Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: 8dW+TjDeCz95a6ez+qlUr5McrOor70KZTVHUUNhh33o=
Subject key identifier: 9E:39:95:55:73:57:0F:A8:C6:A6:12:5A:44:40:BD:CA:B7:90:20:B7
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 0198D5BBE3767F67E355D5F4F4CA4A852306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 0DCA
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: r720+a8iQGQS+Mzb/kDQm+T94ngs16/eQNJLPOm5PDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e3:76:7f:67:e3:55:d5:f4:f4:ca:4a:85:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=9e39955573570fa8c6a6125a4440bdcab79020b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:58:2c:f7:60:27:27:a5:d7:a6:31:4e:fa:
56:1e:71:61:df:ef:ec:f7:19:12:51:57:5e:6f:c8:
fd:07:e7:2a:10:f0:e8:6c:c6:86:6e:9c:5b:6d:42:
ed:22:42:65:e6:26:70:7a:f8:6e:47:a3:88:fc:13:
bf:b5:1b:9c:e5:36:fe:2d:70:f9:2f:ba:30:9e:aa:
0d:78:24:f5:e1:13:84:61:91:d9:ea:ad:b1:9e:67:
b7:ce:39:c3:85:78:75:6f:38:f9:24:d9:69:46:d7:
e4:bb:c5:14:c6:9d:9e:37:d0:ba:ca:17:2b:29:11:
15:53:22:91:49:eb:42:b2:ab:3e:d5:e6:42:92:44:
f0:be:3d:fe:46:f1:7c:76:1c:67:76:63:ef:e3:e6:
8b:2d:a6:f7:f9:06:61:f5:7f:83:e2:c0:d1:b7:43:
6d:2a:9d:d1:98:29:51:4a:80:42:89:99:82:e2:46:
8f:79:d8:6b:bf:8d:a8:13:5c:6c:47:b0:61:4a:96:
c9:76:fb:07:e5:9c:db:ce:33:af:b4:40:1e:26:49:
6c:5f:3a:18:d9:fb:f1:94:c0:37:8d:1b:f5:ad:bd:
0c:d2:9f:ab:15:99:17:9c:c0:a1:29:90:ce:c2:c5:
17:5b:cd:91:ae:b0:7d:78:22:a4:8b:2a:51:47:47:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:95:55:73:57:0F:A8:C6:A6:12:5A:44:40:BD:CA:B7:90:20:B7
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:ca:55:d7:70:06:cc:58:a9:27:0e:21:89:a6:5b:7b:95:
d2:8b:7a:1b:91:32:45:b0:cd:d9:30:97:da:2b:db:a6:9a:c5:
ec:b4:56:51:84:2b:af:78:a8:f4:80:45:2d:ba:d8:5c:33:37:
68:c7:14:45:57:92:00:e0:65:b8:19:bc:c3:f1:30:cd:87:6e:
03:9f:96:05:dd:8a:d2:30:51:b1:de:93:df:b4:33:19:f4:70:
76:83:0e:0f:06:d2:de:04:a0:54:f8:51:81:bb:2c:09:ef:90:
7a:17:36:63:d9:1f:52:be:a1:9f:3b:8e:18:12:95:d0:3f:48:
12:01:12:e1:dc:3f:77:0f:b9:3a:32:f8:3e:1b:0f:42:0c:cb:
ee:c6:ec:3e:10:d1:76:70:e5:66:e2:50:72:b5:c0:23:66:24:
d8:30:9f:5a:34:25:0f:87:cd:12:2c:d1:f6:70:26:6b:5d:60:
dc:cc:9e:ae:cd:37:c5:45:41:3c:c3:e8:9e:d9:b4:f4:61:98:
e9:e7:2f:33:ad:f9:36:7c:61:6e:b3:a5:8d:d4:96:b8:52:71:
d5:6c:4a:6e:9b:17:01:d6:10:1f:a7:2b:4d:2b:26:60:ec:63:
02:c6:3c:29:bb:43:d1:31:e9:0f:86:64:25:8a:81:b5:00:8e:
25:ae:b1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:33 2025 by rpki-client