
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier: mKACQF0kRl18UdDjHcQ54encakDQkICDrfcycX1Ek+8=
Subject key identifier: 4F:89:89:B4:9B:13:D6:38:17:86:CB:44:60:71:EA:07:47:5A:FD:52
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial: 1F5E65AAD1809BC0741EDCD544586C3236EFFD90
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number: 026E
Signing time: Wed 05 Nov 2025 00:19:31 +0000
Manifest this update: Wed 05 Nov 2025 00:14:31 +0000
Manifest next update: Thu 06 Nov 2025 03:27:31 +0000
Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: z+p/Is7wjKjUYLYMoWEVPTiqsDZZN0Qg7+F7KqnkgxQ=)
2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5e:65:aa:d1:80:9b:c0:74:1e:dc:d5:44:58:6c:32:36:ef:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Validity
Not Before: Nov 5 00:14:31 2025 GMT
Not After : Nov 6 03:27:31 2025 GMT
Subject: CN=4F8989B49B13D6381786CB446071EA07475AFD52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:f4:0d:8c:a7:b2:dd:44:82:9d:20:2a:0d:
53:21:26:fd:c0:64:8d:5b:9c:06:eb:6f:fa:94:3c:
62:fb:36:c4:86:04:e7:c5:e6:40:9b:d7:40:91:32:
b1:b4:16:f8:b7:9e:91:49:3f:ef:cc:df:86:ab:d5:
61:06:9b:57:c6:93:77:e7:ee:0e:ba:23:83:ef:b7:
2e:93:71:f4:df:52:5b:49:35:4a:5f:45:48:d2:af:
92:9a:f4:2b:6b:ed:21:d3:2c:59:26:a1:de:da:5c:
88:8e:d1:c2:db:9f:4e:15:d6:1f:21:37:b5:ce:86:
7e:7e:55:c3:e4:99:84:04:a9:9b:cd:65:03:d8:a3:
ac:26:b5:40:ad:04:11:96:7c:8f:e1:e0:ef:78:73:
d4:8b:db:f9:4f:dd:8d:a7:b7:4d:b1:83:66:a4:38:
e9:6f:42:f1:e1:72:c6:9c:4d:fa:b9:62:e4:4a:68:
6c:ca:a0:3d:2f:0b:37:ad:3f:62:e3:99:cc:af:9b:
33:ad:4d:ea:59:4f:76:65:09:5c:8c:fd:1f:48:a7:
9c:2e:5b:34:3b:3f:ca:da:d9:79:73:45:b9:36:7a:
60:f1:8e:25:b7:62:78:30:64:eb:4f:a6:3a:8c:93:
40:23:e5:1b:06:a4:57:33:55:07:36:aa:7f:17:66:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:89:89:B4:9B:13:D6:38:17:86:CB:44:60:71:EA:07:47:5A:FD:52
X509v3 Authority Key Identifier:
keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:2d:7e:33:b5:80:42:5a:07:aa:e4:ce:b6:ce:61:ba:53:
8b:9d:da:3b:c5:71:fe:ca:a2:49:b9:b2:e6:98:83:bc:fc:fe:
94:58:b9:75:ed:96:c2:d3:69:e6:15:51:db:d4:2c:32:87:1c:
84:91:bd:3b:ae:ee:a7:b6:fa:32:38:80:a4:9b:19:d4:91:f1:
23:8c:ea:7a:1f:24:d0:15:e6:d7:9b:1e:7d:54:dc:9a:14:5f:
2d:ad:4b:d6:05:41:3f:50:4a:c2:28:3d:15:1c:b2:f7:04:f7:
41:2b:e9:29:da:66:b6:34:10:b1:31:40:10:f2:92:0f:c9:34:
f2:ff:93:25:f9:d5:0a:d9:09:2e:69:8b:97:47:3f:c4:a8:31:
0f:99:26:a3:3d:52:73:d2:16:3f:20:5b:be:f8:ed:56:13:66:
bf:44:a9:3c:3a:90:e6:5d:43:49:09:07:be:52:dd:af:a5:05:
a6:f3:5c:b8:06:0a:d4:f9:b1:a6:71:dd:49:09:2c:60:7f:b1:
e3:e2:76:a4:fd:ed:46:b5:f3:35:a8:c0:05:4b:7a:56:7b:9a:
80:dc:6a:54:90:3a:ed:0c:d3:84:a2:5b:5a:41:d4:aa:48:2d:
5b:3d:2d:f3:cc:3b:5d:50:2c:bf:80:9c:7a:6c:a6:10:92:67:
d4:3e:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:54:46 2025 by rpki-client