Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: sT6Iv0KFmp+hwTQHXrEKLdecUgJFGbYRU9+7tyFbQUk=
Subject key identifier: 39:A1:AA:32:94:BD:61:3C:53:C9:DE:24:01:AE:6C:51:98:E4:02:03
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 019922FA0FCBF2581723493F60E368ED883F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0CEB
Signing time: Sun 07 Sep 2025 07:00:37 +0000
Manifest this update: Sun 07 Sep 2025 07:00:37 +0000
Manifest next update: Mon 08 Sep 2025 07:00:37 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: EUb+SnO9gq1o9Uu/xh3dnhkSmvOaZRAupNKNO2sENXk=)
2: sE91ctBdm3kzx0I7-m7yHueFH5A.roa (hash: HtV6VQdFZQnYaynfJSwRsmPpRxjtON9Gz0gIZegT1ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0f:cb:f2:58:17:23:49:3f:60:e3:68:ed:88:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Sep 7 07:00:37 2025 GMT
Not After : Sep 8 07:00:37 2025 GMT
Subject: CN=39a1aa3294bd613c53c9de2401ae6c5198e40203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:69:2e:d5:7b:25:19:cb:78:5d:cc:fa:ad:1e:
f5:8a:be:79:3e:67:44:87:69:c1:c1:5f:c7:96:d6:
09:6f:a0:27:22:76:5e:a4:3c:94:0b:44:a2:69:c0:
c0:10:ea:14:bd:0a:8c:da:a2:34:8b:62:16:01:99:
63:d1:8d:9e:43:91:44:1c:da:31:9c:ac:2a:fe:07:
7f:bb:d4:5e:60:6d:26:1e:24:c4:00:cf:85:4c:27:
d3:d1:d0:2f:37:0e:9c:1e:d6:59:b4:bf:2f:e4:12:
1c:1e:54:59:6a:cf:d0:82:d6:74:ff:05:c0:1c:01:
bc:b0:3d:26:b4:63:b0:88:10:d7:ce:70:3e:dc:32:
31:ff:be:21:ed:25:78:20:f1:79:35:f1:5d:9c:be:
48:01:7c:d5:60:a5:df:81:f4:db:9a:42:68:85:6b:
97:92:8d:eb:78:25:6e:8f:41:8f:23:75:a2:9c:11:
c5:2f:68:f3:d7:97:1e:2e:83:d6:9b:5c:a5:7f:c3:
8e:9c:d4:00:20:88:2f:97:59:07:f6:0f:40:b3:a4:
84:cd:9e:84:09:f3:65:bd:2c:ad:bc:28:3f:25:89:
52:04:d4:8f:0b:3c:8c:5d:11:0f:f8:3e:2a:b7:51:
43:dd:fa:66:58:8d:55:91:b3:cf:c0:4d:d0:c8:02:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:AA:32:94:BD:61:3C:53:C9:DE:24:01:AE:6C:51:98:E4:02:03
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:00:f4:87:e3:c0:f1:11:be:95:27:5a:7a:bc:4c:d1:a9:b5:
88:da:20:84:41:dd:9c:f4:a5:d8:3c:ca:fe:17:d9:cd:cb:b7:
cd:a6:41:b9:eb:be:77:cc:38:3e:b6:91:3a:43:69:e7:09:8c:
21:0f:8b:ce:7f:a6:39:f0:33:8a:3e:1e:4f:e3:aa:d7:ff:fb:
00:86:5e:28:19:0a:26:de:ed:51:a8:af:32:9e:61:52:12:68:
7c:4b:1f:99:9f:57:01:7a:f6:a1:da:11:60:eb:f5:67:36:6b:
73:ef:90:aa:a6:46:f0:ba:2b:7a:d2:54:cb:7c:01:df:4f:8b:
19:31:b2:25:f2:c0:15:b2:01:f2:c1:0e:e9:4a:d3:14:1f:3e:
55:87:da:cd:df:e3:04:3b:92:df:23:9c:c9:e6:f6:28:f6:4f:
58:25:e7:56:3b:cc:51:5b:bf:19:98:59:ad:48:61:9e:0b:06:
82:34:2c:26:dc:b7:e2:cb:d4:15:2a:5f:75:e5:d5:88:da:1a:
27:fe:41:22:ef:d6:2d:dd:45:ee:17:92:8c:73:1b:53:8e:e2:
03:e8:74:2e:02:64:44:69:8c:28:09:4d:35:ed:9d:6c:f7:1d:
fc:4e:98:1b:c0:43:27:b2:b5:57:12:7e:58:f8:cc:6a:1d:b1:
08:cb:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:08 2025 by rpki-client