Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: H8H8B7HlIWFOnx+XVCY3KSg3qwXWL8v0jy9quZlJAoA=
Subject key identifier: 76:C5:93:3E:BE:C5:73:47:F1:A8:BF:10:82:5E:89:4D:0A:7D:65:63
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 0199FD348BD863D23144D8C823ECCC169446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0D5C
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: HjioQIv3PEz2kTUdChG6RoIcAZak9xaxyD3e/s6bV3E=)
2: sE91ctBdm3kzx0I7-m7yHueFH5A.roa (hash: HtV6VQdFZQnYaynfJSwRsmPpRxjtON9Gz0gIZegT1ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8b:d8:63:d2:31:44:d8:c8:23:ec:cc:16:94:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=76c5933ebec57347f1a8bf10825e894d0a7d6563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:b4:77:b6:35:87:b8:9c:24:f1:db:6c:16:
e9:9f:a4:24:20:f6:f1:bb:a4:2c:4b:d9:64:36:7c:
e0:d3:9d:81:7c:56:2a:dd:32:14:63:bd:fe:24:a7:
a0:2d:4a:36:7d:df:4b:8e:76:bb:ed:67:1f:4d:c7:
ed:0b:7c:78:cb:1b:54:bf:08:46:1c:80:db:74:45:
5f:8e:25:97:78:d2:8a:02:4c:dc:9a:07:e3:e8:5c:
84:b0:13:04:96:25:a9:dd:60:0d:70:bc:2e:07:ad:
1e:31:48:4d:b3:b6:a7:ee:7b:0e:5d:12:91:a9:cb:
e9:0b:8c:20:62:da:5d:c6:8e:61:93:f0:f6:fe:51:
25:a4:10:e4:f9:b3:5b:a2:38:5e:de:28:a6:97:40:
1f:6b:06:fc:66:af:8c:02:9d:74:98:52:02:a5:c7:
2e:53:91:d7:b6:5b:11:42:e9:7f:cc:8e:60:b6:66:
a7:1c:a1:40:5f:41:a1:97:78:dd:5d:c9:be:10:ac:
50:3e:ba:b5:0b:63:22:93:ea:59:fc:08:87:18:32:
6b:fe:dc:89:b5:7c:fd:b5:e8:45:46:f3:cd:c5:b1:
6c:e7:7b:f0:55:0a:24:3a:a1:3e:0c:f3:85:6e:7e:
f4:9b:bd:aa:7c:5d:3b:a8:1f:73:0c:ae:c7:40:e1:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C5:93:3E:BE:C5:73:47:F1:A8:BF:10:82:5E:89:4D:0A:7D:65:63
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e6:da:52:11:27:b8:d7:29:53:52:8b:4b:f1:e6:de:fc:06:
67:81:b0:56:7a:10:b1:3c:af:f7:53:c9:ab:2a:a3:83:83:22:
0c:29:35:c9:98:20:c9:be:78:94:30:fb:2d:b1:04:27:13:8e:
5e:ed:c9:93:d6:8a:f8:88:da:a4:79:05:14:18:14:bd:3b:d0:
e7:9e:75:6a:a9:be:41:c5:3b:ab:62:09:e4:79:11:63:4e:a0:
60:96:07:90:09:2a:6e:8c:e3:e5:2b:7a:19:a7:74:f9:70:05:
52:cf:0a:46:01:52:25:c2:34:c9:53:77:4a:51:4e:c0:9b:e9:
ea:86:4c:89:f5:6d:6e:9a:44:8e:b0:ea:d5:01:f4:8e:d8:ba:
05:50:4f:95:1f:c8:e5:9b:1b:ef:21:f1:0c:a3:0e:68:82:8d:
ec:af:06:59:0e:96:99:9a:45:29:7f:4a:98:a1:f1:1f:29:2e:
54:e7:fd:44:ce:0a:cc:75:b5:42:c6:33:43:56:61:8e:a4:c0:
54:20:98:f6:1c:f5:e0:3b:32:87:4e:2a:95:b2:fa:25:55:d7:
bb:86:a5:c6:d9:44:3a:b2:d4:97:ae:4e:30:bc:e5:93:68:3f:
35:77:52:86:79:fc:d6:91:43:d8:62:dc:ca:00:b1:1f:b9:8b:
87:00:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:53 2025 by rpki-client