Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: kCbJQ4C0F0KBj1Te06fUshcDZeusF7hEBPbrexO0nak=
Subject key identifier: 49:E2:20:FC:29:B1:5C:B2:92:E6:C6:4B:49:85:CE:F4:78:F4:BC:31
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 0196631D3E7FE45EAC8E60366F236C32143E
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 067A
Signing time: Wed 23 Apr 2025 14:46:10 +0000
Manifest this update: Wed 23 Apr 2025 14:46:10 +0000
Manifest next update: Thu 24 Apr 2025 14:46:10 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: jgicUCeLWPuUO4oI53n5F43YLcE7PiZqD6uh3TENj5s=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: VYsSuktYBPIdL0nHbfGChh1yP31mwWnJBXssU7IGSKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:1d:3e:7f:e4:5e:ac:8e:60:36:6f:23:6c:32:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: Apr 23 14:46:10 2025 GMT
Not After : Apr 24 14:46:10 2025 GMT
Subject: CN=49e220fc29b15cb292e6c64b4985cef478f4bc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:f6:52:ee:30:f4:bd:de:e3:8d:8d:8a:1d:
80:9d:c6:c1:45:c1:1d:72:3f:e9:62:b5:49:96:c8:
72:a4:78:2e:32:ba:bc:77:5e:fe:47:e6:1b:2c:c2:
6c:6b:c3:2a:51:fa:c4:55:fe:ff:27:00:e3:82:e8:
9c:7b:2b:2c:0f:b0:af:ce:4f:7a:bf:37:69:cb:44:
26:77:80:d4:6b:69:0e:64:72:73:5f:e8:9c:19:c1:
b8:07:73:35:ea:bd:af:41:e5:b5:29:4a:de:cf:0f:
3e:8d:01:61:8a:03:2f:10:bb:4e:4f:ee:65:a4:1e:
7a:a3:17:22:56:b5:64:11:2f:85:8e:f2:75:d3:b1:
bd:b0:3d:11:b7:4e:2d:9b:89:f8:40:5a:dc:d7:82:
8d:05:de:6b:db:2d:61:83:1b:20:5c:4f:79:47:37:
cd:e5:9e:02:b5:3c:ec:f8:42:37:c8:b9:e4:5d:46:
51:36:43:6c:2f:ea:47:e8:ef:6e:72:ae:95:02:41:
c7:26:1d:07:9e:30:46:88:be:6b:cf:39:99:24:aa:
2a:9e:8c:a5:30:ac:1b:a5:1c:9e:8c:45:5a:5f:fd:
cd:eb:6c:73:b5:cb:c4:6e:0e:9f:35:42:d3:59:7c:
88:7b:1e:7d:0c:37:1b:50:c0:15:65:0e:59:b4:1a:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:20:FC:29:B1:5C:B2:92:E6:C6:4B:49:85:CE:F4:78:F4:BC:31
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fd:28:2c:f9:94:76:98:2f:21:f1:90:2f:9d:33:1f:4e:d0:
34:21:0e:8f:d2:ef:8c:8e:65:aa:67:81:f6:0b:fa:af:92:d6:
dd:a1:fb:4e:3c:c7:89:2f:67:0a:7a:35:4a:82:37:65:ed:d9:
56:7f:69:5d:f5:45:3c:16:8d:2b:44:f1:9a:46:b2:e3:09:30:
b1:01:8b:47:84:26:f8:24:e8:4f:78:b6:7b:aa:a7:c3:c9:a9:
7d:e0:cd:a5:67:f2:09:bf:11:56:fb:93:3e:e8:b4:43:6b:42:
08:75:0f:2c:e4:07:b6:96:b8:50:cf:38:24:29:7d:37:fb:13:
06:08:17:7a:cb:61:c3:5d:d0:ba:eb:a3:47:09:5d:ef:19:90:
0c:e2:41:16:d1:f6:6a:22:3f:08:7a:38:c2:42:e6:d6:f2:c4:
2b:45:6d:76:7f:9a:9c:cc:41:8e:c9:51:d4:20:fd:a0:c4:e6:
55:f4:41:76:5a:a1:fd:4a:c2:47:45:2c:30:0b:d9:fc:10:1a:
9d:62:f6:5a:fa:93:0f:9a:7b:cc:71:80:2b:2a:9f:ce:84:79:
bb:97:37:dd:94:ed:2e:a2:86:f2:0e:90:bd:e8:1f:96:ba:54:
cd:30:b2:80:b8:11:ad:78:ca:49:7b:36:46:5a:7e:69:93:29:
31:57:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:41:21 2025 by rpki-client on console.sobornost.net