Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: qd9wIdWLHcfw65u2f/1LO526wUBZmf60H9wbBi+VoLw=
Subject key identifier: AB:EB:C9:6D:D8:04:75:58:73:4F:AC:D8:18:BB:1B:EA:DD:3B:75:EE
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 01974FA105F350D169DEE974CF5CE01D900F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0BF8
Signing time: Sun 08 Jun 2025 13:00:42 +0000
Manifest this update: Sun 08 Jun 2025 13:00:42 +0000
Manifest next update: Mon 09 Jun 2025 13:00:42 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: AL/vmRFLSpHbDl6c7M/cZESEl2oqNtnh0y+vFa+9L2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:05:f3:50:d1:69:de:e9:74:cf:5c:e0:1d:90:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Jun 8 13:00:42 2025 GMT
Not After : Jun 9 13:00:42 2025 GMT
Subject: CN=abebc96dd8047558734facd818bb1beadd3b75ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:15:93:31:39:cd:8a:dd:56:40:60:16:2f:
74:39:8d:08:75:c0:5a:16:b4:4f:6c:4f:9f:cb:74:
db:61:e5:4a:84:8b:e3:b6:ba:60:da:d9:7f:be:f0:
0d:d7:62:20:bb:77:67:14:85:55:e1:34:fa:da:a7:
63:c8:44:73:b3:ee:2d:07:cc:2d:0d:79:f7:5b:20:
01:1e:f9:26:9c:13:93:0a:5f:9a:79:16:87:1d:ae:
e7:f0:4e:68:b4:cf:03:72:ee:91:30:cf:0f:68:1d:
ab:d7:77:7b:6b:3d:e9:48:00:69:19:bc:33:a8:69:
8a:d4:39:23:7d:fc:45:72:a7:34:2c:ad:89:8e:fc:
67:b2:7f:49:31:6d:8e:c7:52:fe:4c:6c:16:d9:b0:
ee:19:da:3f:72:7f:d3:a0:ac:40:c4:fe:37:08:b5:
a9:69:e4:1a:af:a1:13:f7:e3:18:75:35:55:e6:e4:
d3:67:fc:07:97:14:0f:06:8a:68:bd:f3:e9:48:1a:
be:73:bc:0b:1f:85:3c:b6:d3:85:ac:36:26:c2:19:
b5:c1:d3:9c:a6:a0:b1:a3:4e:ea:97:0b:41:9f:77:
ec:34:20:b8:ce:90:95:14:d6:43:1a:7a:16:b4:e1:
53:88:40:cc:d4:73:7a:1e:05:6c:16:f3:e5:d4:7c:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EB:C9:6D:D8:04:75:58:73:4F:AC:D8:18:BB:1B:EA:DD:3B:75:EE
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e1:f8:38:7b:cd:82:8d:07:c2:20:10:1b:8b:a4:ba:93:a5:
c8:76:a0:93:61:dc:35:7e:ee:90:90:ab:e6:24:f1:9c:e7:a6:
8f:df:2a:cd:16:eb:bc:83:4a:83:9c:ef:fb:6e:77:57:87:1a:
a3:be:f1:44:1d:f5:84:00:53:e8:cd:b0:b5:c4:53:ab:e6:7e:
cb:07:e9:79:10:a1:5b:d3:b1:fb:41:dc:4b:8b:7e:59:da:9b:
0f:af:54:00:87:f9:55:03:7f:9d:45:99:26:72:6c:2c:a3:ff:
5a:6e:09:29:6e:ca:2a:70:77:9d:73:99:93:f2:94:1d:fb:45:
70:7b:d4:3d:32:1b:67:2e:14:66:9f:c1:e4:aa:94:19:3d:cb:
98:0e:6b:1d:97:c3:3e:1e:7c:75:84:8b:92:a6:b3:a9:39:a0:
c3:53:8e:3f:1e:b9:44:8f:3a:9d:f7:5c:a7:8b:23:43:37:d5:
d0:a6:1b:22:df:8d:d3:e1:16:8b:f1:3a:82:22:ed:9b:21:55:
83:92:7b:ee:b4:61:64:3b:da:f5:9a:bb:3d:1b:aa:37:3c:b3:
90:d2:25:3f:8d:89:53:89:7f:ee:8c:2e:31:b7:74:a3:c3:11:
d4:15:9a:80:f1:9f:ea:de:53:9b:ab:b0:19:35:63:00:1f:b9:
96:8c:94:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoQXzUNFp3ul0z1zgHZAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl
MTVlYWMwHhcNMjUwNjA4MTMwMDQyWhcNMjUwNjA5MTMwMDQyWjAzMTEwLwYDVQQD
EyhhYmViYzk2ZGQ4MDQ3NTU4NzM0ZmFjZDgxOGJiMWJlYWRkM2I3NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JkVkzE5zYrdVkBgFi90OY0IdcBa
FrRPbE+fy3TbYeVKhIvjtrpg2tl/vvAN12Igu3dnFIVV4TT62qdjyERzs+4tB8wt
DXn3WyABHvkmnBOTCl+aeRaHHa7n8E5otM8Dcu6RMM8PaB2r13d7az3pSABpGbwz
qGmK1DkjffxFcqc0LK2Jjvxnsn9JMW2Ox1L+TGwW2bDuGdo/cn/ToKxAxP43CLWp
aeQar6ET9+MYdTVV5uTTZ/wHlxQPBopovfPpSBq+c7wLH4U8ttOFrDYmwhm1wdOc
pqCxo07qlwtBn3fsNCC4zpCVFNZDGnoWtOFTiEDM1HN6HgVsFvPl1Hzg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvryW3YBHVYc0+s2Bi7G+rdO3XuMB8GA1UdIwQY
MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt
NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx
LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+H4OHvN
go0HwiAQG4ukupOlyHagk2HcNX7ukJCr5iTxnOemj98qzRbrvINKg5zv+253V4ca
o77xRB31hABT6M2wtcRTq+Z+ywfpeRChW9Ox+0HcS4t+WdqbD69UAIf5VQN/nUWZ
JnJsLKP/Wm4JKW7KKnB3nXOZk/KUHftFcHvUPTIbZy4UZp/B5KqUGT3LmA5rHZfD
Ph58dYSLkqazqTmgw1OOPx65RI86nfdcp4sjQzfV0KYbIt+N0+EWi/E6giLtmyFV
g5J77rRhZDva9Zq7PRuqNzyzkNIlP42JU4l/7owuMbd0o8MR1BWagPGf6t5Tm6uw
GTVjAB+5loyUYg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:51:31 2025 by rpki-client