Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: d/IutZ2lUvEkI5HuRdo0M+6IZCThNsLCqhh6PXlZFEI=
Subject key identifier: C6:AE:21:E4:33:DE:5D:A2:85:03:D0:EF:07:08:03:A9:71:94:05:49
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0197B40D482A2C83FF28D8153DD865A4BF4C
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0760
Signing time: Sat 28 Jun 2025 01:00:42 +0000
Manifest this update: Sat 28 Jun 2025 01:00:42 +0000
Manifest next update: Sun 29 Jun 2025 01:00:42 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: lIwreWLPtHVe96UxNJKK/3fZSr9993AbGMWnkyXPnjc=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: Wt5Ez/VSZjFo8/qTMW2Geli+8W2Ax4awIhMhZQ9pLR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b4:0d:48:2a:2c:83:ff:28:d8:15:3d:d8:65:a4:bf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jun 28 01:00:42 2025 GMT
Not After : Jun 29 01:00:42 2025 GMT
Subject: CN=c6ae21e433de5da28503d0ef070803a971940549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:5f:36:86:55:7e:30:f5:88:cf:68:90:d9:
38:63:1e:10:77:43:f9:61:a6:30:84:41:fb:9a:21:
0f:d2:c8:ce:3a:53:45:22:a3:19:ef:d2:ea:7d:90:
7e:61:49:56:1f:19:8f:76:66:25:fc:dd:b6:28:d4:
ea:fb:3c:eb:25:e7:9f:e5:18:b0:16:54:c0:86:5b:
ca:51:a2:00:d2:7c:00:89:72:4b:73:24:cd:1e:e9:
49:6d:b4:1d:36:fa:be:cc:c4:35:57:12:1d:4e:fb:
56:38:83:0f:85:e7:f2:b8:f8:e8:6d:96:09:0b:92:
11:fb:25:c7:e1:60:22:0e:e4:64:a7:ad:8e:0f:44:
ba:2b:93:08:0e:8f:2a:65:4e:19:5e:ef:60:f7:28:
43:aa:bb:1b:1d:52:23:86:7f:55:f0:44:0a:e2:5d:
29:d2:ff:87:9c:30:e8:c0:0c:d7:d9:88:18:9a:d7:
b0:19:20:7f:59:71:af:ee:c7:f3:18:a6:33:9a:f8:
89:1b:a0:ee:76:31:df:f4:2d:f6:41:a6:b0:63:08:
71:ee:19:b1:97:3f:3e:6c:3a:e9:b3:35:91:27:c1:
23:72:87:36:c4:69:f1:5a:de:ef:0a:6b:8e:a7:9e:
93:41:a0:58:5c:91:9f:9d:5c:6e:ac:68:17:e8:ce:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AE:21:E4:33:DE:5D:A2:85:03:D0:EF:07:08:03:A9:71:94:05:49
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:14:ab:3c:29:54:d6:3d:26:39:80:e7:8c:96:d8:81:95:
9c:6c:ee:d1:0e:1c:4d:d3:39:ad:e8:bd:4e:05:95:3e:08:ce:
89:14:d4:fd:59:ad:8c:e3:81:b8:b5:ba:d8:ac:52:01:13:7a:
fb:39:76:74:e5:4b:57:d3:60:d1:6d:4e:f8:ee:60:d8:06:45:
61:08:46:fa:82:35:1f:64:c4:46:5e:cd:8c:14:18:e7:55:fb:
ce:6a:ef:3a:0e:a2:d8:f0:70:95:32:dd:8b:50:41:83:4e:a5:
cb:56:8d:c5:99:24:43:4f:d0:d0:7a:2e:29:b7:cb:c0:83:3e:
22:09:27:5e:ca:ad:85:65:15:5b:52:8d:23:c1:a2:3a:8d:3d:
8c:8f:62:0a:d1:f6:20:c4:e2:32:5a:fe:55:1a:19:8d:7f:1b:
46:b7:d4:f3:1b:ff:8e:cf:9c:01:b0:ef:69:dc:e1:85:dc:0a:
ee:1e:7e:6b:fd:a8:da:bc:ae:14:69:dc:24:6a:b0:e4:10:27:
01:d0:99:55:9c:a7:8c:2b:37:a5:74:cf:b8:73:3a:89:08:e6:
2d:5c:5c:e4:35:b6:ef:b9:a8:d1:f5:8c:23:71:85:4f:48:e3:
99:bd:e2:f1:22:1f:55:46:0a:11:65:55:7f:7e:e1:6a:8d:c5:
8c:5d:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 09:16:04 2025 by rpki-client