Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: VUQtkF0yjY1DuCZRxVUF+5SGEHvnbvZtWjPtFpBGZfc=
Subject key identifier: 86:EF:02:FF:37:28:0A:4E:B3:19:E1:43:57:A8:17:F8:C5:E8:2D:81
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 0198D583A1E5151081FC7A20070DD510CD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: LfkFp3+W4P6W9KnvQPbWyUMSi7A2i5fiOHXXMaN5ZkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a1:e5:15:10:81:fc:7a:20:07:0d:d5:10:cd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=86ef02ff37280a4eb319e14357a817f8c5e82d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:07:4b:f5:8f:aa:06:be:e4:c6:36:76:20:
f9:f4:e1:64:38:bd:9c:87:e7:4a:65:5f:03:6a:34:
77:cd:3f:bc:75:47:c3:27:05:3a:5f:9e:2d:a7:8d:
cf:5b:ef:52:b4:e1:d0:5f:c4:b4:20:63:d2:25:d8:
90:37:aa:1d:95:d0:12:a8:e0:d1:e0:02:bc:5e:f5:
3f:3a:1e:c9:b4:2c:36:79:e0:7c:10:97:cd:e1:c8:
52:49:d8:37:41:af:5e:b2:d3:64:e3:c2:4c:d0:42:
5e:05:bf:0c:1e:0d:18:94:0c:67:64:27:7a:98:0d:
70:51:3f:7d:2c:a4:a1:0a:ae:13:10:32:65:8b:2e:
55:43:4b:da:72:f2:be:53:84:0f:96:38:eb:53:6b:
f4:f2:e9:57:f3:0f:9d:07:b0:21:e0:2e:08:65:53:
75:d7:22:8e:d2:bc:2b:24:87:73:9c:cb:01:94:95:
d7:87:1f:4c:93:e4:ba:30:00:76:e3:a0:78:7d:5c:
35:e7:d4:70:9e:6b:e1:01:e5:0e:d6:9a:b1:f3:0c:
d2:b0:c4:09:7d:ca:ce:c9:4e:5a:1a:da:b8:60:75:
fc:90:09:1c:40:ea:86:85:66:14:c5:be:df:62:99:
df:3e:b4:2e:59:a0:49:4b:65:b7:2b:ae:f5:27:11:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:02:FF:37:28:0A:4E:B3:19:E1:43:57:A8:17:F8:C5:E8:2D:81
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:06:87:13:79:6f:35:39:d7:75:c9:1f:8e:67:08:32:ae:f4:
cc:86:46:eb:3b:fa:74:ca:6a:9a:6c:02:a4:62:c6:d3:7a:cb:
b4:08:7e:6d:c7:cd:42:4b:46:11:63:da:12:c4:30:34:0d:e8:
34:f4:d4:18:54:66:2c:ea:c6:89:f9:e7:0d:82:de:f3:31:7e:
a4:3b:1b:c7:d9:6b:e4:5a:cf:d9:3b:7f:d1:c6:73:ac:82:06:
ef:6d:cc:1d:fd:4a:3e:1c:c4:b9:b5:ec:8e:e8:56:cf:f0:94:
82:24:2a:5e:44:5d:9d:38:f0:8e:02:be:26:9d:32:82:20:f2:
35:63:d2:c2:a6:c2:47:dc:62:71:74:bd:f2:7a:b6:41:77:40:
33:13:fd:c2:a6:e1:71:65:9a:d1:ad:40:1a:bd:ea:9c:9d:54:
af:53:f2:ea:99:a6:86:0e:fa:16:72:54:51:0f:f1:f6:e7:54:
3f:b6:e0:b2:72:6c:42:f9:9f:db:c3:03:22:f8:dc:a7:0d:e3:
d0:2e:8a:f8:1b:d5:e0:bc:e1:d1:61:73:4c:46:9b:a7:6b:b6:
51:1c:e1:e7:25:d1:3f:d5:ad:66:c7:2c:59:20:a6:01:2b:93:
78:6d:f4:83:ea:16:69:0f:28:fd:bd:4f:2b:db:44:28:6f:7c:
3e:d4:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:13 2025 by rpki-client