Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: TGvLlYNYgEgysbK+tasTqjn1bIceDP9cTKEaW1C6+XE=
Subject key identifier: B6:16:F5:32:97:FD:29:0B:60:20:E3:C6:1B:97:F7:58:EE:07:C0:BD
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 01976C61DEBC12D12F9877F8DA85C9FCF8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 03:00:42 +0000
Manifest this update: Sat 14 Jun 2025 03:00:42 +0000
Manifest next update: Sun 15 Jun 2025 03:00:42 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: H4ppcunixY8k8Kq8O1O9Fn+c43HbiMSUt7XPy1Vlycc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:de:bc:12:d1:2f:98:77:f8:da:85:c9:fc:f8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jun 14 03:00:42 2025 GMT
Not After : Jun 15 03:00:42 2025 GMT
Subject: CN=b616f53297fd290b6020e3c61b97f758ee07c0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:3e:1b:74:49:5a:0e:d9:d0:2f:0f:24:90:
40:4a:88:89:44:55:ee:ee:46:0a:dd:ea:64:b4:1b:
e3:d6:ee:17:34:57:8e:30:5b:b7:18:26:d5:6f:c0:
e2:b6:75:39:e1:84:6e:02:a4:d3:e5:18:24:b7:3d:
0d:9c:0c:93:bb:62:48:49:73:3f:7f:44:5d:e8:1a:
24:0b:09:57:0c:29:67:34:c2:6c:fb:2a:d9:9f:87:
72:4d:ff:32:90:37:a7:7d:d1:36:d5:89:86:d9:1c:
00:2b:0c:a0:42:9a:12:51:b0:82:64:8d:38:51:41:
28:55:14:39:93:05:02:65:b8:3a:af:d2:0e:20:a0:
26:33:ca:78:1c:af:d9:16:b9:fd:38:93:d1:a1:78:
10:d3:96:59:b1:72:63:08:54:11:42:33:c6:bb:3b:
06:5d:b2:cf:a2:f2:4e:c9:6b:6b:d1:a8:57:21:fc:
52:75:c4:0a:c1:7b:94:93:96:e5:d7:af:c2:6c:be:
62:f8:56:6e:19:a1:89:86:13:89:1c:95:1a:77:f7:
72:c1:77:25:c3:12:78:be:30:e4:9f:65:d3:18:f0:
fa:fa:07:c6:8f:23:cf:2e:42:64:1d:22:6b:d0:49:
fb:db:53:3e:3f:5f:60:ec:de:e3:8e:d9:ef:f7:27:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:16:F5:32:97:FD:29:0B:60:20:E3:C6:1B:97:F7:58:EE:07:C0:BD
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ae:ec:42:5a:4f:8f:78:70:f3:38:0b:80:6d:26:33:71:9f:
37:1e:f4:66:32:96:6b:ca:21:7f:f7:85:d2:19:07:16:ae:45:
f4:d6:37:c6:73:27:4a:06:6d:94:6c:69:7e:17:1f:e7:f7:ff:
0c:44:46:ce:0c:e6:6d:dc:1b:87:4d:f2:9a:4e:39:58:ef:f3:
22:cd:83:4c:d9:98:97:10:ff:71:1b:5e:7e:60:55:29:9f:17:
d3:07:75:9a:63:c7:b9:47:a8:86:1a:a0:87:d7:06:a7:d5:6b:
f1:f0:82:53:8c:ce:21:b4:bb:a6:aa:5d:94:7d:90:44:9f:7e:
4c:50:f5:81:00:7a:e5:80:8b:0a:f3:75:18:f5:58:87:30:e7:
e4:0b:c3:52:dc:7f:b4:66:4b:06:25:fd:ed:fe:5e:52:45:41:
f6:17:80:f2:99:c9:76:ed:3b:8d:11:7c:f0:86:c1:02:81:b6:
51:50:cc:9a:de:e8:ad:f0:5b:14:02:20:22:e9:47:59:67:17:
c9:d0:24:ac:15:77:bd:d6:87:dd:a5:26:5a:79:98:05:c8:c1:
92:63:3e:14:d6:8d:f7:ea:ae:66:ba:9f:b4:7e:ac:f5:93:a5:
49:d2:92:e3:84:f2:4e:41:ff:19:b8:58:eb:89:cf:a0:80:12:
38:be:05:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYd68EtEvmHf42oXJ/PjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMDBhMTY5YzhlNjk2Y2ExNjliNTk5YzdhMTcxMTkzZmZm
MDZkMmEwHhcNMjUwNjE0MDMwMDQyWhcNMjUwNjE1MDMwMDQyWjAzMTEwLwYDVQQD
EyhiNjE2ZjUzMjk3ZmQyOTBiNjAyMGUzYzYxYjk3Zjc1OGVlMDdjMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIM+G3RJWg7Z0C8PJJBASoiJRFXu
7kYK3epktBvj1u4XNFeOMFu3GCbVb8DitnU54YRuAqTT5Rgktz0NnAyTu2JISXM/
f0Rd6BokCwlXDClnNMJs+yrZn4dyTf8ykDenfdE21YmG2RwAKwygQpoSUbCCZI04
UUEoVRQ5kwUCZbg6r9IOIKAmM8p4HK/ZFrn9OJPRoXgQ05ZZsXJjCFQRQjPGuzsG
XbLPovJOyWtr0ahXIfxSdcQKwXuUk5bl16/CbL5i+FZuGaGJhhOJHJUad/dywXcl
wxJ4vjDkn2XTGPD6+gfGjyPPLkJkHSJr0En721M+P19g7N7jjtnv9yeH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYW9TKX/SkLYCDjxhuX91juB8C9MB8GA1UdIwQY
MBaAFAEAoWnI5pbKFptZnHoXEZP/8G0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYt
YjU2NmFlYjk1ZjkzLzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYtYjU2NmFlYjk1Zjkz
LzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa7sQlpP
j3hw8zgLgG0mM3GfNx70ZjKWa8ohf/eF0hkHFq5F9NY3xnMnSgZtlGxpfhcf5/f/
DERGzgzmbdwbh03ymk45WO/zIs2DTNmYlxD/cRtefmBVKZ8X0wd1mmPHuUeohhqg
h9cGp9Vr8fCCU4zOIbS7pqpdlH2QRJ9+TFD1gQB65YCLCvN1GPVYhzDn5AvDUtx/
tGZLBiX97f5eUkVB9heA8pnJdu07jRF88IbBAoG2UVDMmt7orfBbFAIgIulHWWcX
ydAkrBV3vdaH3aUmWnmYBcjBkmM+FNaN9+quZrqftH6s9ZOlSdKS44TyTkH/GbhY
64nPoIASOL4FhA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:12:09 2025 by rpki-client