Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier: HS+KhZASUIJFAFZt/MUAl5ZQxiuP+zHnMyhaD1vAe3s=
Subject key identifier: 9D:C4:A8:3A:A8:42:B1:AC:26:4D:D1:BF:D0:20:46:C8:9F:B3:5A:D7
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer: /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial: 05F2663AAD0EF9149DDD5848F0E5F05A0AB4A9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number: 026C
Signing time: Tue 04 Nov 2025 08:39:30 +0000
Manifest this update: Tue 04 Nov 2025 08:34:30 +0000
Manifest next update: Wed 05 Nov 2025 08:59:30 +0000
Files and hashes: 1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: JNVLyKOUt5sjXgK8P1VknX8E1Bww36Vmdw36NTDwBQw=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f2:66:3a:ad:0e:f9:14:9d:dd:58:48:f0:e5:f0:5a:0a:b4:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Validity
Not Before: Nov 4 08:34:30 2025 GMT
Not After : Nov 5 08:59:30 2025 GMT
Subject: CN=9DC4A83AA842B1AC264DD1BFD02046C89FB35AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:81:e3:3c:d7:ec:da:75:3f:fc:02:5f:27:
72:b3:a8:cb:52:af:9e:60:2f:5e:d7:a0:04:94:11:
ad:df:af:a5:6b:cc:c6:48:b4:0a:7b:1c:76:4f:79:
65:a4:fd:06:92:e6:ec:8a:8b:01:7c:5d:51:6f:55:
e2:41:af:08:07:80:81:5c:fc:52:0c:37:20:44:3b:
b9:03:1c:fb:d0:71:68:b8:48:37:6a:a4:dd:fe:c1:
cd:e9:23:08:47:ef:c1:db:72:71:95:ea:8a:a2:d9:
da:20:ad:6b:73:16:a4:b1:80:b4:5f:90:14:79:48:
1d:be:7f:d0:7d:80:f6:1b:3c:5c:8e:5f:cc:54:fb:
37:d2:28:78:d6:11:cd:05:aa:6c:78:02:6b:94:35:
0b:e9:55:79:8d:aa:b6:4a:e9:54:bf:b0:bf:f4:cc:
0f:17:c4:88:4e:18:ef:3e:ac:e4:23:41:7d:f8:f9:
2f:ea:e0:ed:a9:32:6a:b0:f1:a2:b6:4a:e3:a6:09:
cd:54:63:cd:df:b7:c8:23:e1:11:7f:26:62:d2:32:
e6:54:6a:d3:b4:1c:be:1d:22:ee:75:d6:ab:7f:8c:
5e:56:a6:3f:15:39:9c:79:52:f2:4a:ed:dd:7d:2f:
1f:2d:ed:7b:78:f4:bc:94:56:fa:77:8e:ec:5f:72:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:A8:3A:A8:42:B1:AC:26:4D:D1:BF:D0:20:46:C8:9F:B3:5A:D7
X509v3 Authority Key Identifier:
keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b1:0c:b3:59:3b:5e:f5:39:fd:7f:e1:c6:a5:7b:08:d5:b0:
27:15:a3:be:c4:5e:68:fa:7a:9f:bb:2c:ff:83:3b:aa:09:bd:
37:f0:68:a2:5b:ec:9a:a7:fa:03:8d:86:93:97:84:8a:b2:af:
75:06:43:81:d2:65:f9:48:58:e4:7f:41:9c:9f:ba:9b:59:62:
56:50:00:a8:da:e3:e5:57:1c:92:56:a6:d1:31:e9:bd:78:ef:
03:63:c2:91:36:b0:64:ce:44:94:4e:25:2b:66:69:14:ff:c9:
b6:26:81:90:5f:6e:12:f0:bf:53:c5:f7:bf:75:e7:08:30:a4:
a0:8c:eb:26:34:ad:b7:c2:63:22:64:28:fd:14:dd:53:85:97:
2f:7e:f1:a7:35:21:6b:c9:d1:a5:e3:d2:9d:2d:1d:aa:bb:15:
57:08:b2:17:1e:f4:2e:93:6e:7f:64:95:8d:61:6c:99:bb:0a:
bd:89:f1:ff:60:0a:67:a3:2b:eb:58:64:d6:2a:86:a4:dc:cd:
2b:f7:57:eb:39:6e:52:a1:e1:22:a4:83:de:50:50:03:c8:95:
be:3d:35:5e:53:72:be:91:d5:fc:0e:4b:65:6d:08:10:0a:5b:
2e:6c:b8:66:ec:2d:81:d4:0c:51:b0:8a:7a:bb:7e:d1:53:06:
3a:19:ee:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:51 2025 by rpki-client