Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: dab6OCTZwx0KHKErRzS+eO404R8j/an1/Nv5+eNiTlU=
Subject key identifier: 05:B1:82:BB:F5:8D:28:F6:D3:2F:11:11:F5:03:F3:E1:A6:FC:4A:C8
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 019922C35297FD9D80E8010B46170B56E894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: wXsUKZ06i1mu9w9EqAU9C+WdlAWkcCjYXhaqbGmLb3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:52:97:fd:9d:80:e8:01:0b:46:17:0b:56:e8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=05b182bbf58d28f6d32f1111f503f3e1a6fc4ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:4d:d5:98:61:ba:60:42:fc:e5:bf:b6:18:
15:2e:d8:97:98:32:52:85:1f:a9:b8:10:b9:ec:50:
75:9e:67:0f:59:d7:b6:fc:38:4c:5e:bc:a1:a0:7d:
9a:1c:f9:95:43:54:ab:fe:f5:20:30:43:07:c2:83:
fd:85:5f:84:fa:b8:9b:95:cf:53:f5:b1:7c:63:90:
be:cd:6a:7b:cb:8b:e3:ad:b0:72:84:62:60:a1:05:
91:0b:09:fe:21:7e:15:42:4e:de:47:eb:26:38:73:
44:92:d3:de:bd:12:27:80:dd:b3:c2:f6:46:1a:e8:
5d:e9:2b:2a:f5:8f:37:be:77:04:70:a3:7e:25:cf:
d8:e6:ce:c4:65:e6:4b:85:72:73:bc:36:18:d6:ca:
4f:fd:3f:1a:b6:ee:cb:4e:e2:50:b1:8e:69:55:72:
0d:7c:de:0b:84:c1:94:c2:08:7b:cf:56:44:ef:88:
b3:51:4e:3e:20:26:f7:67:05:20:28:81:a9:11:8b:
99:9e:c5:f0:ac:7b:f0:cf:ef:d1:07:65:54:86:ef:
60:59:03:c6:15:b9:50:89:4c:a2:63:ba:bb:88:a4:
3b:0f:00:dd:0a:75:3b:af:77:6c:11:2a:32:42:71:
f6:ad:ae:9c:7a:91:10:6b:8d:84:c5:65:2c:af:3f:
f9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B1:82:BB:F5:8D:28:F6:D3:2F:11:11:F5:03:F3:E1:A6:FC:4A:C8
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:60:fe:7f:d6:1e:0b:cd:5a:4d:42:4a:9f:03:90:89:fe:
79:ec:22:d1:98:88:90:26:54:a5:91:ed:e1:ea:b2:70:de:e1:
7d:89:0e:a9:58:c5:b0:2f:fc:f3:3a:98:a2:2f:17:f1:a1:0d:
d8:cf:a6:b7:eb:02:93:75:c9:0d:d4:a9:29:32:10:0c:31:73:
f1:96:63:c3:41:a3:96:f9:91:71:8d:5e:14:b1:a3:a1:04:31:
3b:29:5f:e8:74:b0:ad:46:8c:f7:14:78:59:2b:bf:99:c7:35:
ab:a1:13:0f:d0:ac:c4:ac:3f:0d:92:66:bb:5b:75:14:90:79:
77:42:e7:55:38:94:ab:d6:dd:7a:8d:82:7a:1d:d9:51:5f:de:
64:9d:fd:7d:d1:7a:5f:22:49:41:06:50:5f:ad:92:95:1c:ed:
44:24:87:c3:85:c8:23:1d:40:f4:20:4f:d3:10:ed:97:3f:91:
f6:d3:53:f8:c4:55:9f:58:9e:ee:dd:3e:61:9d:a1:47:8d:89:
e9:00:77:a4:66:ae:67:4c:80:fb:13:2a:62:41:c6:3c:b7:fc:
fb:a8:24:c8:80:29:9c:4f:ee:f9:1e:49:ed:00:6a:32:d8:6c:
ad:96:ae:41:d8:e9:e3:79:5d:20:a1:e4:fc:f4:b3:2b:54:b8:
17:1c:41:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw1KX/Z2A6AELRhcLVuiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMDBhMTY5YzhlNjk2Y2ExNjliNTk5YzdhMTcxMTkzZmZm
MDZkMmEwHhcNMjUwOTA3MDYwMDQ5WhcNMjUwOTA4MDYwMDQ5WjAzMTEwLwYDVQQD
EygwNWIxODJiYmY1OGQyOGY2ZDMyZjExMTFmNTAzZjNlMWE2ZmM0YWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslVN1ZhhumBC/OW/thgVLtiXmDJS
hR+puBC57FB1nmcPWde2/DhMXryhoH2aHPmVQ1Sr/vUgMEMHwoP9hV+E+riblc9T
9bF8Y5C+zWp7y4vjrbByhGJgoQWRCwn+IX4VQk7eR+smOHNEktPevRIngN2zwvZG
Guhd6Ssq9Y83vncEcKN+Jc/Y5s7EZeZLhXJzvDYY1spP/T8atu7LTuJQsY5pVXIN
fN4LhMGUwgh7z1ZE74izUU4+ICb3ZwUgKIGpEYuZnsXwrHvwz+/RB2VUhu9gWQPG
FblQiUyiY7q7iKQ7DwDdCnU7r3dsESoyQnH2ra6cepEQa42ExWUsrz/5QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWxgrv1jSj20y8REfUD8+Gm/ErIMB8GA1UdIwQY
MBaAFAEAoWnI5pbKFptZnHoXEZP/8G0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYt
YjU2NmFlYjk1ZjkzLzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80NmM5NWMtN2YyMS00Y2M3LThlOGYtYjU2NmFlYjk1Zjkz
LzEvQVFDaGFjam1sc29XbTFtY2VoY1JrX193YlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9Ng/n/W
HgvNWk1CSp8DkIn+eewi0ZiIkCZUpZHt4eqycN7hfYkOqVjFsC/88zqYoi8X8aEN
2M+mt+sCk3XJDdSpKTIQDDFz8ZZjw0GjlvmRcY1eFLGjoQQxOylf6HSwrUaM9xR4
WSu/mcc1q6ETD9CsxKw/DZJmu1t1FJB5d0LnVTiUq9bdeo2Ceh3ZUV/eZJ39fdF6
XyJJQQZQX62SlRztRCSHw4XIIx1A9CBP0xDtlz+R9tNT+MRVn1ie7t0+YZ2hR42J
6QB3pGauZ0yA+xMqYkHGPLf8+6gkyIApnE/u+R5J7QBqMthsrZauQdjp43ldIKHk
/PSzK1S4FxxBlg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:13 2025 by rpki-client