Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: Jec4xyHYBV3pzEdLeQ5Z2wBIgOxw+ykNZICLMEtLbPE=
Subject key identifier: 41:AE:A8:D9:48:57:25:12:49:4A:CF:17:58:8A:B1:E4:3A:27:63:D1
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01993EDEF7DA37AA06452ED98B44B716B3A3
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0860
Signing time: Fri 12 Sep 2025 17:00:15 +0000
Manifest this update: Fri 12 Sep 2025 17:00:15 +0000
Manifest next update: Sat 13 Sep 2025 17:00:15 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: p6NDwj4Hw5UOq6Zkm9gog2dCT+yuJVhjKBXjbYtk81Q=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: lm+z3/5HRhKCQTJ3tb/SwMV3bzVDT2EG3f+M+BcTUYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3e:de:f7:da:37:aa:06:45:2e:d9:8b:44:b7:16:b3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Sep 12 17:00:15 2025 GMT
Not After : Sep 13 17:00:15 2025 GMT
Subject: CN=41aea8d948572512494acf17588ab1e43a2763d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:c0:c9:7a:17:85:09:3c:da:e6:a4:67:ae:
e6:e6:f4:7a:c8:4b:ae:42:e4:95:d3:2a:27:0c:49:
10:7c:49:69:6d:99:1d:92:16:c1:f1:e4:c7:6f:91:
68:72:ea:b6:15:57:c2:c1:96:31:cf:5f:45:8a:55:
f9:bf:e0:7a:8e:99:ef:5f:b9:27:3f:59:30:f2:59:
fb:26:59:ac:21:76:b8:8a:43:11:86:66:6d:7c:e6:
e4:28:68:54:b1:fc:80:09:4b:d3:48:98:a7:17:67:
17:30:25:4a:ba:b1:08:cb:79:b6:00:25:45:00:e1:
a6:2d:56:79:60:98:89:10:5c:a7:ad:c5:0e:af:ea:
75:44:c7:6e:4a:f8:e2:4c:d4:71:7d:ea:b9:d6:6e:
9b:b6:16:95:36:e6:fe:d1:99:ed:f7:03:00:5d:19:
95:4c:e7:26:ea:fb:66:92:27:76:93:b1:4a:be:77:
9e:d7:71:70:84:79:a2:4c:97:e5:02:0b:da:ca:ed:
d7:67:d1:bd:72:02:51:e7:c5:2b:06:f7:d1:fb:d6:
9d:30:66:59:1f:5f:cd:03:48:41:9c:39:bd:b4:85:
4e:c2:01:65:6e:9b:a6:a5:df:6a:55:44:54:cb:a9:
95:56:08:dd:69:ab:b8:99:bd:41:e1:44:c5:09:b6:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:A8:D9:48:57:25:12:49:4A:CF:17:58:8A:B1:E4:3A:27:63:D1
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:10:0c:93:90:a1:37:7e:dd:b3:39:ca:25:4d:e4:2c:87:
3f:ae:27:5a:e6:1b:7a:4d:1c:4a:68:5a:cb:8e:37:9f:70:32:
3b:00:10:38:d0:90:ae:93:b9:69:d9:27:9b:a3:57:a7:1b:e0:
a4:d5:bf:33:24:83:68:48:f7:76:25:2a:c1:ca:84:0c:72:6c:
73:69:75:fb:13:34:d9:aa:7f:bd:a8:dd:4d:c9:46:9f:fa:09:
7f:23:a9:89:26:b3:4e:30:12:87:3c:12:a4:01:33:76:77:74:
4c:34:a9:60:67:2f:a4:b0:68:96:ef:d0:fc:7c:18:53:a1:85:
fe:c4:89:25:36:46:1d:bb:4e:de:15:b6:21:a3:22:0b:72:9b:
98:a6:d2:a8:ba:65:57:4d:45:98:4c:75:25:86:1f:46:6e:8e:
a4:7a:db:de:b1:e9:da:c0:30:68:f8:60:d3:22:3d:13:e9:32:
61:b0:77:e4:a9:44:db:63:d6:ef:fe:58:4f:1f:62:b9:03:45:
d4:39:77:c1:da:05:35:c8:01:b7:7a:6d:b6:7b:fc:ef:5c:a4:
20:bd:af:56:bb:33:1e:78:75:f0:1e:54:c3:d5:37:ec:30:11:
27:8e:d3:82:21:3f:d4:9d:6e:58:c3:28:03:39:0a:17:82:65:
44:75:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 02:40:32 2025 by rpki-client