Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: u7/UxGdZIXqecofquNHfaccs5wWai+n3L+o18V+ozvE=
Subject key identifier: 16:BF:6B:F0:22:E5:EA:20:FC:8A:FC:CF:BA:62:6C:D7:5F:16:93:24
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019671C1692ECE2E3612969FB8B9E1BB70B0
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0684
Signing time: Sat 26 Apr 2025 11:00:10 +0000
Manifest this update: Sat 26 Apr 2025 11:00:10 +0000
Manifest next update: Sun 27 Apr 2025 11:00:10 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: RKPtrbWcLFCljr8KLUMpUPRsmR+e2PQXjfrTKAo/zXw=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: r1t+ZYHCvUPe/swSQU92BVOkqtgSrJkxiZrBae1QjEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:69:2e:ce:2e:36:12:96:9f:b8:b9:e1:bb:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Apr 26 11:00:10 2025 GMT
Not After : Apr 27 11:00:10 2025 GMT
Subject: CN=16bf6bf022e5ea20fc8afccfba626cd75f169324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:94:fe:81:56:36:61:48:9e:f9:f1:4d:fe:
d6:a9:e1:69:ab:79:82:ca:5c:3c:0a:e9:91:f0:cc:
d6:d4:ec:a8:65:ec:71:f6:29:7c:86:1a:a2:eb:43:
5c:27:33:c9:7f:b5:05:e8:83:75:ab:91:9f:44:da:
b2:a3:7d:a3:af:df:3e:f6:97:57:7b:eb:99:fa:ae:
51:b6:9a:7b:66:71:68:aa:77:dc:e1:65:3c:43:83:
82:af:b1:7d:19:ac:62:12:80:0a:43:05:7e:ab:cf:
75:cc:05:9e:92:b4:ce:d7:70:9a:e7:20:f7:f6:13:
52:8c:f3:44:fe:f1:8a:39:19:be:51:4f:e1:2c:9a:
95:02:ff:40:6b:dc:d9:40:d5:fc:dc:12:02:2c:96:
e2:43:b1:df:20:de:53:a6:09:0d:c9:05:6a:f2:0d:
72:ad:91:e9:78:50:a2:42:cd:bb:c9:90:a5:e6:53:
99:42:6e:59:fa:aa:bd:71:48:dc:0f:3d:a9:12:be:
54:a4:ee:44:dc:0b:21:22:25:70:16:29:b4:ef:e2:
f3:ed:9e:22:77:96:db:35:c7:8d:dd:ec:8d:b9:ea:
fe:3c:96:a9:b7:88:53:56:a5:3f:0b:7b:37:6d:06:
b0:06:1a:29:42:78:68:51:75:08:15:af:32:b3:f6:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:6B:F0:22:E5:EA:20:FC:8A:FC:CF:BA:62:6C:D7:5F:16:93:24
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:86:c0:dd:82:23:f6:15:6c:81:50:67:63:1f:a2:50:3d:
95:50:ff:13:f9:cf:bd:03:9e:41:81:a0:f1:9d:30:b9:a2:2a:
a5:d3:60:4b:43:6d:99:a3:83:d2:98:ab:1f:47:80:6a:8c:41:
31:18:60:a8:34:0a:a0:59:79:a9:73:56:5d:71:b8:ed:f0:e5:
23:33:f7:eb:1d:b3:c9:56:dd:64:6c:72:d0:b7:1c:d1:9e:2d:
11:d2:a5:4d:f9:d0:19:c9:66:62:9b:df:6f:cb:84:2e:0c:95:
84:6f:5d:0b:d4:4a:c0:af:e5:e7:9c:66:ec:1e:d7:4e:b0:8a:
3a:6d:f7:6e:70:be:ec:b9:65:7d:2a:7a:dd:26:89:e4:f7:69:
24:91:88:0c:7a:a6:db:32:0f:cc:35:44:41:4a:35:f1:74:ed:
e1:25:0b:c1:dd:e9:ae:75:ca:93:42:42:66:e1:b7:b7:36:9d:
78:e1:13:da:53:9a:1e:1c:8b:71:57:91:41:fb:96:08:f5:fb:
2d:e8:b8:c4:d9:6b:19:3c:85:2d:a9:73:23:31:7f:e2:b3:b2:
47:dc:0a:27:21:c6:9c:46:90:5e:a0:9e:d8:a3:d4:85:f9:c1:
9b:d5:71:7d:4c:55:2d:28:53:00:c4:66:39:30:44:a9:32:76:
6a:8c:b5:13
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAZZxwWkuzi42EpafuLnhu3CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNi
MTczMWEwHhcNMjUwNDI2MTEwMDEwWhcNMjUwNDI3MTEwMDEwWjAzMTEwLwYDVQQD
EygxNmJmNmJmMDIyZTVlYTIwZmM4YWZjY2ZiYTYyNmNkNzVmMTY5MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPKU/oFWNmFInvnxTf7WqeFpq3mC
ylw8CumR8MzW1OyoZexx9il8hhqi60NcJzPJf7UF6IN1q5GfRNqyo32jr98+9pdX
e+uZ+q5Rtpp7ZnFoqnfc4WU8Q4OCr7F9GaxiEoAKQwV+q891zAWekrTO13Ca5yD3
9hNSjPNE/vGKORm+UU/hLJqVAv9Aa9zZQNX83BICLJbiQ7HfIN5TpgkNyQVq8g1y
rZHpeFCiQs27yZCl5lOZQm5Z+qq9cUjcDz2pEr5UpO5E3AshIiVwFim07+Lz7Z4i
d5bbNceN3eyNuer+PJapt4hTVqU/C3s3bQawBhopQnhoUXUIFa8ys/bC7QIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFBa/a/Ai5eog/Ir8z7pibNdfFpMkMB8GA1UdIwQY
MBaAFOwzTQ86GL4AIbe46EIodkGssXMaMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L2VjMzM0ZDBmM2ExOGJlMDAyMWI3YjhlODQyMjg3NjQxYWNiMTczMWEu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4
by5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhLzdETk5Eem9ZdmdBaHQ3am9RaWgyUWF5eGN4by5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADgDhsDdgiP2FWyBUGdjH6JQPZVQ/xP5z70DnkGBoPGdMLmiKqXTYEtDbZmj
g9KYqx9HgGqMQTEYYKg0CqBZealzVl1xuO3w5SMz9+sds8lW3WRsctC3HNGeLRHS
pU350BnJZmKb32/LhC4MlYRvXQvUSsCv5eecZuwe106wijpt925wvuy5ZX0qet0m
ieT3aSSRiAx6ptsyD8w1REFKNfF07eElC8Hd6a51ypNCQmbht7c2nXjhE9pTmh4c
i3FXkUH7lgj1+y3ouMTZaxk8hS2pcyMxf+KzskfcCichxpxGkF6gntij1IX5wZvV
cX1MVS0oUwDEZjkwRKkydmqMtRM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:37 2025 by rpki-client