Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: 2eGC6a9zkdFUSXWG5CFqcHU08g9Oy38iiTpRgfBhPDc=
Subject key identifier: 92:14:75:15:F8:95:9B:C0:C4:F7:23:BA:64:FE:49:74:17:19:49:B9
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 0198D5BBE8D7D6ED1D9C1ABD8594A7E4BFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0CC2
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: XN4pJb4iJfCBsgDsiUiJd7LRZbi7AlOr8Hz05PY3kCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e8:d7:d6:ed:1d:9c:1a:bd:85:94:a7:e4:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=92147515f8959bc0c4f723ba64fe4974171949b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:f6:ce:3d:48:2c:d1:a5:90:1d:32:8c:e7:
06:e1:bb:c9:e4:a7:a9:26:a3:48:d6:be:c6:7c:55:
e9:4d:85:03:1d:64:ba:4b:a1:65:a1:63:de:30:20:
a3:8c:59:b5:44:0b:3f:af:d6:9b:c0:27:7b:60:14:
39:38:6c:25:0c:f4:a6:b1:c5:58:90:62:c3:6b:b5:
70:49:f6:1f:a3:74:9b:6e:7b:9d:ce:44:a2:98:19:
5e:a1:dd:81:cd:6c:55:02:7a:36:55:4f:6d:d8:a9:
b4:5d:6a:42:d1:f6:83:1e:47:86:d2:c7:92:b4:6c:
f8:c0:cf:a9:77:17:04:5d:c5:f8:33:1b:e9:78:b8:
49:d9:a1:ba:7c:a4:1c:68:e6:8a:14:52:33:f4:8d:
67:9d:6e:68:b7:00:ab:86:d9:c8:92:6d:f3:ad:c2:
62:cb:a8:98:b2:65:15:39:c8:72:4f:a0:00:aa:f0:
60:61:eb:e5:e3:45:7c:85:4f:32:94:79:5b:95:a1:
f8:ca:20:b8:3f:e2:c4:17:28:2d:b1:39:57:1a:6a:
0e:27:02:da:34:1e:36:40:1a:91:f2:d3:70:fe:38:
f0:8a:19:10:bb:b5:59:2b:e0:b5:b1:f6:87:81:d5:
a4:f9:6b:82:4b:ff:4c:06:e4:00:3d:aa:c5:3b:21:
8d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:75:15:F8:95:9B:C0:C4:F7:23:BA:64:FE:49:74:17:19:49:B9
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ce:a2:0b:b7:7f:a3:60:81:b6:cf:cf:69:44:58:50:7c:a0:
b4:4e:5a:04:5f:24:1d:d1:0b:94:98:b4:2e:44:27:61:8f:9f:
c4:cb:21:38:61:9e:b0:de:c5:7f:c5:f2:26:e9:c8:be:75:0e:
47:35:6b:45:42:c4:93:5c:13:b1:76:41:47:85:f6:9a:d9:3d:
f8:22:de:ac:3e:c7:55:40:42:1b:27:de:19:fc:bd:7a:0f:06:
d5:18:7e:b0:f5:2e:6a:8d:c1:4c:b8:92:81:41:0f:cc:eb:d9:
5e:95:51:50:88:fd:7b:6c:85:62:9b:73:c5:06:01:61:21:7e:
2c:af:bc:73:7d:da:5e:c8:16:e1:b3:c2:c8:b0:71:f9:84:2c:
4a:b6:95:21:f9:b7:71:7b:a1:9d:58:34:a5:ee:8e:87:74:25:
b2:f0:75:10:06:ec:0d:a7:f7:58:96:b7:5e:35:04:6f:fa:40:
aa:53:0c:40:d1:a4:3f:dd:d8:2a:83:ac:21:80:92:b4:99:99:
9a:4c:f1:8f:70:36:b0:5f:fa:8b:93:ad:d4:df:cc:27:fc:d7:
5f:ff:54:ae:9b:3d:0e:1d:08:fa:5f:5c:c6:73:8f:7b:35:87:
48:74:aa:68:dc:d6:4e:83:72:9a:22:95:b1:ed:d1:a4:a8:9a:
c6:f0:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:48 2025 by rpki-client