4c:63:53:f7:ab:34:15:71:2c:90:47:2c:fc:38:d2:26:e1:
dd:9d:cf:4e:69:b8:09:9f:71:e5:a5:26:24:cd:fd:50:0b:b4:
32:93:23:0c:ae:b6:35:d1:da:e1:8f:81:7b:bd:7e:bc:c3:ab:
1a:72:50:f1:02:67:5b:bc:ca:2c:02:84:f5:51:53:b2:75:98:
b0:01:a0:e5:e0:26:db:ee:fd:60:1a:da:cb:ea:85:18:f5:9a:
29:18:49:1d:a3:21:7f:27:95:22:f0:3c:fd:9b:56:d8:40:02:
98:71:d2:69:94:d7:97:b2:0a:08:a1:61:6c:fe:af:73:bb:ea:
c0:fc:18:3d:7e:99:ba:75:f5:87:f5:10:8b:12:65:38:31:2d:
c7:98:8b:5d:81:f5:f5:e1:ac:d4:c8:1f:dc:90:8c:17:1e:af:
ba:e1:b5:c2:3d:1f:87:e2:b8:15:55:d1:c5:68:8e:01:c5:83:
de:30:a1:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+vwLtu7l3s1iTwWh2Cj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTdiNmY5MzIzOTlkNTg1MDkzZDE4NzMzOTRlYmZlMWIy
OWY5OGMwHhcNMjUwOTA3MDcwMTM3WhcNMjUwOTA4MDcwMTM3WjAzMTEwLwYDVQQD
Eyg0ZjNjYTI5ODhhYTZmODc0YmFmNGRiYzdiZjBiZjVlMzViNzIxMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+cjtYP4+j51M4o3FA9L+gWEyIL+
SrrjEpjFpYyjJ/RVrsLg8Js6bnw+86ZuLi29L6NQoVymTTS4o394q43j6KU5RevY
BJymbo5IKSh8slF3uP1QqUByIv8SMgdyLMdfQlseXDonU2C/8ypifL7XC/4Lq6Pw
Iukg5fh4/iAS5moe1405A2uJRnAeVsKa8BaPfa5PWG/+HO4G6Vel08mPoIKed1oi
dvv2O+4I1Mrs4o9OvuOg1zXztgXeyx4WmOqQNqHBdmqc2AKrYDzfpeSbyDkSFuz8
Etsl0KNTn0tcf74SeZfikLtb6/PKof14nADncDRZaDfID9X0JFWv8U58/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE88opiKpvh0uvTbx78L9eNbchIiMB8GA1UdIwQY
MBaAFH8XtvkyOZ1YUJPRhzOU6/4bKfmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUt
ODI3NTc3ZGY4ZWRjLzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jYzAyMDAtYmIyYy00NWY2LWFjNzUtODI3NTc3ZGY4ZWRj
LzEvZnhlMi1USTVuVmhRazlHSE01VHJfaHNwLVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRpqKLbD
LSmMee1E7wglFNPJVmJCDpPNSu87y9Bd7O0FbBuXUuMTDqCXWVgvLtyGKIdhEG3b
so0J5PqcqeWrnqjn+aWTeH2HA0xjU/erNBVxLJBHLPw40ibh3Z3PTmm4CZ9x5aUm
JM39UAu0MpMjDK62NdHa4Y+Be71+vMOrGnJQ8QJnW7zKLAKE9VFTsnWYsAGg5eAm
2+79YBray+qFGPWaKRhJHaMhfyeVIvA8/ZtW2EACmHHSaZTXl7IKCKFhbP6vc7vq
wPwYPX6ZunX1h/UQixJlODEtx5iLXYH19eGs1Mgf3JCMFx6vuuG1wj0fh+K4FVXR
xWiOAcWD3jChoQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:17 2025 by rpki-client