Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: TfMnWJpfp89Kehhq2GsGPu4lGcrNY5zWphBWuFwOaPI=
Subject key identifier: AB:7D:3F:A5:53:2B:F7:07:5C:4C:55:A4:5E:57:8D:B6:63:2E:3E:C6
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 23F25BC689E189B657F18C4075605A33DEBA5E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 026D
Signing time: Tue 04 Nov 2025 13:34:30 +0000
Manifest this update: Tue 04 Nov 2025 13:29:30 +0000
Manifest next update: Wed 05 Nov 2025 17:31:30 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: 2exk0xz098itUGyGVDzK1mo2B19YJiUzbD3zrsrL4A8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f2:5b:c6:89:e1:89:b6:57:f1:8c:40:75:60:5a:33:de:ba:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Nov 4 13:29:30 2025 GMT
Not After : Nov 5 17:31:30 2025 GMT
Subject: CN=AB7D3FA5532BF7075C4C55A45E578DB6632E3EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:88:81:31:21:4c:3e:84:8e:04:66:47:36:
4d:71:db:b9:87:eb:40:dc:f2:90:d9:f3:be:53:cd:
fd:ee:32:49:62:79:92:96:be:4c:f3:94:1a:5e:93:
96:dd:13:9f:61:7e:e6:ca:6b:3a:25:97:df:bf:a6:
13:cf:ee:84:b3:62:90:11:92:ed:bc:e7:b4:b1:2b:
43:77:2f:a2:e9:ce:6b:13:d5:bd:64:c9:8e:70:4e:
95:e7:49:36:9b:c3:72:11:52:7a:b2:cb:c5:b2:7d:
6e:d6:e2:f3:06:2a:41:52:5f:d9:6b:45:9d:d7:88:
be:6e:c1:48:ff:e0:17:36:c2:25:22:29:2d:8e:65:
9a:15:d7:00:5a:e1:df:c1:44:17:5c:8c:99:ce:28:
6a:58:45:7b:8e:2d:94:52:9a:7b:5d:c6:2b:72:44:
d7:de:a4:bb:bb:ad:06:64:37:60:40:6d:ff:b3:d2:
dc:39:e6:53:b5:e5:08:4b:14:4f:62:5f:7e:11:f1:
1a:ed:18:c0:78:b8:bf:d9:db:8f:8c:dd:1a:0a:34:
c4:9a:dd:4d:45:77:98:47:13:b0:fe:7e:be:f3:8d:
79:60:8c:b6:b3:ad:d2:c1:36:b4:0d:b7:1a:bb:29:
ad:8c:cd:20:c7:22:13:9e:2c:5d:7b:38:61:c7:71:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:3F:A5:53:2B:F7:07:5C:4C:55:A4:5E:57:8D:B6:63:2E:3E:C6
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0a:0f:a6:52:28:35:49:e8:71:ab:04:d5:21:36:01:19:1b:
97:11:32:34:c3:0f:2f:9b:34:ea:a4:c6:40:f2:c6:14:22:66:
cd:de:8d:2e:8d:ff:ce:31:3c:4f:94:1a:7d:d6:73:f6:fc:69:
b8:3a:39:30:dc:8c:ca:e5:6e:33:4d:68:28:fb:f4:f9:3f:de:
a1:c3:9c:26:3d:58:36:24:72:ba:ad:09:30:af:a8:78:d3:25:
3d:f2:02:3b:40:09:ed:31:eb:6f:44:a2:e1:f2:80:7e:a5:8b:
54:93:cc:df:87:c4:53:d2:4d:67:4e:85:19:2e:17:47:20:0b:
7d:4c:f6:d2:48:39:b5:ec:d9:c6:ce:91:b4:3e:8b:d8:3e:0d:
47:ad:a6:30:b2:d8:13:51:42:ed:41:45:83:33:16:e5:e4:1e:
98:f0:65:85:c7:f8:3c:04:9c:3c:ed:5a:cf:93:64:40:21:64:
56:88:cb:b6:90:e4:0e:47:2b:8e:4c:0f:31:de:7f:32:b9:6e:
73:b3:70:bf:32:70:05:a2:d1:18:f6:c1:d6:72:0c:84:af:0c:
b2:4c:6c:94:02:c2:4a:66:1c:63:72:bc:4e:b9:8d:12:35:b7:
e2:6f:d8:96:1e:64:79:f7:7a:86:a4:c0:b7:00:6f:2a:62:8c:
84:93:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:12 2025 by rpki-client