Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: VED4Zl5idrUrZDMHpf/QpDr+W/wdv67GZ56AfUxBQUM=
Subject key identifier: BA:AD:BB:3E:7A:1D:63:A6:E3:0A:65:83:A4:12:58:66:E5:B7:41:51
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019A6AD9C452029C480FA707A43DB3E45A4D
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 092C
Signing time: Sun 09 Nov 2025 23:00:37 +0000
Manifest this update: Sun 09 Nov 2025 23:00:37 +0000
Manifest next update: Mon 10 Nov 2025 23:00:37 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: K+p5dSq63jG6IYIBgRKXw/fY2QP7JL2TwJfPjyCsqEE=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: TF5xrHvt4dopWr9Un/yXXO+JhIlRw85LBZpERTf4Jr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6a:d9:c4:52:02:9c:48:0f:a7:07:a4:3d:b3:e4:5a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Nov 9 23:00:37 2025 GMT
Not After : Nov 10 23:00:37 2025 GMT
Subject: CN=baadbb3e7a1d63a6e30a6583a4125866e5b74151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:e9:65:82:35:92:97:c3:c3:34:b4:dc:7c:
4d:11:55:9d:ff:43:8f:b8:27:0e:62:ab:91:65:97:
2f:de:8c:67:f2:4d:d5:82:ad:71:0f:b3:57:2f:90:
0e:5d:e1:a0:d6:df:d8:cc:1d:4e:bc:b1:bc:3a:79:
00:20:6a:d3:19:88:4f:fc:1a:95:30:32:34:13:b5:
0c:64:91:28:38:c0:bb:e4:68:e9:fb:1d:74:9f:81:
9d:20:ac:c1:46:e7:11:96:18:cf:c3:9f:79:8f:3c:
eb:6f:a3:85:a3:f3:d3:5c:03:a7:eb:d7:fc:66:34:
33:53:c9:e7:70:6f:77:a0:35:a4:e8:0f:0c:ba:92:
9b:89:1e:f9:b2:76:e1:d6:f1:23:9e:45:51:aa:23:
d5:3b:e3:63:68:39:23:b7:84:28:b2:9d:73:8b:55:
24:ae:47:34:66:58:ad:3e:e3:17:76:3d:ee:0b:88:
14:d6:39:96:b8:eb:3b:06:67:59:fa:54:dc:10:03:
aa:de:d8:49:c6:0a:7b:47:b9:1e:8f:7c:ee:57:8c:
c2:84:60:19:ab:9c:11:d6:3a:69:7b:d1:fc:7b:ac:
b9:dc:08:d4:74:c0:2f:59:ed:be:d4:0e:11:32:be:
92:1d:38:e3:9b:0d:92:9c:d7:ec:1f:1a:2c:12:ba:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:BB:3E:7A:1D:63:A6:E3:0A:65:83:A4:12:58:66:E5:B7:41:51
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:01:e3:e8:23:0b:4c:d8:1c:43:32:eb:15:a0:33:2d:f5:
76:93:05:fb:d7:46:00:da:f7:11:ab:f9:a8:07:9f:b7:9c:94:
97:5e:1c:1c:24:e4:95:a4:59:1f:c4:3a:49:88:08:ef:bf:ca:
0f:5e:03:60:ea:01:76:84:c3:1a:e2:66:cd:3b:a7:17:8e:3d:
57:ba:fe:79:f1:74:a6:73:c9:a6:93:4b:04:5f:77:f7:45:5e:
26:ea:00:a1:0f:50:92:f4:12:d3:d6:01:5c:12:95:c8:d7:7f:
0a:f1:86:5d:8c:61:e1:ff:d0:cd:03:42:e8:1b:f4:fe:0d:f3:
7e:8a:e6:95:5a:31:1b:b9:06:1e:ec:a3:81:81:5c:82:c3:b3:
a3:3b:e8:d1:bf:cf:ad:63:b6:9e:02:bf:5e:70:12:60:19:f5:
93:a6:49:e6:ba:e6:72:09:71:7b:99:02:d1:f9:d6:8b:41:15:
41:6a:c6:bc:8d:40:93:b3:48:96:53:b7:6c:61:74:02:e9:0b:
74:b5:16:61:e9:2c:db:df:f8:94:0a:51:04:83:c9:c7:da:8e:
82:f7:16:38:ae:b9:1e:46:d7:6f:5b:25:ac:e6:a3:9b:a1:fc:
c0:14:11:a0:ca:b6:cc:cf:8d:8f:35:64:a5:ea:58:66:e7:ba:
3b:6e:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 02:52:01 2025 by rpki-client