Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
File: AQChacjmlsoWm1mcehcRk__wbSo.mft (raw, json)
Hash identifier: grLfWK+By736ExeudBnBcAcLt5Bbz2scuylkowPnOIA=
Subject key identifier: 69:BA:09:CD:81:F1:55:8F:BD:CD:C6:7B:33:23:9D:BE:54:8C:D9:AD
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 019B1125B9E2DECEB3BE1077F6E87996177A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
Manifest number: 1773
Signing time: Fri 12 Dec 2025 06:00:43 +0000
Manifest this update: Fri 12 Dec 2025 06:00:43 +0000
Manifest next update: Sat 13 Dec 2025 06:00:43 +0000
Files and hashes: 1: AQChacjmlsoWm1mcehcRk__wbSo.crl (hash: A7XjVCxbCh4MztGD8qDpoKHxj9CE1rfcjVF0/jtRmXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:11:25:b9:e2:de:ce:b3:be:10:77:f6:e8:79:96:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Dec 12 06:00:43 2025 GMT
Not After : Dec 13 06:00:43 2025 GMT
Subject: CN=69ba09cd81f1558fbdcdc67b33239dbe548cd9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:30:58:7b:d5:91:d9:1b:a0:20:77:97:86:
b3:a9:20:31:0d:7d:69:8d:9b:c5:72:12:2f:d6:e9:
87:05:9b:88:ef:68:0b:78:91:5e:c1:e8:a3:31:db:
84:aa:b5:4e:06:20:b1:e6:98:2b:1e:90:c1:15:df:
6c:31:69:da:f0:af:5b:f4:55:db:20:43:2e:d5:f2:
43:7c:9d:3a:9f:26:9e:31:75:d1:c5:0e:8a:08:04:
44:9b:1b:7e:b9:0f:eb:7f:06:b5:64:ab:37:94:60:
6f:26:b2:c6:4d:96:7e:6e:52:b5:57:0e:e7:23:b6:
60:cf:e7:88:8a:47:16:a9:6a:2b:be:cc:58:f6:5d:
f4:fe:07:3f:8f:2e:8c:e6:ce:9a:7a:c3:32:7f:1d:
02:c6:23:1c:fc:af:d5:28:f5:91:e4:ff:d7:0c:49:
2a:98:26:81:72:8e:d1:c4:b3:8f:34:b7:7f:c1:3e:
5d:2c:7f:19:04:29:16:f3:54:cf:2a:88:2c:58:0b:
12:b7:40:d0:d2:74:74:74:24:8c:69:6c:87:04:29:
29:92:50:66:7e:52:01:8b:6e:4f:e3:8d:7a:24:04:
93:b3:e5:60:5b:be:26:06:a0:32:bd:96:88:8f:62:
21:e9:21:d3:f0:6e:b0:0b:5e:fb:b8:c2:fe:f5:6c:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:09:CD:81:F1:55:8F:BD:CD:C6:7B:33:23:9D:BE:54:8C:D9:AD
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ed:79:ae:77:da:6f:7c:ff:93:60:20:98:4b:33:47:1f:7b:
97:bb:69:1f:10:c6:4f:ca:3f:fb:bf:83:7a:28:56:48:2a:06:
a5:f2:31:74:d2:17:25:91:5f:99:a5:37:81:72:26:4a:b5:96:
0b:01:50:74:44:b9:8c:e7:9e:78:cf:f8:91:0a:16:25:bd:0b:
17:58:d9:74:f2:85:df:c3:22:99:e9:c2:6d:06:98:c7:f4:a9:
3d:ed:bf:8c:78:ee:4d:f0:6f:f7:5e:9e:12:39:08:0d:8d:c9:
03:01:7a:86:33:2f:6e:fb:de:f2:63:a6:cd:cc:50:93:bc:bc:
38:67:26:55:e3:b9:40:e1:26:16:4f:8d:91:28:f5:02:a1:6e:
58:23:e4:93:a6:9d:fd:7a:8d:20:bd:eb:11:67:0b:8b:31:22:
22:8c:66:31:c4:c5:1e:d7:2a:ee:af:01:2a:c9:00:7d:31:ae:
5a:64:07:a5:e9:f9:98:53:05:29:62:12:1c:05:f4:58:49:82:
e8:e5:81:cf:6f:10:3d:94:1f:f6:8f:f7:4b:dd:17:b7:bd:3e:
97:68:4c:30:d1:0c:0c:e2:a9:e2:d6:1c:76:ea:32:eb:22:b9:
85:f0:eb:50:c9:95:a4:bf:4a:0b:14:21:61:58:12:3f:8f:a8:
07:e3:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 02:08:33 2026 by rpki-client