Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: yMrbUfNfEneiK7AR8iB31ceqa7eR1k71gaK+uTrYXDQ=
Subject key identifier: 90:5C:83:CD:B9:40:BC:01:0A:86:80:E8:AD:D3:72:B4:70:7F:67:7D
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 0158714630952DB00D0D86BA1B4117AF9BBBA74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 02F1
Signing time: Thu 26 Feb 2026 21:51:13 +0000
Manifest this update: Thu 26 Feb 2026 21:46:11 +0000
Manifest next update: Sat 28 Feb 2026 01:29:11 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: HfQr3U1B5xeo06wkMliN7WjZUgAimyqdFsZF4vYyVT8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:58:71:46:30:95:2d:b0:0d:0d:86:ba:1b:41:17:af:9b:bb:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Feb 26 21:46:11 2026 GMT
Not After : Feb 28 01:29:11 2026 GMT
Subject: CN=905C83CDB940BC010A8680E8ADD372B4707F677D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:7a:70:5c:c3:e5:c1:9e:23:b1:85:74:43:
ef:ff:7c:a4:b6:31:32:f8:f6:b2:bc:82:38:a5:d6:
a8:d0:3c:a2:ff:36:03:00:8e:ff:21:16:6e:15:31:
ea:aa:9e:d4:cb:f0:95:a5:ed:e9:f4:1f:6c:20:3a:
a0:ee:4a:ee:74:3a:0d:e7:b8:51:19:8c:7e:44:e8:
ca:ca:a4:5a:68:8c:e7:dd:9c:a3:b4:e2:0b:88:63:
d1:46:34:6e:46:eb:16:59:1a:8b:9f:2f:d3:d1:59:
86:5c:23:0d:e6:1a:0f:21:92:d5:85:8c:3b:5f:7e:
e6:57:54:e6:34:c9:12:1b:27:4a:a6:3b:b8:bf:91:
62:34:55:66:52:47:08:75:ab:80:f5:b3:fa:b3:f1:
2e:e6:7b:26:c5:c0:27:a0:09:3f:cc:51:24:23:41:
f5:16:dd:b3:40:fe:8d:fc:10:10:2e:be:60:a6:04:
26:c6:94:23:e9:5f:e3:49:61:8b:e6:d1:69:a2:ba:
68:da:d1:6f:cb:fd:17:55:c4:30:fa:13:e3:4c:a1:
61:6d:a8:d9:e4:de:25:22:5a:9c:5d:d5:63:fa:5e:
5e:e8:26:10:d7:62:68:a7:38:71:0b:a7:d7:e8:36:
11:53:77:5a:49:a5:0e:30:88:42:6b:b1:ec:e6:e7:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5C:83:CD:B9:40:BC:01:0A:86:80:E8:AD:D3:72:B4:70:7F:67:7D
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:73:77:13:18:ad:a2:f5:dc:72:f7:80:bb:c7:f8:b3:20:28:
aa:56:23:59:a7:7b:f3:6c:1d:7d:6c:2b:98:97:a4:b8:04:04:
77:e5:58:29:e4:14:7e:0f:45:7c:7c:23:bc:5e:ec:a5:dd:22:
f7:f9:2f:14:15:b4:40:88:9c:23:df:08:5b:59:29:27:0c:e6:
b8:25:48:52:17:d5:f6:24:29:c4:4f:53:10:50:f5:5b:7a:45:
96:ed:6d:9b:ba:62:68:1a:4c:ff:a9:5d:0f:1c:c8:13:8a:e6:
4b:24:d0:42:26:cc:33:eb:59:b7:b9:3b:45:1c:d6:9a:b7:ed:
47:db:26:c0:e5:40:14:76:72:6d:01:09:c2:95:5e:95:b6:7b:
73:99:a8:be:cc:45:ee:2d:95:d3:de:d8:41:18:7d:2b:b0:4c:
2b:89:26:09:3d:38:4e:76:95:35:99:8a:29:bd:ae:c0:4d:27:
cd:55:92:d2:79:55:15:e4:31:9c:24:62:28:be:23:af:4b:ac:
60:29:e3:c9:6e:cc:4c:94:c7:53:38:08:04:99:ae:7d:63:ee:
d1:d1:7a:91:10:be:f9:1b:0b:43:a9:5a:d8:72:ac:17:1d:a6:
93:df:53:63:ee:72:f4:04:b0:e8:59:e0:e1:ab:4a:a5:e3:e7:
e7:ca:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:32 2026 by rpki-client