Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: QBA8tyCRoFtJODko6BXwLvRwZ9pH53qcbOQX6UZN368=
Subject key identifier: 39:54:1B:1D:A6:B9:BD:F6:BF:17:34:CA:92:0D:0F:4F:10:4B:9F:46
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 0197B5C52427518D2881FB807212DA779F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:01:25 +0000
Manifest this update: Sat 28 Jun 2025 09:01:25 +0000
Manifest next update: Sun 29 Jun 2025 09:01:25 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: VrFIhv0FBMp34iTUggconZmcU74I+ApvgrEEu2v0a5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:24:27:51:8d:28:81:fb:80:72:12:da:77:9f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jun 28 09:01:25 2025 GMT
Not After : Jun 29 09:01:25 2025 GMT
Subject: CN=39541b1da6b9bdf6bf1734ca920d0f4f104b9f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:2b:79:ce:3d:b7:99:64:24:4e:68:ea:bc:
94:8f:f9:6d:a6:98:1e:bb:8f:a9:7a:8c:53:61:e2:
91:2a:15:40:bd:15:f9:6c:1e:0f:60:63:bb:6f:2d:
fe:62:1c:ef:4a:c5:ff:09:f0:f9:5c:8a:7e:8e:c0:
8f:1b:3b:cb:e0:5b:34:16:bd:4b:65:49:ad:a1:71:
f0:3d:bd:5f:52:ec:5e:fe:98:5d:32:d0:d6:1b:5e:
18:e9:2c:97:08:6a:bd:cf:aa:ca:65:92:81:e4:6c:
ff:67:79:6a:13:09:3e:da:9f:6a:da:bd:1f:dd:5b:
d3:40:9e:e3:c2:c0:b5:49:93:d4:be:49:37:92:99:
08:1a:55:c1:5a:11:e3:d9:01:a3:c0:46:0a:63:da:
8e:09:55:21:29:e0:09:23:47:4b:2f:81:ea:af:13:
86:4f:9f:0f:1f:e2:51:35:3a:6a:cb:0d:48:71:c3:
9c:61:b0:65:eb:cd:7a:9f:fb:55:d2:21:3c:d0:7e:
84:47:a8:41:17:59:14:54:b6:c0:3a:b8:59:01:28:
6f:b9:cd:e2:a1:fc:20:5e:17:20:62:30:82:bd:36:
3d:2d:66:44:51:18:89:d0:c8:85:4e:9d:25:8b:65:
44:eb:27:57:b1:bd:ac:d6:3f:ec:cd:36:01:f5:58:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:1B:1D:A6:B9:BD:F6:BF:17:34:CA:92:0D:0F:4F:10:4B:9F:46
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:aa:fe:f3:fb:d8:47:79:b3:f8:f7:d3:45:d5:b7:4f:4e:50:
6f:15:27:53:06:0f:ab:28:0b:cc:c7:86:9a:71:8b:70:bb:f7:
58:a4:3a:55:35:8c:de:23:b1:84:27:f7:5d:09:cf:af:47:74:
f3:cc:9b:16:20:f7:88:f8:b9:4d:88:33:2d:ca:0a:61:5f:9b:
41:2f:e3:c7:be:dc:aa:bb:70:70:6e:72:4e:ac:68:5b:18:29:
f9:94:e9:e7:0a:1e:03:fb:05:41:a4:99:e8:f7:58:32:46:85:
bf:08:6e:f8:16:52:14:b5:4a:c3:d0:fc:39:0c:d6:06:d7:1f:
c5:f6:24:ac:c5:d4:00:49:b5:2b:a1:fd:79:c1:05:8a:02:cb:
10:f4:10:b9:3d:0c:60:d2:29:0a:f5:98:c7:dd:09:04:9c:dc:
0a:e3:28:e9:84:a8:90:86:b0:27:e5:dd:73:83:aa:1f:78:c0:
f2:23:1a:87:92:d4:7e:c2:d5:c5:ae:82:c4:8b:48:2b:9a:b7:
a3:07:21:d9:1f:6a:a8:02:9b:1f:78:33:a5:9f:c8:b3:bc:97:
d3:99:a7:c2:ee:3b:95:b9:df:5a:5e:01:1c:2c:7f:c5:26:16:
9e:c9:3e:de:78:6c:51:00:ac:89:a2:e2:71:fd:54:de:56:f6:
d3:95:fa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:52 2025 by rpki-client