Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File: 16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier: V+vpDTLlSHqApUL5Se23WIegcWFwMxF4PMgQJliwSsg=
Subject key identifier: 64:6D:40:BA:FB:35:38:A8:AC:71:41:A0:AF:1B:A0:09:EF:E0:49:DD
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer: /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial: 18187091771504A708B059B73F7ADFBE4391A8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number: 026D
Signing time: Tue 04 Nov 2025 06:34:28 +0000
Manifest this update: Tue 04 Nov 2025 06:29:28 +0000
Manifest next update: Wed 05 Nov 2025 09:34:28 +0000
Files and hashes: 1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: F0KOJsuDOE4TzT3pdrdJ0tlM098tB6D7FF8WoaVdBsA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:18:70:91:77:15:04:a7:08:b0:59:b7:3f:7a:df:be:43:91:a8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
Validity
Not Before: Nov 4 06:29:28 2025 GMT
Not After : Nov 5 09:34:28 2025 GMT
Subject: CN=646D40BAFB3538A8AC7141A0AF1BA009EFE049DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:4d:49:19:bb:1b:d0:66:b0:70:4c:7f:98:
55:ca:0b:de:28:03:42:5f:43:5f:98:56:e6:5b:d3:
73:da:8a:b4:88:2b:31:04:ab:a0:83:d0:42:9c:1d:
08:5b:2b:34:a5:af:c0:f5:03:31:ee:bb:f8:8b:2b:
6e:7c:4e:01:e2:6d:f1:b4:e8:73:96:b7:aa:48:da:
c4:56:36:7b:6e:ab:99:a3:83:0f:db:64:54:f3:11:
30:66:e0:2e:63:10:61:c1:21:d3:35:27:8f:3a:ef:
14:ac:f8:ec:c2:b3:d4:c3:8d:f6:a5:d5:02:34:1a:
00:a6:7f:1f:8d:a4:b7:76:37:8d:35:c0:50:e2:e9:
b0:76:13:c5:38:b8:83:c9:6d:2c:b0:4e:e3:ab:1f:
40:ba:ab:61:2f:b8:99:d2:ae:83:ae:a4:69:dd:76:
9c:a2:b6:31:38:a9:d9:ab:52:00:f4:27:fb:7a:47:
9a:c4:cd:d3:63:9d:a6:2e:55:df:ce:7f:58:08:7a:
28:85:d4:0b:10:5e:5f:16:38:82:c9:58:cb:dc:e8:
be:84:d9:80:b5:7a:c3:f5:34:36:25:27:41:3d:23:
41:4c:d0:c4:a0:8d:1c:ca:3f:16:3a:16:7c:06:7f:
4b:6d:22:d8:81:46:41:f0:09:f6:64:80:67:a3:d6:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:40:BA:FB:35:38:A8:AC:71:41:A0:AF:1B:A0:09:EF:E0:49:DD
X509v3 Authority Key Identifier:
keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:62:be:52:da:29:3d:17:8f:51:a1:19:42:0c:e6:e3:9c:3f:
7e:a6:40:1f:70:5d:40:69:e4:3b:dc:7d:05:72:f7:6e:a7:79:
a9:dd:73:e7:5b:be:2e:1a:35:6f:70:60:71:fe:6c:fa:fa:c9:
b4:19:ab:43:55:34:5f:64:bc:2b:53:7b:af:a1:7e:66:75:19:
f2:14:fc:e5:85:f0:de:6b:7a:de:3e:05:49:4b:83:c4:8b:1c:
4b:4e:ea:67:d1:c2:b3:9d:97:bb:51:16:8b:d5:19:5c:34:1e:
4d:36:7f:4a:36:88:a0:26:9c:1a:7b:9d:ad:35:83:c3:a3:06:
fb:ab:8f:4f:77:f5:5f:bf:18:fa:9e:8b:98:13:93:49:6e:7d:
7d:a9:8c:1e:a2:7a:44:9d:83:14:05:ad:53:f8:cd:fe:de:a1:
c6:9e:3d:31:51:ee:c3:7d:3f:14:c9:29:f4:a8:e3:6b:07:bf:
c6:26:5f:2b:aa:9f:02:eb:bf:d3:da:76:5b:36:9e:47:f8:85:
c2:e7:65:82:37:6a:3b:6a:05:70:fe:13:f1:ad:f7:ea:cb:6d:
85:f9:31:f1:a1:c5:c3:d2:40:cd:20:42:ff:73:85:84:ac:10:
2c:dc:ed:4a:1a:16:29:7a:e9:94:f5:40:bd:f0:d6:8f:f9:e2:
e7:72:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client