
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: Vscd/3ZP/QYx+hF7XViHw/yYg060Q3t0F8cu0pVbr5Q=
Subject key identifier: 80:4F:9B:9B:4E:18:B9:2E:83:60:FA:82:F5:E5:03:D1:1C:96:60:84
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 0199FB0F44E43EFE8BEBB0A631CC7CA3AA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: fZat60DGvSDRzr5iuwGB7wLD/Ms4ZRbehg5cXs2o0T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:44:e4:3e:fe:8b:eb:b0:a6:31:cc:7c:a3:aa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=804f9b9b4e18b92e8360fa82f5e503d11c966084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:14:aa:7c:62:87:fe:07:38:c6:21:36:d6:
53:15:36:ef:c9:55:83:f5:ff:d4:77:89:86:99:f5:
b1:ef:57:88:77:4a:a9:5b:d0:c3:62:ca:27:52:80:
d9:8c:f9:a3:f7:b0:17:28:3e:2f:34:cf:a6:c9:90:
f7:a9:fd:49:a5:d3:c3:8c:c1:af:04:09:e2:44:bd:
2e:cf:2a:80:6b:e2:7d:2a:7f:99:d8:61:a8:6f:fb:
43:ac:c4:49:27:ee:3b:0c:e4:74:f7:74:45:98:75:
49:00:b3:37:92:01:30:38:ee:6b:01:64:82:89:8d:
cc:66:94:d7:00:5e:73:a9:70:f3:69:77:22:d0:1e:
1c:1e:b7:25:6c:5d:ae:81:67:b4:18:75:32:05:7d:
b2:6b:00:c8:1c:4b:51:f1:09:28:fc:ea:de:8c:2a:
6b:6f:fc:5a:f3:6e:c0:de:be:4f:3c:0b:3c:85:7f:
80:4b:a2:78:7c:f3:53:14:7c:45:4b:7d:16:4f:f9:
3b:ef:5f:40:71:2a:15:35:83:3c:fc:ef:ea:2a:46:
bc:77:12:fa:9d:d6:26:7e:b9:6e:36:79:4e:dd:43:
20:ab:61:8d:9b:c8:70:1b:ce:8f:6c:6b:da:3a:9f:
6c:00:25:bd:97:ff:21:45:d0:23:d3:d3:e4:da:be:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:9B:9B:4E:18:B9:2E:83:60:FA:82:F5:E5:03:D1:1C:96:60:84
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a7:96:05:3b:7f:6c:bb:dd:57:c8:a3:35:73:75:a3:55:1a:
0f:b9:5a:61:2f:a2:be:8d:dd:88:08:21:62:57:0b:bd:c8:31:
2b:6d:ca:ef:ee:9f:b3:40:6c:97:ec:70:ab:85:c0:21:49:5b:
70:42:df:fe:51:b5:b3:e4:81:d9:70:b0:a7:26:61:ff:6b:75:
ca:75:60:f0:49:cb:10:40:f0:a9:f0:b7:aa:6c:99:e4:d9:fe:
a9:15:2b:b2:00:a5:8d:7f:34:26:a7:4c:99:ed:12:08:06:15:
0c:2b:dd:8c:ac:dd:6c:9e:b8:74:21:22:6a:86:81:93:46:1a:
e6:b4:a8:dc:ba:d1:17:c3:8d:a8:dd:9d:a4:4b:cc:b2:61:ed:
51:48:8c:62:ad:00:ea:d0:a6:4d:d1:be:73:fb:3d:12:9f:99:
5e:89:5b:4a:85:fc:de:c9:e6:6e:56:60:0e:46:f4:6a:c7:c3:
a1:29:21:7f:c2:ee:a0:5a:14:a6:59:59:36:d5:11:63:e8:55:
e4:17:58:0c:03:56:89:db:df:07:d3:3e:30:92:ec:1c:1c:10:
3e:4b:34:aa:0d:c7:36:78:c7:82:a4:7f:2b:42:b0:9b:fc:28:
83:06:8c:db:12:e5:d3:c4:ee:73:12:8b:51:6e:10:20:a4:f2:
75:7f:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:59 2025 by rpki-client