
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: xJGlh+wwxPyiQ9DKRvBnEryyQ45O4N6LrJavGcwlpfI=
Subject key identifier: 50:BC:04:27:7E:78:8A:FB:16:4A:53:E5:3B:58:AD:E7:16:FF:59:8D
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 0196C27004A540A41714A2AF5351B5B8252B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 03:00:43 +0000
Manifest this update: Mon 12 May 2025 03:00:43 +0000
Manifest next update: Tue 13 May 2025 03:00:43 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: q6Rxn+TLVwLoisWnGvb0fJwD8rhiqiF9tn+083srArk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:04:a5:40:a4:17:14:a2:af:53:51:b5:b8:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: May 12 03:00:43 2025 GMT
Not After : May 13 03:00:43 2025 GMT
Subject: CN=50bc04277e788afb164a53e53b58ade716ff598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:24:7a:24:da:83:fd:35:1f:d3:c4:c0:e0:
81:58:df:ca:b7:96:10:6d:5e:71:2f:7c:d2:4b:a7:
3a:80:f0:80:d2:77:a1:34:19:59:27:29:e1:f4:09:
60:91:fa:29:fc:07:c1:f4:54:5b:53:d6:c1:91:f1:
08:ec:72:e7:11:fc:46:d4:ec:ef:b5:6b:68:86:27:
b3:1a:5f:4e:4d:4e:03:c3:35:d8:c2:0c:5a:09:0d:
db:ce:d4:82:49:e2:22:1f:46:d7:4c:33:17:3e:2c:
90:95:3d:e5:14:2f:7b:8b:62:5b:f7:9f:84:63:c8:
81:99:99:56:14:7d:00:49:57:74:94:38:4b:67:f0:
06:31:b2:f8:63:99:a2:e9:d0:62:af:31:9a:12:df:
2e:58:c4:83:f0:56:ee:f5:a2:ff:e1:60:f1:1f:9c:
dd:1a:3d:2d:0e:7b:9c:f8:e5:6b:d0:a8:62:ff:65:
9f:c7:66:2b:69:ac:a9:7a:ee:89:a4:b6:f9:a3:da:
cc:f1:86:c2:76:68:e0:be:0f:9b:57:b7:d3:78:b5:
79:a3:10:23:e0:46:66:88:fc:01:63:a7:b2:61:95:
4f:e0:17:0e:06:f2:47:24:d5:50:b5:d1:39:71:97:
f3:04:55:c0:ea:a1:1e:f2:04:f1:52:7b:93:71:75:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:04:27:7E:78:8A:FB:16:4A:53:E5:3B:58:AD:E7:16:FF:59:8D
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:df:bc:1f:58:b9:77:fe:a2:41:30:c2:0a:e5:19:2d:3a:
5e:f7:e7:46:fb:ca:d4:a1:55:fe:0d:54:ed:17:f9:99:51:f1:
85:b0:3f:bd:c3:0e:e2:9a:bb:3f:6c:8a:36:37:b0:d0:74:e9:
7f:9d:e5:94:15:6c:e8:c8:00:24:be:9c:06:2d:ed:ee:f3:cb:
ce:f3:f5:f5:73:3c:29:6c:02:be:6c:21:39:22:60:77:2e:9d:
eb:06:5c:95:6b:a7:98:60:6d:2f:33:99:2d:84:86:f7:ed:e8:
99:1d:db:f7:50:3e:53:27:15:1a:ad:27:29:2b:47:3c:d4:7a:
db:76:11:23:12:7f:80:fc:e4:c6:34:e8:b3:6b:ba:e0:bb:91:
fe:dc:45:2d:b4:be:72:a5:66:87:9d:f1:79:d3:6a:a1:49:53:
c3:11:41:5c:5f:33:2e:fe:3e:82:47:ce:0f:c4:f0:3c:a6:f6:
42:40:d4:98:66:93:d0:b0:a0:7c:c5:f9:0d:6f:81:07:15:fd:
ac:03:09:19:8b:13:c3:0f:85:cb:45:9a:86:ca:6a:ca:b7:eb:
7a:19:33:de:38:1b:c7:e5:c5:47:b3:b2:83:c6:bf:38:58:a0:
50:23:0b:5d:b1:10:4e:dc:6e:66:44:73:4c:57:89:0c:30:a0:
36:a2:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:42:36 2025 by rpki-client