Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: PjTjJAL7Inxb+AuEW7uQmA1S8MKnndSLQTPVmvZAOpY=
Subject key identifier: 4B:64:28:24:C6:A4:AB:1D:44:C7:48:FB:32:97:BA:1C:34:AA:99:DE
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0197646CAA6B88B60592ED59BD0AE6CBFA91
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 072D
Signing time: Thu 12 Jun 2025 13:55:17 +0000
Manifest this update: Thu 12 Jun 2025 13:55:17 +0000
Manifest next update: Fri 13 Jun 2025 13:55:17 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: 1BYr0cVZo20baxvSxp/TE3nE4pQdzGyMGkIeVm/aTMc=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: k9HfaB/tewSoI62bTYhMa1lAnciGvjKPvAbXy5rGdWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:6c:aa:6b:88:b6:05:92:ed:59:bd:0a:e6:cb:fa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Jun 12 13:55:17 2025 GMT
Not After : Jun 13 13:55:17 2025 GMT
Subject: CN=4b642824c6a4ab1d44c748fb3297ba1c34aa99de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:6f:c2:d7:b7:a3:ac:6f:65:ce:a0:f1:26:
a5:78:56:ba:81:44:ab:ab:a5:70:ae:44:95:d0:64:
8f:40:5c:53:8c:ae:25:2a:38:de:c5:90:da:3d:da:
a1:2c:dd:16:58:7b:c4:ea:4a:82:71:9a:ea:fb:76:
d2:04:a8:63:b2:1e:a1:95:cc:4e:6d:bf:7b:02:8d:
d8:3b:fb:f5:47:8a:b8:73:05:f4:80:d8:17:f0:a4:
b4:d2:55:3e:6c:e7:4d:38:a3:91:ef:22:48:59:ec:
fc:78:48:ec:7e:0a:04:cc:39:b7:84:7a:c1:60:26:
2e:27:de:d6:ee:56:39:de:3f:ec:df:e4:f3:cd:82:
6b:9d:31:a5:9a:ef:f1:18:da:1c:c2:93:e2:eb:d2:
cd:8b:90:66:d5:ee:ed:25:13:88:b7:3c:73:dd:c8:
8b:62:7e:e3:78:68:41:94:c2:7e:44:1d:00:5a:47:
f0:ed:d5:73:2d:f8:66:9c:9c:a6:97:2e:43:69:cf:
13:41:7e:64:f2:e7:c9:17:1e:fd:b4:30:9c:b6:70:
75:73:75:2d:28:77:ca:41:c0:5c:62:50:d4:a0:8e:
13:aa:99:64:da:8a:72:65:3d:3a:ab:11:bb:e7:50:
95:6b:0e:c2:49:9e:6b:23:df:b5:35:0e:96:8c:7b:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:28:24:C6:A4:AB:1D:44:C7:48:FB:32:97:BA:1C:34:AA:99:DE
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:92:77:b2:d0:4b:ff:e3:9b:19:a9:e1:b4:82:92:04:78:d2:
ce:cc:b3:db:e2:16:20:52:b1:d3:27:fd:fe:c8:58:85:02:f6:
0d:29:4e:9f:fb:1d:f6:f0:28:e4:87:71:96:2c:34:6d:c5:2d:
0c:dd:c2:73:16:6f:d3:01:c6:12:42:42:a2:1d:94:fa:78:d9:
f8:8e:0b:07:af:b2:ce:34:69:d4:9b:16:25:de:47:8e:04:01:
f9:0f:61:65:9e:1a:bf:e4:f0:a8:84:5e:a9:b0:ec:10:eb:44:
10:77:ad:7c:12:0a:b3:1f:58:62:c5:25:1f:4f:29:28:d3:ea:
e1:6d:d7:cc:a8:e7:7b:69:4f:f3:7d:1e:0d:5f:6b:44:b2:b4:
b6:c8:db:bd:51:96:d6:6f:08:bb:d0:9d:fb:10:93:44:ac:18:
4e:4f:58:02:0a:93:ea:62:a2:cd:54:47:c0:89:09:54:b1:02:
a5:12:33:a0:3b:83:f8:8d:1c:b3:9e:62:8c:4c:53:be:58:49:
71:34:7e:c4:9b:f3:ed:a0:84:cf:37:ad:d6:62:0d:35:df:68:
ce:d0:88:ad:43:be:70:52:df:09:e5:2b:00:13:46:e3:98:d4:
19:10:38:5c:aa:25:1d:01:86:02:52:d7:19:1d:b5:b3:74:bd:
e9:8b:dd:b0
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZdkbKpriLYFku1ZvQrmy/qRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjUwNjEyMTM1NTE3WhcNMjUwNjEzMTM1NTE3WjAzMTEwLwYDVQQD
Eyg0YjY0MjgyNGM2YTRhYjFkNDRjNzQ4ZmIzMjk3YmExYzM0YWE5OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG5vwte3o6xvZc6g8SaleFa6gUSr
q6VwrkSV0GSPQFxTjK4lKjjexZDaPdqhLN0WWHvE6kqCcZrq+3bSBKhjsh6hlcxO
bb97Ao3YO/v1R4q4cwX0gNgX8KS00lU+bOdNOKOR7yJIWez8eEjsfgoEzDm3hHrB
YCYuJ97W7lY53j/s3+TzzYJrnTGlmu/xGNocwpPi69LNi5Bm1e7tJROItzxz3ciL
Yn7jeGhBlMJ+RB0AWkfw7dVzLfhmnJymly5Dac8TQX5k8ufJFx79tDCctnB1c3Ut
KHfKQcBcYlDUoI4Tqplk2opyZT06qxG751CVaw7CSZ5rI9+1NQ6WjHu4eQIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFEtkKCTGpKsdRMdI+zKXuhw0qpneMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHWSd7LQS//jmxmp4bSCkgR40s7Ms9viFiBSsdMn/f7IWIUC9g0pTp/7Hfbw
KOSHcZYsNG3FLQzdwnMWb9MBxhJCQqIdlPp42fiOCwevss40adSbFiXeR44EAfkP
YWWeGr/k8KiEXqmw7BDrRBB3rXwSCrMfWGLFJR9PKSjT6uFt18yo53tpT/N9Hg1f
a0SytLbI271RltZvCLvQnfsQk0SsGE5PWAIKk+pios1UR8CJCVSxAqUSM6A7g/iN
HLOeYoxMU75YSXE0fsSb8+2ghM83rdZiDTXfaM7QiK1DvnBS3wnlKwATRuOY1BkQ
OFyqJR0BhgJS1xkdtbN0vemL3bA=
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:22:32 2025 by rpki-client