Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: 7VL3H+cy2GU2v0kTrBqEMW8Cu3qDBjc/1LYWHqK3BOw=
Subject key identifier: 5E:46:B0:CF:DB:6B:0B:7B:52:E2:7C:F1:FE:CD:46:A2:22:9E:B2:8D
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0199F9204E56E4C9AB5A656F37F827CCFEE9
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 08DF
Signing time: Sat 18 Oct 2025 21:00:58 +0000
Manifest this update: Sat 18 Oct 2025 21:00:58 +0000
Manifest next update: Sun 19 Oct 2025 21:00:58 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: rsQqhFdXfO+XcxeaJ9ySG0QdxBaSyKyZQ9VFEN10o/k=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: UBYBnZVgtVjOAOnsZ/ISdXYqc13tzbqRCv/pre40BxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f9:20:4e:56:e4:c9:ab:5a:65:6f:37:f8:27:cc:fe:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Oct 18 21:00:58 2025 GMT
Not After : Oct 19 21:00:58 2025 GMT
Subject: CN=5e46b0cfdb6b0b7b52e27cf1fecd46a2229eb28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:21:62:be:8a:a6:e0:bb:5a:ca:67:5e:73:
c8:bc:56:66:e8:42:c4:a2:c3:e9:5b:bf:57:50:59:
68:9b:bc:50:05:66:84:11:08:67:62:60:26:9c:70:
18:06:3a:c1:5c:e6:3e:bf:67:8a:6f:9d:71:23:2c:
22:75:2d:68:34:8c:db:16:5f:bf:7f:6c:25:95:7c:
ba:fa:c5:20:25:0d:08:8e:56:f7:24:1e:be:4a:b7:
e9:6c:b0:f1:16:1d:6a:29:94:43:8c:93:25:79:32:
0f:e2:da:e3:55:94:25:51:e7:5f:b9:36:4d:c2:20:
01:27:bb:a9:5e:13:a6:48:97:10:b5:c3:c8:4b:53:
8d:e2:2b:6f:9f:ad:d3:e0:0c:31:60:6a:68:33:62:
bc:c0:ac:81:7a:2c:47:94:5f:08:fb:a9:bb:7f:5a:
2c:d7:5c:75:d3:46:9e:df:c2:ac:25:3e:c2:b0:73:
d2:0f:73:e7:ce:b5:a6:65:b0:cd:96:c8:70:a0:0b:
91:5b:18:d3:6f:ab:04:9d:f0:5c:fa:70:0f:da:cd:
e9:74:7e:c2:dc:7b:b4:d3:f4:24:d5:30:29:01:5f:
fd:8b:be:d1:d4:46:27:19:59:44:5b:4c:0d:06:7f:
35:20:db:ca:56:f9:50:7a:9c:80:cd:fa:eb:67:c5:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:46:B0:CF:DB:6B:0B:7B:52:E2:7C:F1:FE:CD:46:A2:22:9E:B2:8D
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:44:fd:b6:7b:b6:24:66:e1:81:2f:6d:b1:32:81:a0:94:f0:
11:90:c5:64:32:5f:0a:e9:7d:6f:e9:cd:cb:c8:b8:fe:7e:77:
8a:53:70:ad:46:44:89:8b:6a:3b:55:7f:2f:7e:1f:d9:67:06:
51:6b:9c:15:55:ed:bc:54:15:6d:62:89:c8:89:66:49:6e:8f:
12:32:d3:1e:b4:b0:a1:6d:4f:d0:a0:7a:37:19:bf:f8:db:46:
66:fe:4d:28:ee:68:f2:88:1a:f6:e1:19:11:86:0f:bc:34:29:
3c:61:c6:d2:a3:3a:d9:fe:86:9f:ed:a6:f7:b6:27:23:57:ed:
8e:3d:7a:f6:e2:90:81:5e:3a:50:1f:a2:f1:af:94:bf:34:85:
35:d0:03:a3:7f:0e:7b:13:9c:88:06:d5:cd:35:fa:09:1a:bb:
46:16:3e:6b:fb:87:e9:e4:0a:9d:86:53:ab:99:d8:42:66:81:
35:02:00:f5:63:66:01:ff:9b:bb:65:e4:a4:01:54:6a:3f:71:
ca:50:8c:70:7a:8b:a3:85:be:77:5f:cd:64:c3:e5:2f:0f:9b:
61:2c:00:d2:21:50:59:98:4c:2d:5c:58:a0:a6:37:2f:c0:92:
88:eb:82:b4:9a:16:72:c7:e8:94:cf:12:e0:4f:c0:f6:a7:d1:
2a:fb:69:2e
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZn5IE5W5MmrWmVvN/gnzP7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjUxMDE4MjEwMDU4WhcNMjUxMDE5MjEwMDU4WjAzMTEwLwYDVQQD
Eyg1ZTQ2YjBjZmRiNmIwYjdiNTJlMjdjZjFmZWNkNDZhMjIyOWViMjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx54hYr6KpuC7WspnXnPIvFZm6ELE
osPpW79XUFlom7xQBWaEEQhnYmAmnHAYBjrBXOY+v2eKb51xIywidS1oNIzbFl+/
f2wllXy6+sUgJQ0Ijlb3JB6+SrfpbLDxFh1qKZRDjJMleTIP4trjVZQlUedfuTZN
wiABJ7upXhOmSJcQtcPIS1ON4itvn63T4AwxYGpoM2K8wKyBeixHlF8I+6m7f1os
11x100ae38KsJT7CsHPSD3PnzrWmZbDNlshwoAuRWxjTb6sEnfBc+nAP2s3pdH7C
3Hu00/Qk1TApAV/9i77R1EYnGVlEW0wNBn81INvKVvlQepyAzfrrZ8VEJQIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFF5GsM/bawt7UuJ88f7NRqIinrKNMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJhE/bZ7tiRm4YEvbbEygaCU8BGQxWQyXwrpfW/pzcvIuP5+d4pTcK1GRImL
ajtVfy9+H9lnBlFrnBVV7bxUFW1iiciJZklujxIy0x60sKFtT9CgejcZv/jbRmb+
TSjuaPKIGvbhGRGGD7w0KTxhxtKjOtn+hp/tpve2JyNX7Y49evbikIFeOlAfovGv
lL80hTXQA6N/DnsTnIgG1c01+gkau0YWPmv7h+nkCp2GU6uZ2EJmgTUCAPVjZgH/
m7tl5KQBVGo/ccpQjHB6i6OFvndfzWTD5S8Pm2EsANIhUFmYTC1cWKCmNy/Akojr
grSaFnLH6JTPEuBPwPan0Sr7aS4=
-----END CERTIFICATE-----
Generated at Sun Oct 19 02:48:01 2025 by rpki-client