Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: haHP08Ddr5/Y1s5KFryGf7MKFSFEq/oAEYGmyDy8uFs=
Subject key identifier: D6:C6:54:B9:D0:10:DA:AB:1D:68:7F:CA:C3:F2:DA:05:FB:35:D0:68
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019A451548263D51DA550A357A0A2FCC0B6A
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 0916
Signing time: Sun 02 Nov 2025 15:00:03 +0000
Manifest this update: Sun 02 Nov 2025 15:00:03 +0000
Manifest next update: Mon 03 Nov 2025 15:00:03 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: MahlAFPCvUYhhdpMT33DLFM9vRdYwEdmfeueXIrLaeI=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: DU0Jetnz/TVntehw97Wqm970pS+hIufblO2bjl5B7ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:15:48:26:3d:51:da:55:0a:35:7a:0a:2f:cc:0b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Nov 2 15:00:03 2025 GMT
Not After : Nov 3 15:00:03 2025 GMT
Subject: CN=d6c654b9d010daab1d687fcac3f2da05fb35d068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:61:d2:7c:89:10:fb:67:98:48:f8:95:d5:
fa:c0:fe:6c:99:58:bd:95:85:11:e0:91:09:19:13:
a9:69:e0:9f:a8:40:87:77:71:91:ed:de:ec:fa:ff:
9a:33:26:e1:d2:63:1a:28:7d:aa:fa:35:4a:80:a6:
f9:7d:15:c3:ff:0f:bd:b5:ae:b3:ad:2d:8d:04:0f:
8b:b9:53:c4:64:14:9f:e1:98:a6:88:f8:ee:0d:1e:
7a:31:ac:c4:47:fa:8e:f4:cf:90:6e:e3:df:15:74:
4b:78:86:88:53:35:ba:6a:1b:d8:89:e0:f6:aa:3b:
b9:09:9e:0c:80:61:e1:d3:0a:d7:90:88:fb:91:70:
36:d9:16:2a:6c:7d:ea:51:9e:96:e4:3b:ea:f6:5b:
64:4c:31:f3:3b:45:36:af:1a:7f:cd:4c:2d:03:01:
79:c8:b6:f5:ee:02:57:91:9c:ac:b8:de:40:8a:dc:
b4:7c:0e:9b:10:c3:ef:bc:bc:e3:46:1d:de:c4:d5:
9b:ad:3d:ba:a7:cc:33:df:3e:82:22:7c:86:54:f4:
d8:87:ec:8a:7a:2f:28:c7:04:a7:2f:51:49:c5:97:
4a:98:8d:7a:f4:de:39:79:04:37:20:8b:65:b9:74:
b9:da:73:c8:f2:54:f7:01:6c:e6:20:e7:36:c3:e1:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:54:B9:D0:10:DA:AB:1D:68:7F:CA:C3:F2:DA:05:FB:35:D0:68
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:86:27:69:79:2e:bd:70:21:2b:36:fc:eb:32:9c:d9:2b:c9:
4d:dc:78:6e:4a:89:72:78:f9:0e:19:b3:46:e8:e3:b9:54:1c:
d9:8f:e9:35:41:25:7c:83:31:63:ca:43:3b:19:93:ee:e7:42:
ad:93:c3:82:6d:cc:b3:43:c4:08:10:06:eb:a0:76:f8:cc:44:
25:24:e4:fb:94:83:38:29:de:b9:f2:7b:9c:b8:c1:86:78:9e:
3a:f5:c3:68:a6:44:f1:92:80:b7:35:b5:6e:84:b2:8b:fb:ed:
7c:6a:6b:9e:06:13:d7:52:e9:fd:12:4b:1d:5e:c8:f9:0f:74:
cf:cc:dc:66:6c:78:d1:4f:e7:d0:30:e4:4d:2c:68:9a:4e:35:
3b:89:48:11:83:ed:55:40:70:f8:2a:1d:95:99:23:7d:7d:90:
96:89:f4:75:c6:a5:cf:eb:6a:24:75:61:79:08:11:72:26:dd:
b1:15:17:f7:50:ec:1a:1b:62:7f:38:7a:20:cb:fa:28:f0:c6:
3e:79:f9:96:06:f2:39:ea:55:f0:5e:5c:54:bb:bb:b6:1e:5f:
7f:a1:f0:64:be:12:22:a8:dc:cd:0c:0e:87:68:0f:3d:f8:ef:
35:c0:98:9f:73:28:00:24:08:04:96:b8:55:e9:cd:a3:fd:2e:
a5:d0:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 00:12:21 2025 by rpki-client