Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: Q0ceMPX66Uk1iPvnpZVN9mQX76lun8ISn4h61a+nrNo=
Subject key identifier: 00:D9:E2:B3:DC:75:DD:C0:4A:B5:52:7C:29:29:4E:F3:C8:A6:8A:E1
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019654933830810F87A9608AC657294D2988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 0C7E
Signing time: Sun 20 Apr 2025 19:00:56 +0000
Manifest this update: Sun 20 Apr 2025 19:00:56 +0000
Manifest next update: Mon 21 Apr 2025 19:00:56 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: nHN7EV/1o9yrkS2OeBeYt6j+YnIXeJLXoK/825ZXvgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:38:30:81:0f:87:a9:60:8a:c6:57:29:4d:29:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Apr 20 19:00:56 2025 GMT
Not After : Apr 21 19:00:56 2025 GMT
Subject: CN=00d9e2b3dc75ddc04ab5527c29294ef3c8a68ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:a5:6b:c5:f6:27:c9:c0:5f:1a:b6:80:3e:
76:1a:54:23:f4:10:d9:75:07:d9:8c:2f:58:04:54:
96:f3:30:cf:08:90:cc:91:d8:ae:13:45:66:2d:9e:
e3:e3:a8:c5:fa:81:be:c6:1b:45:9c:29:96:a6:5f:
d3:61:78:51:1b:4e:5f:5f:d0:b0:46:b0:73:fa:64:
61:86:cb:67:03:b2:f2:5f:4a:2a:a4:69:e8:e9:cf:
ce:41:47:f4:5f:fa:42:98:a7:6b:3f:30:24:61:a6:
2f:db:e1:66:f5:29:9a:39:c8:62:80:62:8a:82:27:
2e:ce:b2:6b:11:4d:17:83:eb:a8:f0:4c:01:c5:f1:
ed:3c:f8:50:fe:04:5b:6f:d9:7c:93:59:06:1c:51:
db:ba:fb:f5:ad:4a:75:f4:48:2c:e9:32:57:88:19:
57:74:4f:43:bb:7f:d6:1e:5f:4a:ed:f1:36:73:80:
1a:20:89:27:4f:6b:19:cf:a9:cd:fc:b2:cb:5a:e4:
86:2a:0c:65:ee:2a:0d:49:8c:ef:3b:e8:c6:08:88:
c1:b3:f2:20:7f:c7:01:47:c8:37:12:3e:42:01:91:
c2:06:99:c6:bb:7d:84:43:b5:21:92:93:63:18:39:
9b:d5:42:f7:b6:c3:dc:c0:56:5e:9a:eb:45:03:b6:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:E2:B3:DC:75:DD:C0:4A:B5:52:7C:29:29:4E:F3:C8:A6:8A:E1
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8e:21:89:ab:6f:e1:c9:ae:0e:d5:11:97:c5:77:41:80:49:
40:42:02:56:9a:d2:01:e9:2a:ba:83:82:ef:fa:73:78:40:c6:
a4:7d:ff:5c:26:e8:63:06:5f:ac:04:a7:9b:07:0e:95:08:e2:
97:d6:9d:e9:ff:87:cb:7d:f8:f3:3e:3c:0d:01:53:a1:31:e9:
69:ae:33:50:d3:c3:65:fa:54:41:2a:35:d2:f9:7c:db:ab:da:
f5:b8:44:76:70:8d:ee:12:f8:74:82:69:85:2a:03:f8:a5:0c:
5d:2c:ed:df:23:79:5d:45:bc:75:8a:55:cd:b9:35:f5:c0:a7:
14:b5:08:19:45:97:a1:32:8f:d0:e2:26:b7:64:f1:d7:1d:57:
f0:89:d2:a5:23:ff:8a:1a:8b:a9:ba:45:85:2f:2b:8e:61:a6:
a8:7e:9d:31:65:90:e7:ce:c3:6a:be:42:4a:12:1c:5b:59:d7:
55:e7:9c:14:b2:31:59:37:db:fb:4d:21:2a:a1:1d:7d:84:be:
0d:5e:62:22:74:b2:78:ea:db:dc:17:c4:12:f7:49:ce:f3:bb:
25:d6:0e:ed:18:63:4d:33:0b:4e:66:52:c4:4d:08:29:8d:a2:
a8:56:4c:35:61:cd:67:ad:e1:ad:21:bf:43:60:ee:a6:1e:29:
97:09:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:22 2025 by rpki-client