Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier: RwKAS3r72kOo4d5DkJ/h00xqSBXG0kuGrZexyrj08Q4=
Subject key identifier: 9F:3B:D5:D5:AF:E3:D9:84:C4:0D:D8:9B:8B:23:3E:4F:6B:1A:F3:8B
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer: /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial: 4F0C916969F29561B33037D982D8DE7CD8182730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number: 0187
Signing time: Sun 27 Apr 2025 06:43:23 +0000
Manifest this update: Sun 27 Apr 2025 06:38:21 +0000
Manifest next update: Mon 28 Apr 2025 10:22:21 +0000
Files and hashes: 1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: UGLvJHqGW6/4W9esGdeZwZFW2pMT+9p8Ila1PHGziwo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0c:91:69:69:f2:95:61:b3:30:37:d9:82:d8:de:7c:d8:18:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Validity
Not Before: Apr 27 06:38:21 2025 GMT
Not After : Apr 28 10:22:21 2025 GMT
Subject: CN=9F3BD5D5AFE3D984C40DD89B8B233E4F6B1AF38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:23:8a:7f:e5:9f:74:77:2e:c3:f5:ee:21:
58:3e:99:bb:73:20:27:ff:7d:29:ff:55:b0:12:26:
ae:12:af:af:bc:35:64:96:ba:17:67:e6:91:4d:e4:
7e:cc:ae:74:d4:d4:67:11:a6:1e:a1:ff:8b:d5:eb:
c7:9b:fc:3c:2d:2d:6c:bd:61:bb:c3:83:9d:a0:75:
e7:73:af:b0:10:c3:f5:aa:b4:02:90:68:aa:02:c2:
b0:f5:30:6b:80:1a:88:8e:6f:a8:fc:f2:52:da:b7:
bd:12:7a:0c:f6:19:35:d1:7a:0a:f4:29:c2:23:9d:
af:dd:5a:a4:96:8e:a5:f1:70:7c:d3:5e:25:b4:9d:
aa:47:25:60:7f:d7:b6:42:c3:0f:89:c1:ce:09:85:
91:b1:d4:e5:60:d1:26:15:c0:e0:ce:a4:79:59:6c:
70:9d:6a:f8:b9:4b:83:58:8c:ba:2b:55:c1:32:e1:
46:d8:57:d9:14:ea:5c:b8:0f:7e:96:53:93:a3:36:
7b:fc:35:af:4a:7b:86:03:9b:24:19:75:2c:3f:68:
09:e2:91:81:fc:24:69:b7:1d:a8:ec:b6:b9:7b:a4:
76:29:9e:1c:e9:92:8b:58:98:0d:12:4e:1f:7c:c9:
7c:ea:3d:1e:e2:95:fe:2a:3c:6a:95:07:03:ee:6f:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:D5:D5:AF:E3:D9:84:C4:0D:D8:9B:8B:23:3E:4F:6B:1A:F3:8B
X509v3 Authority Key Identifier:
keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b4:d3:26:2f:e5:83:96:f8:62:12:a7:9e:88:8c:c0:14:09:
2e:85:00:b3:bc:53:57:ff:ea:a9:d8:45:f5:8b:99:4e:3f:87:
c7:b5:57:f4:db:91:a2:0a:9a:2b:49:4e:38:1c:1f:10:72:fa:
fb:b2:d9:94:ad:36:80:93:2d:b6:47:7e:78:dd:99:43:8c:22:
f9:b8:ea:e3:6c:67:8b:f9:df:5e:db:8d:8e:dd:6e:57:39:f0:
50:34:7e:75:cd:e1:32:84:4d:60:ca:28:6f:fc:8c:d1:6c:9b:
5f:17:79:a1:a5:c2:bd:0d:32:c0:01:23:c2:e6:74:2b:78:02:
c3:05:f7:e7:8b:18:03:f0:05:94:6e:d3:99:49:bb:77:03:1f:
a8:19:5d:e4:11:ad:8f:5a:e3:33:c3:e3:01:2a:7c:35:df:71:
7b:15:15:40:a1:2b:59:43:35:2c:f6:d5:70:9a:bb:6e:5e:36:
d7:54:d7:f4:a4:1b:6b:78:34:9d:1d:0a:c6:42:9c:c5:4f:c8:
2c:3c:c6:17:34:64:2c:9d:fc:f0:12:f0:a1:1c:47:b3:4a:4e:
bd:3f:39:05:02:fe:3d:b6:29:6d:35:74:a1:24:33:bb:d7:ab:
6c:9b:58:75:ef:2a:ae:33:72:b0:23:8b:81:fe:43:e9:cb:97:
19:c5:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:36:59 2025 by rpki-client