Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
File: MRRFNToII-2u8So6M1b6gJjhXqw.mft (raw, json)
Hash identifier: qDOTNR5BfwEZUGUm0qGTC5f384iwtFDLcmU4IelG5r0=
Subject key identifier: B4:21:84:F3:51:2E:F2:AD:28:27:CC:86:0B:6F:22:D5:2A:35:17:55
Authority key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Certificate issuer: /CN=311445353a0823edaef12a3a3356fa8098e15eac
Certificate serial: 01967378EC6D561C171EEF84FDF6F6ECF0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
Manifest number: 0B86
Signing time: Sat 26 Apr 2025 19:00:26 +0000
Manifest this update: Sat 26 Apr 2025 19:00:26 +0000
Manifest next update: Sun 27 Apr 2025 19:00:26 +0000
Files and hashes: 1: MRRFNToII-2u8So6M1b6gJjhXqw.crl (hash: SCv4IkvyhsuHhlP0aNvsH6X9IQ+zYyk00jqJzl559pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:78:ec:6d:56:1c:17:1e:ef:84:fd:f6:f6:ec:f0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311445353a0823edaef12a3a3356fa8098e15eac
Validity
Not Before: Apr 26 19:00:26 2025 GMT
Not After : Apr 27 19:00:26 2025 GMT
Subject: CN=b42184f3512ef2ad2827cc860b6f22d52a351755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:90:24:db:76:a6:4b:5d:3a:81:f8:fb:ea:
5d:f0:51:fb:30:ea:85:9d:d4:f2:37:36:4a:a4:eb:
c7:32:4e:0b:98:9e:ff:e8:5c:c5:4b:92:35:17:8a:
9f:98:07:49:52:03:a0:b0:e0:5f:84:85:7e:68:91:
5b:2c:8a:a1:29:1e:42:93:26:4d:8b:31:69:25:88:
c0:62:7b:9d:0c:b3:3a:fa:52:bd:57:45:da:66:5f:
5c:20:2b:73:58:46:e1:a7:43:06:fe:0f:0a:5c:f0:
b1:5e:c5:d9:80:d9:1f:42:be:e8:7e:ad:64:7c:d7:
41:64:a6:e2:76:95:cf:58:f7:7f:65:29:b3:8b:28:
ce:91:ee:04:40:f9:4b:44:55:50:33:87:fe:15:23:
3b:8b:f7:87:4d:24:1c:ff:54:1d:07:4c:cc:37:b8:
b2:e9:fc:80:b2:67:8e:87:51:b6:e2:03:19:1a:fa:
d0:ab:ea:2b:72:d9:1f:72:83:aa:85:0a:74:a9:80:
76:2f:d4:55:59:a4:06:d7:85:30:ef:4e:08:57:94:
ec:af:eb:39:b4:d6:29:78:89:33:cb:39:df:37:f7:
15:3b:75:09:af:5f:f5:48:a0:fb:49:32:73:89:10:
c0:e1:d9:52:30:be:cf:4f:3d:65:78:c1:0f:61:1f:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:21:84:F3:51:2E:F2:AD:28:27:CC:86:0B:6F:22:D5:2A:35:17:55
X509v3 Authority Key Identifier:
keyid:31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:a9:38:8b:9d:ab:da:1a:f1:f0:0c:da:9a:57:57:bb:4e:
f4:ea:7a:d3:f2:8f:cc:91:e4:d6:07:ba:b5:53:b0:ae:08:f9:
60:09:b1:9a:41:6f:b8:04:05:84:68:11:e4:c2:d2:23:a3:eb:
de:56:f4:55:e5:b0:23:fa:b5:7e:e3:0a:ad:c7:c4:1c:cd:16:
5f:85:dd:61:a1:9e:c7:c6:02:18:a6:be:af:a6:c3:27:35:bb:
52:82:47:3e:7c:3f:18:26:d8:8c:47:b1:b4:4c:e8:ca:8e:af:
5f:1d:2a:ce:0f:58:7b:ea:43:37:64:6a:4e:4e:51:24:ec:71:
03:31:9a:7f:b8:f1:41:b4:b4:10:d8:cc:a5:25:7b:35:5d:3d:
18:2a:2c:4b:7f:02:56:ae:8f:20:b6:e7:7a:86:7f:7d:d4:f6:
ce:7c:b3:c4:45:c6:f2:45:6a:cb:a3:97:58:98:ac:01:b1:c3:
bb:db:35:58:4c:06:fd:cd:c9:ba:d7:33:71:0e:bf:05:de:76:
e1:d9:ab:fb:6b:c6:54:c6:c9:16:7f:5f:27:96:cf:92:35:5c:
c2:b3:48:d8:0b:41:69:8d:b9:b0:cd:15:22:7f:e9:9c:4e:b4:
34:c1:86:19:64:39:48:78:3a:f7:8f:e3:aa:46:b4:bf:0e:4c:
05:92:14:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeOxtVhwXHu+E/fb27PD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTQ0NTM1M2EwODIzZWRhZWYxMmEzYTMzNTZmYTgwOThl
MTVlYWMwHhcNMjUwNDI2MTkwMDI2WhcNMjUwNDI3MTkwMDI2WjAzMTEwLwYDVQQD
EyhiNDIxODRmMzUxMmVmMmFkMjgyN2NjODYwYjZmMjJkNTJhMzUxNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHyQJNt2pktdOoH4++pd8FH7MOqF
ndTyNzZKpOvHMk4LmJ7/6FzFS5I1F4qfmAdJUgOgsOBfhIV+aJFbLIqhKR5CkyZN
izFpJYjAYnudDLM6+lK9V0XaZl9cICtzWEbhp0MG/g8KXPCxXsXZgNkfQr7ofq1k
fNdBZKbidpXPWPd/ZSmziyjOke4EQPlLRFVQM4f+FSM7i/eHTSQc/1QdB0zMN7iy
6fyAsmeOh1G24gMZGvrQq+orctkfcoOqhQp0qYB2L9RVWaQG14Uw704IV5Tsr+s5
tNYpeIkzyznfN/cVO3UJr1/1SKD7STJziRDA4dlSML7PTz1leMEPYR8pUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQhhPNRLvKtKCfMhgtvItUqNRdVMB8GA1UdIwQY
MBaAFDEURTU6CCPtrvEqOjNW+oCY4V6sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYt
NTFlODIxZDIzMTQxLzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82OWIwOGQtN2M5Ny00MzJmLWI0YmYtNTFlODIxZDIzMTQx
LzEvTVJSRk5Ub0lJLTJ1OFNvNk0xYjZnSmpoWHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleypOIud
q9oa8fAM2ppXV7tO9Op60/KPzJHk1ge6tVOwrgj5YAmxmkFvuAQFhGgR5MLSI6Pr
3lb0VeWwI/q1fuMKrcfEHM0WX4XdYaGex8YCGKa+r6bDJzW7UoJHPnw/GCbYjEex
tEzoyo6vXx0qzg9Ye+pDN2RqTk5RJOxxAzGaf7jxQbS0ENjMpSV7NV09GCosS38C
Vq6PILbneoZ/fdT2znyzxEXG8kVqy6OXWJisAbHDu9s1WEwG/c3JutczcQ6/Bd52
4dmr+2vGVMbJFn9fJ5bPkjVcwrNI2AtBaY25sM0VIn/pnE60NMGGGWQ5SHg694/j
qka0vw5MBZIUoA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:40 2025 by rpki-client