Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: ExXl4Q/Yv7txFO+zqhOO9SnOb1N4BxQfuOwF/J4wAyU=
Subject key identifier: 75:25:7D:46:2F:9F:79:A9:94:8C:0C:CC:46:39:99:9B:39:F6:97:03
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0197C13928D91CBEF6E8580F410C65A612FA
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0769
Signing time: Mon 30 Jun 2025 14:23:42 +0000
Manifest this update: Mon 30 Jun 2025 14:23:42 +0000
Manifest next update: Tue 01 Jul 2025 14:23:42 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: moPr7eWNHKgy25OWCeUezDFI183P9iiEVlfUedDaOeM=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: bolafquo68VTB6qbRHCsoYMiux90bKUZqnX0hbQLqsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:39:28:d9:1c:be:f6:e8:58:0f:41:0c:65:a6:12:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jun 30 14:23:42 2025 GMT
Not After : Jul 1 14:23:42 2025 GMT
Subject: CN=75257d462f9f79a9948c0ccc4639999b39f69703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:6f:ac:15:4c:0e:19:e3:20:b9:ac:77:5a:
a1:da:41:77:9f:08:af:88:1e:b0:3c:dd:01:d5:16:
20:3a:1c:99:dc:08:7a:6f:fa:6f:2d:1b:ae:ad:cd:
d4:23:14:0e:d1:fb:28:26:a1:9a:b1:fc:d6:05:b0:
09:3b:14:57:a8:b4:55:f2:e8:5e:bc:6f:62:7c:4b:
7f:3a:00:4b:4a:db:c2:4a:52:de:cd:9c:b5:15:18:
d8:73:63:88:ea:63:a0:e5:60:e1:33:a1:41:ea:fe:
be:f7:28:44:a0:9b:0b:0c:38:f7:11:e3:3b:83:be:
ac:39:cd:98:46:96:b2:c1:42:e9:c0:67:22:aa:a3:
19:9e:97:e7:ba:34:dc:94:19:83:11:5b:9a:a6:6c:
08:05:3d:77:1a:23:0b:24:7e:89:26:a5:bf:c5:60:
49:af:37:a8:2f:0d:79:56:d8:b7:ed:3d:5d:9a:a9:
96:b7:8b:75:3b:55:83:80:69:c0:a2:7c:de:b2:78:
08:04:6d:af:8f:33:62:aa:fc:3f:3e:31:da:f8:29:
46:70:58:f7:6d:9a:ed:bc:d3:fb:6c:22:50:1a:c7:
06:17:53:0e:c0:d4:b5:0e:76:8d:6c:7f:56:a2:09:
0e:4e:b8:bb:de:99:b6:2e:5d:c8:f8:fd:58:52:72:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:7D:46:2F:9F:79:A9:94:8C:0C:CC:46:39:99:9B:39:F6:97:03
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:64:1c:12:b6:09:e3:32:d2:b3:d4:93:f3:1d:c8:86:b1:38:
e9:8e:e6:29:b4:59:55:b6:d1:c3:bd:24:bc:82:42:ed:7d:a9:
28:1e:2d:66:8b:69:7b:65:a8:09:43:4f:51:25:05:6d:35:f1:
b6:89:20:47:66:f3:fa:34:77:0c:9f:cf:32:4f:b1:0f:0d:9a:
70:cd:85:af:69:c4:ed:99:93:23:bb:9a:08:68:b5:6b:d8:96:
c6:40:d6:eb:ca:ba:32:4a:26:bb:08:08:1a:42:cc:e8:a9:d5:
30:cb:bd:e5:e9:25:1e:37:a2:7b:2b:be:8b:cb:2e:97:29:6c:
cf:fb:90:91:b7:42:18:7e:07:93:15:e5:e2:d9:22:72:ef:16:
9d:df:be:a2:2e:45:7a:48:d1:1d:89:27:b5:37:0d:85:8d:cd:
d5:43:1d:0b:40:aa:a1:cf:55:cd:24:2f:bf:01:30:79:db:78:
cb:38:78:a7:fc:fd:f5:a8:68:10:13:66:f6:41:2e:64:93:69:
25:e5:23:6a:c9:3a:24:9d:b8:e0:73:d4:ea:66:f1:67:c7:0d:
b3:23:3d:7a:f6:19:42:e0:76:2d:44:d6:bb:72:30:33:be:68:
f7:dd:ca:82:03:fb:7a:23:a9:a7:f9:32:1d:26:16:b6:1c:a3:
d5:71:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:51:22 2025 by rpki-client