Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: 4aMuYZggRT8mG/ktc0zw/32oKDhIWBn0gUKxe0tlyH8=
Subject key identifier: 9A:EC:C1:C1:4C:95:DA:76:4E:8B:C2:F2:9D:7E:AA:F0:7E:D6:23:B8
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019656812F35B7AC8D7D52AD8C1253275CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0B77
Signing time: Mon 21 Apr 2025 04:00:28 +0000
Manifest this update: Mon 21 Apr 2025 04:00:28 +0000
Manifest next update: Tue 22 Apr 2025 04:00:28 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: cw2haycPfQsSp9pS1GHatuu+VlBGKi5eIMAysHzgWRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:2f:35:b7:ac:8d:7d:52:ad:8c:12:53:27:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Apr 21 04:00:28 2025 GMT
Not After : Apr 22 04:00:28 2025 GMT
Subject: CN=9aecc1c14c95da764e8bc2f29d7eaaf07ed623b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:f3:2a:52:23:32:31:76:e8:4a:15:51:3e:
c2:9b:c2:1e:f8:29:9d:4e:b3:12:7f:d7:a0:53:a2:
61:fc:8e:88:92:f0:da:82:71:00:01:ea:54:86:cb:
6a:b2:bf:e8:a5:4b:29:16:90:cd:d9:22:bc:f1:1b:
12:49:26:bf:ad:81:88:db:fc:42:66:31:48:a0:64:
b5:50:98:86:cf:dc:81:6b:25:7a:31:88:5c:dc:20:
cb:29:0e:e2:12:c5:72:fb:e6:ad:70:c9:f3:88:37:
86:6b:4b:85:74:ae:d6:25:7d:e4:f0:c9:52:29:36:
a0:b2:d8:39:f2:34:3b:35:b1:07:72:68:ed:f7:d3:
13:e4:17:86:e7:ad:cd:90:85:f9:ee:75:19:d5:4d:
d8:ac:b6:e8:ea:91:40:c9:ce:70:7f:80:01:90:98:
6d:22:97:4d:3f:77:4a:eb:09:b9:8b:2d:e8:fb:dd:
82:53:b7:98:ac:7d:ac:d2:c9:e7:f3:cd:ba:bb:90:
86:9d:e9:be:cc:6f:99:07:85:7a:81:21:36:5b:34:
f3:b5:4b:13:db:e4:ec:e6:b0:e0:4a:f1:94:fd:a8:
65:eb:f1:4a:66:15:80:47:d1:bf:66:8d:d6:bb:e7:
ba:ca:6b:71:cf:bd:fd:ba:03:2f:6b:13:4d:ac:3f:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:C1:C1:4C:95:DA:76:4E:8B:C2:F2:9D:7E:AA:F0:7E:D6:23:B8
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:99:16:08:75:9f:2e:e0:17:e0:90:2f:3f:2e:d1:4e:c5:42:
0f:58:ec:09:c3:bc:db:32:a6:81:94:ed:f8:a2:d2:ee:35:3e:
1f:f9:5b:ee:f4:41:44:09:82:2d:3a:09:c0:cd:9c:1d:f2:55:
ff:ec:cc:18:fd:d2:46:81:07:b1:5a:55:08:92:ee:57:fa:9c:
26:54:db:2e:4e:ee:5f:6b:d7:c8:59:87:57:43:7a:10:a4:56:
92:1f:6b:29:ad:04:4e:91:db:94:55:41:cb:1d:90:7e:08:dc:
dd:d9:6e:82:a8:49:48:67:f2:87:0b:ab:0f:49:ee:2c:59:86:
58:80:1c:c8:f7:31:9f:32:f8:89:bc:e9:9f:4d:16:f4:f4:cb:
6b:6e:e9:ac:f1:85:67:df:df:c1:8b:55:f5:aa:1f:06:e8:35:
1b:32:80:a4:49:4b:31:00:c1:31:f3:27:a3:2a:ea:51:a7:26:
3c:e0:41:cf:7f:47:6f:09:f9:1b:3b:3c:a3:84:5b:e6:f1:88:
f2:2a:ab:09:3d:a5:7a:b4:9f:7a:32:ac:c5:8f:08:47:56:bb:
73:ff:14:35:8a:47:2e:02:92:4c:3c:e8:47:47:40:89:e0:a0:
a4:34:c3:34:f1:5c:54:37:d1:4f:4f:e9:91:a1:22:8c:9e:05:
93:8d:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:19 2025 by rpki-client