Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: meP1n829qR1qLCm1cbLmXVtpcGe9VR7DH1G7Gg07g3I=
Subject key identifier: C9:DC:64:AE:DC:E9:8D:D2:AF:8F:97:44:46:0D:EA:89:AD:74:A4:EC
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 0197B7EA20A65A57A2F1C6F81FA9263CBE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0C2E
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: 6K6Lu/Hu3YfWVkww9JIzj12a4lrCTqvZcAGaDRARFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:20:a6:5a:57:a2:f1:c6:f8:1f:a9:26:3c:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=c9dc64aedce98dd2af8f9744460dea89ad74a4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:3f:26:04:af:2b:0b:cc:cf:75:96:74:02:
9b:62:4f:23:15:ec:ba:ae:a1:17:af:33:89:69:4a:
28:fc:ea:ad:0e:aa:40:c6:c0:1c:f4:4e:a0:82:cb:
ef:ae:23:01:69:9b:57:ca:c5:78:e8:4e:9b:97:e9:
c2:7b:0f:74:54:4b:1c:49:63:ff:7b:bb:f7:2b:ed:
81:a0:b6:04:38:9a:d5:2b:0e:fe:6b:a5:c9:62:ae:
69:9b:7d:d6:16:4e:92:26:c4:c0:d6:a4:b0:5c:a3:
41:01:49:bb:ba:1d:72:1e:15:0e:56:8d:da:41:9b:
0f:a0:4d:c0:12:6d:48:17:00:2d:5a:39:ce:de:53:
be:8f:87:6c:57:af:04:a7:92:9c:76:c3:d6:5d:2c:
6d:72:9c:cc:c8:85:bc:01:6f:14:b5:9d:d0:cd:57:
37:31:ff:23:9a:f2:87:ed:b1:8e:97:89:fe:2b:6a:
63:84:92:cc:eb:a7:c9:57:10:11:ac:22:80:5b:99:
02:63:39:d8:50:2c:d2:09:f3:a2:4a:77:f9:50:ec:
42:30:f2:72:4f:af:09:23:57:1f:e8:c1:0e:f6:03:
09:65:4f:b7:43:f0:7f:86:85:40:bb:6c:26:47:4c:
f2:e0:7b:57:54:45:c5:1a:19:58:55:b9:03:dc:78:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DC:64:AE:DC:E9:8D:D2:AF:8F:97:44:46:0D:EA:89:AD:74:A4:EC
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:01:e0:f1:08:c3:17:36:00:20:e6:3c:88:a5:18:c6:ac:a6:
45:35:8a:8b:a0:af:92:47:9c:8e:07:95:9e:ae:21:2b:a2:42:
b8:da:06:6c:ec:a5:58:7e:da:92:df:7d:b4:80:ee:a7:43:8c:
bd:bf:bf:f5:94:ae:5f:6b:c5:b0:6f:b0:88:a6:7d:8b:cf:63:
d3:61:21:45:7f:6d:f4:1c:e8:5e:ef:e7:e6:c5:c3:ad:40:97:
2b:71:07:e1:88:fe:4a:01:0a:a6:29:46:0f:51:df:cb:f3:57:
3e:75:f3:7f:53:8e:bb:15:5e:03:27:ef:eb:e4:a8:59:98:11:
d2:b8:d0:7b:e4:ef:9f:84:0f:f4:6e:83:84:11:f5:38:fe:ea:
39:2d:7c:37:d4:eb:f8:ea:59:f3:18:7d:2b:41:05:76:2f:85:
fc:cf:9e:b6:d6:af:f8:64:fd:14:0b:f0:26:57:98:af:4e:c6:
ea:94:3d:e9:de:8d:79:fc:06:d9:1b:76:e9:9e:33:97:69:b8:
09:a8:fe:c8:35:2d:57:53:a9:2f:d7:4d:c9:bf:e5:00:08:52:
8f:83:42:e0:2e:55:80:e3:d1:4a:11:58:37:a5:49:4c:82:d1:
ce:1d:5f:7c:22:90:53:04:3e:15:9a:48:a4:79:02:c8:cf:a7:
f2:0f:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:19 2025 by rpki-client