Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier: FzOWkxffwtG0erL9zVJdTTE8zKLyTgFXhzHjZRTkliQ=
Subject key identifier: 65:9F:F1:DD:3B:0A:65:82:A6:2F:D6:34:97:52:64:60:B8:27:1C:E4
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer: /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial: 019677561D50E50B5BC056483A7EA16B33BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number: 0C90
Signing time: Sun 27 Apr 2025 13:00:54 +0000
Manifest this update: Sun 27 Apr 2025 13:00:54 +0000
Manifest next update: Mon 28 Apr 2025 13:00:54 +0000
Files and hashes: 1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: iOMsNCsF7A/OVcBAZ52p0ERsuh3g+ovyGRuYPD/fvFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:1d:50:e5:0b:5b:c0:56:48:3a:7e:a1:6b:33:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Validity
Not Before: Apr 27 13:00:54 2025 GMT
Not After : Apr 28 13:00:54 2025 GMT
Subject: CN=659ff1dd3b0a6582a62fd63497526460b8271ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:3e:84:7a:a5:dd:b4:6d:1e:34:a5:20:24:
b6:7d:95:64:38:9f:da:97:bb:9d:f7:91:78:ad:70:
51:54:f1:ea:b8:9e:84:bb:4b:a2:1d:bb:dd:9d:9e:
5b:58:98:78:99:bd:25:59:90:ba:bb:bb:41:a3:fa:
07:27:00:8f:41:fb:32:42:55:26:0b:c8:ff:68:e4:
b2:b8:a4:1c:fd:38:66:6f:50:4b:02:72:df:79:98:
8c:bc:df:df:57:b0:81:5c:2c:6e:dc:1b:64:af:7d:
6c:87:f9:2b:2b:60:a7:93:e7:85:70:98:ea:54:7d:
67:48:04:7e:04:39:9b:d2:f0:2b:fc:4b:e0:f4:8a:
0e:28:75:99:bf:7c:1b:3d:0c:c1:53:85:3f:10:a8:
32:47:62:4a:7f:10:3c:fe:35:de:2a:42:02:a1:0c:
2f:3e:81:f4:a5:dd:20:48:3b:e3:e2:d0:41:fe:03:
47:13:d0:6c:08:8a:fd:73:97:a8:dc:a3:25:21:b3:
3e:09:79:1b:28:69:f0:f7:86:6b:c6:23:a2:a5:fd:
52:8c:e5:eb:db:ee:d4:07:80:5e:2a:0a:45:dd:e1:
7d:12:96:38:74:5d:5b:5c:3e:49:69:1e:68:1e:6a:
17:d4:56:c6:01:93:9b:d8:b2:32:05:ae:a4:51:b4:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:F1:DD:3B:0A:65:82:A6:2F:D6:34:97:52:64:60:B8:27:1C:E4
X509v3 Authority Key Identifier:
keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2c:d2:ff:81:a2:2a:25:2b:55:64:d1:5b:d9:33:ee:11:bf:
f6:e4:e8:0f:41:e8:61:8e:89:11:36:d3:fd:11:85:1b:db:11:
4b:12:4a:c4:2f:85:83:98:11:63:80:98:11:ef:c2:67:e0:61:
6f:cc:42:5d:82:a1:cb:f0:18:5e:cf:9b:d8:50:95:50:20:db:
82:e4:62:a6:3b:f8:86:ac:04:cd:dc:a9:7c:0c:b1:62:10:16:
4a:50:3d:c8:60:7e:6c:83:4f:21:0f:4f:e1:37:5c:73:af:8e:
b3:b3:ac:69:c5:9f:18:29:39:82:ef:e2:5a:0c:e6:79:65:da:
a9:b4:35:33:b2:ea:4a:ef:84:f5:77:30:82:0a:74:9e:5f:be:
ed:55:cf:cc:ab:50:69:69:41:6b:2e:9a:be:05:9f:57:3f:80:
b7:93:a5:3f:15:5f:b2:cd:73:cf:43:1e:a8:ed:14:93:08:fd:
f3:f1:66:6e:bc:58:5c:56:12:ee:84:70:8b:7e:c9:1e:cf:2c:
8b:3f:93:06:9e:cd:c9:b2:7d:a9:b9:3e:fc:0a:fd:90:65:8a:
f1:71:ea:58:1c:94:97:bf:f3:91:f1:a2:fc:98:d6:08:b0:8f:
65:0d:d1:ad:4f:48:08:58:49:22:9d:6e:3c:61:0d:22:52:ed:
54:2e:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:26 2025 by rpki-client