Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: jizHlFiGe4J7UBQo2eNAfviOwweyf/s7kFG/5mHbRyw=
Subject key identifier: 0F:C7:C4:71:76:69:3E:8D:1F:63:92:06:ED:B8:BE:6B:7D:CA:ED:F5
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019A5B66B1E4ACA1DD4B1CF702C7DE78B1A9
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0924
Signing time: Thu 06 Nov 2025 23:00:37 +0000
Manifest this update: Thu 06 Nov 2025 23:00:37 +0000
Manifest next update: Fri 07 Nov 2025 23:00:37 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: F0fbnNa6+9hoih1rFf9dKqRqlx8sntALPd+fNUBoytA=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: TF5xrHvt4dopWr9Un/yXXO+JhIlRw85LBZpERTf4Jr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:66:b1:e4:ac:a1:dd:4b:1c:f7:02:c7:de:78:b1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Nov 6 23:00:37 2025 GMT
Not After : Nov 7 23:00:37 2025 GMT
Subject: CN=0fc7c47176693e8d1f639206edb8be6b7dcaedf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:b3:5f:e5:72:3a:cc:fd:bb:98:04:e8:b0:
bd:f6:80:2b:ca:7e:ec:5a:ee:9e:73:e7:19:c9:dd:
58:23:6e:27:07:e1:40:78:15:b1:f4:7e:b3:56:d0:
40:b9:4c:04:57:21:48:f0:0c:ab:28:55:9f:a5:db:
d7:ea:a6:52:92:34:e5:31:76:50:46:f2:06:1c:56:
ab:c7:81:2b:1a:ff:ad:85:49:29:5a:17:7e:c9:7c:
9e:b3:f7:c4:c9:96:51:56:54:8e:af:ea:cd:71:21:
9a:df:fd:05:ce:80:51:54:0e:8a:db:e5:67:1b:4b:
02:fc:43:0f:17:ee:e5:3d:c6:e9:a0:4c:45:13:23:
1a:73:78:63:8f:71:81:55:b2:0c:db:ff:51:01:a2:
37:eb:a9:64:2b:d5:48:48:df:d6:45:e2:9a:3a:ce:
68:82:16:50:55:be:78:f7:43:e8:b0:05:bc:10:8b:
f3:e3:95:e0:f0:33:c5:a3:4e:52:b0:d7:d4:80:ee:
cc:2a:aa:97:5e:2a:77:ac:a6:bb:83:15:dc:ce:6d:
a5:e1:a2:21:95:29:9b:7a:70:43:4c:07:89:8c:ff:
26:5c:3e:bb:1c:2d:30:5c:f1:80:55:84:a0:03:97:
34:a6:2a:06:7f:fb:aa:00:56:36:63:73:5a:74:2f:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:C4:71:76:69:3E:8D:1F:63:92:06:ED:B8:BE:6B:7D:CA:ED:F5
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:41:34:d8:fd:81:f7:cd:e4:9c:f1:91:b4:73:b3:41:ed:
bb:c9:2f:de:4b:2f:d7:19:c7:7a:cc:3a:89:6a:46:d7:67:f1:
58:8a:d0:d6:bc:b1:95:3d:ea:9e:fe:64:90:c7:28:4a:b6:0f:
0e:d4:b4:fe:27:ef:1b:b9:0f:92:78:e7:12:73:4e:7c:ed:f7:
37:f7:56:77:94:0b:29:27:b3:de:cc:14:b8:dd:46:db:5f:cc:
fc:a9:cb:3b:d6:75:bc:ec:f1:2c:d4:a5:c8:0c:7e:58:3d:56:
cc:64:56:b8:d6:cb:d2:7b:b4:7b:1c:3e:30:b0:be:12:c8:bb:
53:99:9f:0e:da:55:ee:d0:4d:e9:80:81:51:8d:da:d4:d2:34:
bf:77:72:42:79:ec:e5:0c:4e:87:5a:94:e9:0a:25:c6:4c:35:
d3:25:1c:20:33:3c:e2:81:67:a2:37:2a:b2:f2:46:45:e8:5d:
58:a6:71:b4:4f:7d:d6:b9:21:b7:89:89:0c:6c:5e:50:a8:ff:
86:fd:0f:4d:76:92:cf:f6:b0:51:a0:0f:0a:20:6e:86:b7:2b:
26:a8:50:78:0d:78:02:90:2c:47:f0:c6:7c:b5:9c:15:71:10:
e8:ca:73:41:1c:39:43:a7:85:b1:0f:6a:b9:b6:94:e6:8f:3a:
67:86:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 03:15:51 2025 by rpki-client