Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: CoWqQ6o24ivABXOvAzXSsbIIYIRA844kNXyn0pnu93E=
Subject key identifier: 2C:B7:D1:0D:A6:E4:73:02:F0:F4:FF:E0:8E:01:D1:EB:17:44:B0:FC
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 29C364C2AF90CC1DD43BB403F649AB31ADC86365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 0213
Signing time: Sun 10 Aug 2025 13:24:53 +0000
Manifest this update: Sun 10 Aug 2025 13:19:52 +0000
Manifest next update: Mon 11 Aug 2025 16:10:52 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: LvJAHuC0Z+ZTcsj+tpLI5c2QghkB2CZVdteB/w1j55U=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c3:64:c2:af:90:cc:1d:d4:3b:b4:03:f6:49:ab:31:ad:c8:63:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Aug 10 13:19:52 2025 GMT
Not After : Aug 11 16:10:52 2025 GMT
Subject: CN=2CB7D10DA6E47302F0F4FFE08E01D1EB1744B0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:de:fa:14:1f:2d:9a:8b:4c:76:47:fe:e9:
3e:2d:bc:bf:14:d6:8a:e4:e0:17:6a:88:a2:46:1c:
3c:be:09:ff:7f:6e:69:0f:60:01:44:61:f0:99:30:
03:17:f3:80:32:1f:ec:3b:e1:12:46:60:55:71:c8:
aa:39:1c:55:7d:12:fe:44:f5:4f:16:32:68:03:5a:
49:ef:26:61:0e:a6:1e:ce:69:53:e4:85:5f:58:51:
b0:6a:ff:5f:95:7d:5d:0b:d3:f7:b8:9b:3b:eb:d9:
3b:5e:6c:92:c0:c8:8e:a6:13:32:2d:91:65:92:ef:
f7:b5:52:29:fa:96:e6:25:68:ef:4f:41:4b:a8:cd:
b8:90:77:86:1f:2c:8e:bd:78:eb:bb:10:58:c6:8f:
9d:39:c4:9a:c5:c3:b0:49:8b:33:31:ed:83:34:de:
c9:df:e3:64:84:40:3f:0b:66:db:47:77:44:d0:61:
4b:f5:d1:c5:bd:84:1d:44:bd:91:98:6c:e3:56:ff:
b6:02:af:89:66:1a:bd:af:83:c8:36:d0:2c:b0:29:
d0:ea:cf:48:d7:c8:f4:50:70:c8:35:53:f3:ce:08:
21:f4:89:db:93:73:2c:b7:13:33:2c:35:14:4d:70:
63:0d:0b:2c:a3:04:81:9d:3a:50:14:46:23:22:ed:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:D1:0D:A6:E4:73:02:F0:F4:FF:E0:8E:01:D1:EB:17:44:B0:FC
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8b:39:39:16:13:a8:14:6b:31:bd:aa:47:97:3a:86:02:2d:
b3:85:ab:03:cd:1b:6c:74:42:80:d6:e0:8b:4e:47:c3:95:cb:
3c:1f:65:d7:b8:fd:a2:8e:ae:e0:26:ac:a2:75:35:2a:fe:35:
65:47:ba:78:ff:8c:02:62:93:f1:74:ab:7e:bb:d3:24:04:66:
bf:b1:46:a5:44:94:17:66:3b:38:4b:e5:a2:62:33:5d:33:7d:
4a:c2:9f:cc:0c:b9:a4:81:a7:00:6c:71:d7:ad:19:37:46:85:
79:a2:e5:57:c8:3a:72:af:fa:cd:be:0d:06:87:95:db:b6:59:
3f:f6:03:82:28:ef:7e:55:fd:6b:43:74:2e:c6:3a:74:1d:14:
94:76:fb:e6:9c:89:e2:88:e0:11:07:55:53:b9:ba:d7:14:56:
ed:81:76:66:a4:07:85:11:20:89:ee:c2:36:0a:ee:7f:0d:4e:
53:71:69:b2:7c:bb:cc:24:47:50:79:c4:67:9e:f6:cf:4a:9a:
93:e5:9f:ec:c1:a8:62:99:9d:62:f4:78:ac:eb:a4:3d:4d:5a:
a7:1c:57:33:40:46:a6:7b:bd:a3:b1:79:f0:88:23:62:4c:11:
af:57:7f:8c:2c:6f:cd:44:59:a7:ad:ab:37:2c:5e:c3:f7:b2:
9d:34:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:38 2025 by rpki-client