Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: t31AOysP4XPw6E+x/K10qo/vsUNHcLuZh+6+tq8ZDRo=
Subject key identifier: D7:CE:4A:8D:EB:AA:E1:54:94:D5:E1:13:BC:23:62:90:4D:27:0F:E0
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 0196C2A6F3DC9637F8749981CC2CF2694B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0BAF
Signing time: Mon 12 May 2025 04:00:43 +0000
Manifest this update: Mon 12 May 2025 04:00:43 +0000
Manifest next update: Tue 13 May 2025 04:00:43 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: vNYMtP5pjsoyybxIM31i4SRqiRjqznQYu1qlMvq02Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:f3:dc:96:37:f8:74:99:81:cc:2c:f2:69:4b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: May 12 04:00:43 2025 GMT
Not After : May 13 04:00:43 2025 GMT
Subject: CN=d7ce4a8debaae15494d5e113bc2362904d270fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:46:e2:7c:0d:f8:d6:8e:74:13:b6:a8:7a:
9a:ba:3f:c5:32:0f:95:94:4c:60:fb:f9:3f:aa:3f:
a8:50:5e:98:0c:88:bb:b2:6c:d8:d2:7b:95:af:a9:
bf:88:03:39:81:70:93:4d:ad:44:23:46:f8:df:98:
6f:1f:36:d2:bc:12:03:be:77:29:0f:da:1b:58:b1:
cc:66:0a:18:96:bc:a2:2a:f5:39:6d:dd:cb:c6:24:
1c:3e:d9:3d:1c:81:b0:1f:86:35:32:a7:95:c2:97:
d6:f6:ad:35:92:22:6e:50:6e:e8:ae:b3:62:6b:93:
f8:b0:7d:6d:22:45:57:f8:47:3f:51:96:0a:aa:3b:
53:71:fd:10:cc:c7:c9:a7:d1:b7:6f:ee:9d:53:55:
19:47:1f:60:53:95:63:07:8d:09:03:1c:17:44:8d:
ba:a3:46:bd:c4:61:c0:c4:bd:bb:1e:b0:59:a3:f3:
90:8e:4c:6c:ee:32:92:81:7c:61:10:c1:6a:36:e7:
95:c2:33:77:7a:e7:c9:f8:9e:2a:0f:dd:14:ad:4e:
f6:b9:9d:d4:bf:b3:ea:21:d3:3d:bd:2c:16:9d:4c:
47:30:e4:12:89:a3:f9:86:76:ce:82:95:42:61:b7:
8e:81:a9:59:b1:13:ad:d7:57:6b:9f:0e:69:47:82:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:4A:8D:EB:AA:E1:54:94:D5:E1:13:BC:23:62:90:4D:27:0F:E0
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f9:f3:8e:ca:65:b4:54:40:a2:4c:9a:da:6e:dd:b4:43:cc:
5c:bd:42:a3:c9:52:68:af:a2:9e:c1:e6:a4:1a:c8:4f:a1:a5:
04:b3:a2:6f:4f:f9:89:a7:53:5d:83:db:bd:3f:f6:00:0d:dc:
64:32:6f:97:bb:25:b4:83:10:37:f6:1f:36:13:ab:fb:e1:48:
51:d8:58:b3:56:da:77:6a:33:d5:3e:bc:dd:76:ef:44:2f:cd:
2a:02:29:a9:00:74:75:17:55:9d:fd:29:a2:a7:63:34:67:b7:
7d:b7:a2:9e:0a:fd:fd:e5:36:bf:bd:1f:24:fe:7e:44:78:0d:
b6:b4:65:c2:97:3b:f6:2d:c9:71:77:d7:11:ce:a6:94:4f:9e:
97:5a:74:af:9f:ec:5f:78:9a:dd:61:bf:f4:db:07:bc:59:78:
78:28:f6:95:20:b3:8f:96:af:5b:dd:fa:16:fa:74:36:db:10:
de:01:15:8e:d0:f7:17:48:f9:6b:8d:90:2f:70:13:83:be:6b:
f2:05:08:20:59:e0:e8:63:9b:dd:21:09:f7:ed:19:da:46:4a:
da:2f:e6:a0:d1:47:30:a4:77:4f:10:8d:87:c4:35:b4:a8:27:
49:98:f7:17:1d:75:a8:97:13:c4:89:de:dd:ed:c6:b7:68:42:
3f:b1:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:43:31 2025 by rpki-client