Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: bcPtPIpGWfV3T5Ej3rjlCf4ZRAp8tfubEzYlw8qhOrk=
Subject key identifier: 1D:79:7A:85:E2:1B:E3:7A:2F:83:01:72:D7:58:1B:E1:A2:12:D6:AD
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0198D35E0BDFE2C0F001BAF0617197004C3E
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0819
Signing time: Fri 22 Aug 2025 20:00:04 +0000
Manifest this update: Fri 22 Aug 2025 20:00:04 +0000
Manifest next update: Sat 23 Aug 2025 20:00:04 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: wm4a7lxwPqnuiu15inI/hHSYmXGzm+Sw8wAUjMfaiME=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: xyAK9SGmAK810pDK3+px1gipR1nmduEBuhQNPKwUpWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:5e:0b:df:e2:c0:f0:01:ba:f0:61:71:97:00:4c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Aug 22 20:00:04 2025 GMT
Not After : Aug 23 20:00:04 2025 GMT
Subject: CN=1d797a85e21be37a2f830172d7581be1a212d6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:fc:64:aa:33:7f:7e:51:6d:42:5f:0b:38:
fe:e2:5a:e7:90:fa:41:f1:b9:40:a6:21:46:b3:16:
6e:7e:8f:8a:f5:7a:4a:4a:1e:04:1c:35:30:ee:9b:
b3:2b:1a:dd:84:f8:fd:2a:48:fa:04:d6:81:8e:3f:
1f:e0:db:b4:c3:2d:29:5b:c3:71:a0:7e:d4:2b:e0:
59:65:84:0f:e6:12:d4:3c:bd:d2:5b:ab:80:a8:bf:
6b:2d:54:f0:05:3d:cb:0c:51:2a:2b:19:c7:bf:b2:
70:55:c5:c1:a1:7c:f4:94:9c:ea:04:47:3f:00:0e:
ce:1c:73:50:3d:83:e9:84:f6:a8:2b:b2:74:a3:b5:
d9:6a:05:f1:c5:59:40:33:cb:61:de:6b:37:83:1d:
02:84:3c:13:8d:92:a3:3b:94:ba:81:b1:16:a4:7f:
63:78:35:d0:17:44:a8:48:cc:93:02:d6:d2:69:37:
56:0a:57:ed:de:5e:fa:b8:dd:74:2a:5d:a8:0c:52:
01:28:a1:73:2f:f7:e3:a4:f8:f4:4e:dd:d3:02:1a:
b4:0f:f7:e2:b4:81:b9:5e:ea:91:77:f8:5c:e0:41:
c8:ee:f6:ee:62:42:2c:45:c2:35:31:99:8c:42:70:
90:33:b0:3c:f5:24:8c:d5:8c:58:46:23:f5:83:02:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:7A:85:E2:1B:E3:7A:2F:83:01:72:D7:58:1B:E1:A2:12:D6:AD
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b4:d7:ff:5e:27:b6:f5:85:d1:bb:83:1c:93:5b:3b:31:57:
99:85:e1:ee:9c:5d:ce:1c:dd:2c:06:b2:d6:79:41:18:ff:47:
ba:88:06:2c:4e:90:52:5a:e2:08:15:61:83:5c:76:cb:b4:6b:
21:55:b6:44:4b:4c:e3:a6:14:d6:c6:95:44:9d:14:09:71:2d:
f7:30:da:44:1a:4b:93:02:2d:7c:d9:1a:00:8e:f5:dc:06:e2:
12:70:fa:11:d6:a8:f3:0a:f2:e0:26:a0:25:4f:32:98:f9:dc:
d9:54:84:86:fd:7c:03:87:97:1d:37:74:3f:e3:dd:9b:17:31:
99:7c:58:1f:37:70:dd:f4:8f:d3:cc:b8:e4:52:85:45:14:7b:
ef:71:b9:b0:8e:f8:3d:43:72:10:43:28:72:cf:f6:4c:9e:75:
ac:17:0f:96:d7:82:e2:a5:4f:e2:36:f8:3e:fc:0d:db:c6:5b:
ac:aa:dc:93:58:87:24:c8:7a:42:a7:21:9f:f5:02:86:4f:f1:
d6:18:c0:e5:2b:b0:07:93:ed:4d:bd:25:8a:15:0e:5c:f0:34:
35:d6:3c:d0:35:82:7c:56:6d:48:ba:76:60:e8:29:2f:d6:84:
34:ce:b8:80:6d:4d:63:9b:2d:b5:11:cf:8a:e5:20:40:e8:94:
9f:9f:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 03:45:27 2025 by rpki-client