Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: bz6jqzHRwTuhoB8qZ8Cozg+mXI4ixCQQCZlC8Fn0pBg=
Subject key identifier: 43:0C:EC:FB:76:33:FB:B4:C5:B8:3C:68:D7:E0:87:68:D4:70:6A:D5
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019A70A553A0F0F0BC815C9076319CBDE9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0D98
Signing time: Tue 11 Nov 2025 02:01:14 +0000
Manifest this update: Tue 11 Nov 2025 02:01:14 +0000
Manifest next update: Wed 12 Nov 2025 02:01:14 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: K2E0YXJpugmvEgyEGW3Og/5nlaAXEg2daZa+TpKo6NM=)
2: Mv9wQiaEyUk3-XuVJoSinHpzB2g.roa (hash: ZIu/bU0ql4U4qIOYcI80NNWYWWCG67vptIw8Gwe6w3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:53:a0:f0:f0:bc:81:5c:90:76:31:9c:bd:e9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Nov 11 02:01:14 2025 GMT
Not After : Nov 12 02:01:14 2025 GMT
Subject: CN=430cecfb7633fbb4c5b83c68d7e08768d4706ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:ec:db:bd:0c:c2:f5:dd:a9:ae:86:39:3a:
c4:b1:b2:eb:87:1f:94:6b:88:99:48:eb:ed:7f:3d:
c0:da:ed:8e:dd:b6:2d:d8:b1:49:f3:3b:76:c1:21:
91:33:03:71:7a:61:e1:b7:72:89:b1:09:d4:38:2e:
ad:11:a0:02:2b:51:fb:f2:eb:2f:56:f6:2a:b5:09:
ac:cf:3f:bd:c5:d8:da:cc:dd:a4:de:c4:95:51:53:
16:9f:97:81:c0:d2:22:5a:dc:f3:43:0d:6d:60:e9:
79:c4:32:97:6c:7d:8c:e8:b9:c5:ec:39:4a:97:37:
01:b2:80:0d:4b:6d:9e:1e:6b:f0:94:0f:58:4e:d3:
36:d8:f1:ef:e3:40:d2:ff:f4:32:7c:92:eb:42:d4:
11:59:d6:e2:bf:35:31:c9:00:f5:83:ca:c9:d5:bb:
d9:02:a8:1c:62:cd:2d:b1:cd:4f:46:75:24:48:e0:
95:84:39:10:07:5e:55:ce:e9:eb:a6:37:16:ed:67:
00:d6:12:09:df:ad:2c:fd:e7:c6:48:de:45:87:5f:
02:b6:68:04:3d:f5:d9:b0:93:c7:b5:55:ad:db:47:
61:69:d6:fb:64:6a:8c:d1:3f:de:21:11:5c:96:c3:
35:40:47:9d:e8:08:32:75:73:01:56:7e:e5:a9:46:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:EC:FB:76:33:FB:B4:C5:B8:3C:68:D7:E0:87:68:D4:70:6A:D5
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:74:3f:c7:4c:35:66:6d:19:16:7a:48:5f:66:16:9b:71:
ff:9e:0b:c7:71:a9:00:e1:25:b9:61:4d:54:99:5f:a3:b9:d5:
59:d1:98:b6:0d:18:40:86:37:54:8f:42:d7:1a:25:60:84:e5:
35:73:aa:7c:92:49:57:a1:15:ef:81:16:13:09:df:3a:8c:c7:
60:c6:ea:4b:e5:3c:f6:af:dc:aa:63:8f:ce:3e:4f:f6:b6:bf:
6b:1d:47:30:7b:7b:26:c1:43:48:e9:f5:37:1e:9f:a8:e1:d6:
08:16:a7:fd:9d:0f:5a:64:55:34:c2:44:21:99:f7:c2:a3:84:
f1:ec:28:61:9b:81:16:77:8e:06:f4:90:0a:68:22:97:f9:3f:
aa:6b:9a:c9:30:11:e4:5b:1a:b1:1e:5a:10:a8:5c:5a:8e:c2:
a7:97:ac:e8:6c:d3:97:1c:3e:72:a2:9a:8a:d4:56:9a:07:67:
80:97:9b:cf:9d:fa:e3:0f:ec:a4:ea:ff:1a:5b:1a:3a:d3:12:
a3:5b:28:8b:3f:f3:49:02:3f:f4:7f:95:f9:ee:be:1b:da:f1:
ce:52:d3:c5:42:85:74:06:7d:c6:49:b2:47:e6:c6:54:a5:a1:
19:af:e0:3f:97:a5:d2:5d:62:46:41:70:61:6d:53:e1:86:cf:
1a:72:62:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpVOg8PC8gVyQdjGcvennMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl
MTVlYWMwHhcNMjUxMTExMDIwMTE0WhcNMjUxMTEyMDIwMTE0WjAzMTEwLwYDVQQD
Eyg0MzBjZWNmYjc2MzNmYmI0YzViODNjNjhkN2UwODc2OGQ0NzA2YWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrXs270MwvXdqa6GOTrEsbLrhx+U
a4iZSOvtfz3A2u2O3bYt2LFJ8zt2wSGRMwNxemHht3KJsQnUOC6tEaACK1H78usv
VvYqtQmszz+9xdjazN2k3sSVUVMWn5eBwNIiWtzzQw1tYOl5xDKXbH2M6LnF7DlK
lzcBsoANS22eHmvwlA9YTtM22PHv40DS//QyfJLrQtQRWdbivzUxyQD1g8rJ1bvZ
AqgcYs0tsc1PRnUkSOCVhDkQB15VzunrpjcW7WcA1hIJ360s/efGSN5Fh18CtmgE
PfXZsJPHtVWt20dhadb7ZGqM0T/eIRFclsM1QEed6AgydXMBVn7lqUYBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMM7Pt2M/u0xbg8aNfgh2jUcGrVMB8GA1UdIwQY
MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt
NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx
LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVF0P8dM
NWZtGRZ6SF9mFptx/54Lx3GpAOEluWFNVJlfo7nVWdGYtg0YQIY3VI9C1xolYITl
NXOqfJJJV6EV74EWEwnfOozHYMbqS+U89q/cqmOPzj5P9ra/ax1HMHt7JsFDSOn1
Nx6fqOHWCBan/Z0PWmRVNMJEIZn3wqOE8ewoYZuBFneOBvSQCmgil/k/qmuayTAR
5FsasR5aEKhcWo7Cp5es6GzTlxw+cqKaitRWmgdngJebz5364w/spOr/GlsaOtMS
o1soiz/zSQI/9H+V+e6+G9rxzlLTxUKFdAZ9xkmyR+bGVKWhGa/gP5el0l1iRkFw
YW1T4YbPGnJiQQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:25 2025 by rpki-client