Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: q84U3QI3e0ZGNQtxh9j6M+RjT+BhrDDqOITMjoi8f+E=
Subject key identifier: A3:54:14:90:34:00:C4:94:BA:D5:DC:A6:B1:39:8A:F2:15:49:B7:4F
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 01987117B9ED59640F99D55A9E2FD183780E
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 07D8
Signing time: Sun 03 Aug 2025 18:00:28 +0000
Manifest this update: Sun 03 Aug 2025 18:00:28 +0000
Manifest next update: Mon 04 Aug 2025 18:00:28 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: uNpkTf1G0cs8c4AUsSPMvDqn8CkP4E1abKgEKRXvz2k=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: BqyW7MdHso0QDpVFGSTIWndjnKDIVK5uT65ySUHISNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:71:17:b9:ed:59:64:0f:99:d5:5a:9e:2f:d1:83:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Aug 3 18:00:28 2025 GMT
Not After : Aug 4 18:00:28 2025 GMT
Subject: CN=a35414903400c494bad5dca6b1398af21549b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:8c:2f:64:08:80:2c:07:81:71:46:17:30:
9b:b4:51:a2:0e:8a:c2:a8:66:38:1c:34:45:85:49:
c8:2c:4f:d8:6a:c5:7d:44:65:64:9e:9c:73:9d:f8:
dd:d2:d0:58:f7:91:ae:01:ab:c0:a0:bd:fd:d0:88:
22:cd:80:c2:82:00:f5:a8:71:cc:7f:21:d2:a5:d0:
f8:a3:26:6a:bf:f6:07:36:dd:4a:b3:68:5a:ee:c5:
c2:58:23:40:4c:ee:b8:67:26:19:dc:d6:9b:d3:3b:
42:26:d6:a0:9a:97:0b:f4:62:8a:ca:3c:37:ff:05:
c0:bf:84:6f:0f:bc:70:7a:fa:84:29:b3:a4:58:44:
e1:46:64:f9:c6:18:00:da:12:dd:7c:47:76:72:2a:
99:c3:f7:58:59:21:e7:e7:d0:99:9c:b5:9e:29:e8:
92:71:d7:2c:de:c3:4a:6f:dd:f9:77:81:1c:41:51:
e7:33:30:18:c7:ab:7a:52:21:c2:22:d1:1a:2b:ac:
1b:d5:a6:22:2c:ed:67:00:9d:11:0e:25:a7:16:fa:
93:5f:1d:01:39:07:f5:9a:19:15:42:30:05:41:2f:
0b:5c:6e:31:d2:11:af:6d:2f:4c:90:47:6f:ee:3d:
da:cb:ca:09:a6:10:b9:46:c7:59:bb:67:c6:14:d6:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:14:90:34:00:C4:94:BA:D5:DC:A6:B1:39:8A:F2:15:49:B7:4F
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4b:34:15:a9:b6:c9:a9:84:1a:f2:9a:1e:d2:9b:a4:92:47:
e2:82:b2:96:9a:27:53:62:d2:61:63:f2:65:63:2e:3f:75:a2:
6e:8e:72:fb:62:fd:c8:66:2f:99:09:3f:f3:5c:2f:ac:28:1e:
12:e6:92:48:40:a6:d6:78:63:f0:5a:9d:74:ee:21:63:bb:d4:
33:ef:18:0c:8d:61:70:85:80:02:8f:e7:b0:5a:89:e1:b2:bf:
4f:11:0e:c2:1f:01:29:90:a2:c8:83:ea:bf:ff:75:4b:17:10:
75:a7:3f:b8:ee:27:3a:14:34:78:84:24:0e:80:ba:14:c0:32:
a6:b1:c2:31:33:fc:8f:1d:01:bc:86:e0:d3:fb:05:18:41:b5:
b2:ee:ca:cb:6b:60:4c:f8:c4:92:98:87:68:06:c6:9b:d0:80:
04:55:b5:51:2d:17:5f:83:b7:47:bc:ea:00:82:73:92:bd:67:
50:14:0e:ce:62:f9:cc:c7:63:e0:61:ca:35:d3:cb:59:ca:7a:
0c:44:87:72:d4:a7:63:74:8f:93:f0:df:98:03:00:d9:df:81:
5d:0d:1e:8e:f5:71:c1:da:ed:ec:29:35:19:25:08:02:86:ed:
7b:73:4e:c7:1c:ba:15:55:4c:01:ca:ae:7f:df:29:51:c2:16:
d7:73:d9:a7
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZhxF7ntWWQPmdVani/Rg3gOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjUwODAzMTgwMDI4WhcNMjUwODA0MTgwMDI4WjAzMTEwLwYDVQQD
EyhhMzU0MTQ5MDM0MDBjNDk0YmFkNWRjYTZiMTM5OGFmMjE1NDliNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA+ML2QIgCwHgXFGFzCbtFGiDorC
qGY4HDRFhUnILE/YasV9RGVknpxznfjd0tBY95GuAavAoL390IgizYDCggD1qHHM
fyHSpdD4oyZqv/YHNt1Ks2ha7sXCWCNATO64ZyYZ3Nab0ztCJtagmpcL9GKKyjw3
/wXAv4RvD7xwevqEKbOkWEThRmT5xhgA2hLdfEd2ciqZw/dYWSHn59CZnLWeKeiS
cdcs3sNKb935d4EcQVHnMzAYx6t6UiHCItEaK6wb1aYiLO1nAJ0RDiWnFvqTXx0B
OQf1mhkVQjAFQS8LXG4x0hGvbS9MkEdv7j3ay8oJphC5RsdZu2fGFNb1LQIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFKNUFJA0AMSUutXcprE5ivIVSbdPMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAH5LNBWptsmphBrymh7Sm6SSR+KCspaaJ1Ni0mFj8mVjLj91om6Ocvti/chm
L5kJP/NcL6woHhLmkkhAptZ4Y/BanXTuIWO71DPvGAyNYXCFgAKP57BaieGyv08R
DsIfASmQosiD6r//dUsXEHWnP7juJzoUNHiEJA6AuhTAMqaxwjEz/I8dAbyG4NP7
BRhBtbLuystrYEz4xJKYh2gGxpvQgARVtVEtF1+Dt0e86gCCc5K9Z1AUDs5i+czH
Y+BhyjXTy1nKegxEh3LUp2N0j5Pw35gDANnfgV0NHo71ccHa7ewpNRklCAKG7Xtz
TsccuhVVTAHKrn/fKVHCFtdz2ac=
-----END CERTIFICATE-----
Generated at Mon Aug 4 03:25:00 2025 by rpki-client