Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: GBUUGd2+hXdhFnm79vU1pqhWFwx6m9vDDjhpoK68FfM=
Subject key identifier: EE:CC:72:70:8C:C5:77:A9:36:FA:C2:EC:C9:E3:84:AB:41:FC:51:75
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 69DAA59DBF73AEB14897A16F53A1E3842851577F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 026A
Signing time: Tue 04 Nov 2025 09:39:30 +0000
Manifest this update: Tue 04 Nov 2025 09:34:30 +0000
Manifest next update: Wed 05 Nov 2025 10:00:30 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: hAd8mZFHxnhpSPTaxEhPgY2zbBoTiLB+Vu0N0unDhqU=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:da:a5:9d:bf:73:ae:b1:48:97:a1:6f:53:a1:e3:84:28:51:57:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Nov 4 09:34:30 2025 GMT
Not After : Nov 5 10:00:30 2025 GMT
Subject: CN=EECC72708CC577A936FAC2ECC9E384AB41FC5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:38:ee:ca:c0:d9:e9:af:d7:6a:4c:14:3a:
bb:2d:c5:b2:b1:f3:f5:e0:35:88:35:22:2b:3c:33:
28:c8:bf:fe:1d:76:ee:77:fa:9c:f0:6c:57:f3:0b:
b2:28:3e:dd:27:05:58:22:73:32:29:da:e8:76:37:
58:4d:ce:28:ad:5f:15:de:ea:c7:c8:51:04:3a:5b:
ef:b4:36:dd:4b:1d:d8:de:23:77:aa:5d:b9:64:3e:
e3:6a:35:3b:07:d5:f7:a3:5c:c1:7d:b0:4e:a3:95:
ed:dc:97:60:e2:82:f4:26:2c:ef:4a:4d:ee:fe:e9:
33:24:10:e4:3d:05:e8:41:fb:32:c0:e5:df:aa:e6:
6c:17:b8:43:41:48:e2:e1:97:32:b2:d5:4a:f0:6c:
97:a2:25:e3:97:3b:3a:a4:f6:a8:1b:6f:dd:10:1e:
c4:c0:ce:6a:ef:5c:9f:88:67:c8:07:68:bf:a3:bf:
c6:2a:2f:bf:1e:76:95:69:e7:08:bb:8d:a0:16:c5:
63:4c:8a:91:09:2a:ad:4d:75:c6:df:03:63:19:f2:
17:1d:5a:e4:27:62:5f:e0:f8:90:a1:62:8a:1a:b9:
e8:b4:0b:bd:38:f2:02:27:0c:9d:71:c9:25:61:f5:
ff:86:d2:95:23:8c:2a:3e:17:4f:1f:96:4b:af:ce:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:72:70:8C:C5:77:A9:36:FA:C2:EC:C9:E3:84:AB:41:FC:51:75
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:db:fd:b8:54:6d:7b:07:84:7b:eb:7c:ee:3a:66:13:9f:f9:
50:73:c4:33:8a:9c:1e:6a:27:12:05:e7:67:e3:62:d4:0b:89:
66:aa:12:7a:c3:96:de:bc:85:bf:86:e1:fc:29:d3:3c:6b:e0:
dd:87:33:41:42:77:eb:a5:4e:60:94:cc:e2:9b:5b:f8:7f:19:
f8:ca:3c:38:d3:40:31:f9:1b:b4:90:02:cd:82:ca:f1:d7:7c:
ab:b6:83:9a:16:15:c1:41:8b:73:06:66:42:7a:49:2b:51:4c:
04:a6:a9:71:26:77:d4:02:b3:3e:d2:87:aa:9e:9f:31:be:f1:
91:fd:d7:b5:f1:f2:67:3c:1e:8c:8d:20:ef:6c:cd:a6:9a:5a:
16:9b:c2:3e:fe:d8:3d:0e:4e:54:c5:2c:3a:dd:04:13:6f:23:
98:fd:76:06:43:4b:dc:87:cf:fc:b1:63:8a:c5:4e:01:f2:ea:
68:a1:95:4f:ab:9f:99:7c:96:73:63:11:f9:b0:b6:3a:25:98:
e4:5e:69:17:49:f4:2a:45:5f:95:03:22:2d:cf:12:b0:c2:4f:
f0:9a:af:5f:e8:bd:40:ee:3e:21:fc:5a:60:f4:94:38:45:eb:
b8:39:bc:a5:27:86:e1:51:b7:33:6a:58:76:8d:06:0b:7a:f0:
15:cc:2c:e8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUadqlnb9zrrFIl6FvU6HjhChRV38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYyM2JiODc0MzExNmQ4NmIxM2I5YmQ5ZTUzNDAyMzk4
YjdhMWVlMDAeFw0yNTExMDQwOTM0MzBaFw0yNTExMDUxMDAwMzBaMDMxMTAvBgNV
BAMTKEVFQ0M3MjcwOENDNTc3QTkzNkZBQzJFQ0M5RTM4NEFCNDFGQzUxNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMjjjuysDZ6a/XakwUOrstxbKx
8/XgNYg1Iis8MyjIv/4ddu53+pzwbFfzC7IoPt0nBVgiczIp2uh2N1hNziitXxXe
6sfIUQQ6W++0Nt1LHdjeI3eqXblkPuNqNTsH1fejXMF9sE6jle3cl2DigvQmLO9K
Te7+6TMkEOQ9BehB+zLA5d+q5mwXuENBSOLhlzKy1UrwbJeiJeOXOzqk9qgbb90Q
HsTAzmrvXJ+IZ8gHaL+jv8YqL78edpVp5wi7jaAWxWNMipEJKq1NdcbfA2MZ8hcd
WuQnYl/g+JChYooauei0C7048gInDJ1xySVh9f+G0pUjjCo+F08flkuvztHbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU7sxycIzFd6k2+sLsyeOEq0H8UXUwHwYDVR0j
BBgwFoAUBiO7h0MRbYaxO5vZ5TQCOYt6HuAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzEv
MDYyM0JCODc0MzExNkQ4NkIxM0I5QkQ5RTUzNDAyMzk4QjdBMUVFMC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JpTzdoME1SYllheE81dlo1VFFDT1l0Nkh1QS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV80ZDVjMzA5YWUxMWE0NDll
YTg0MDdhY2UxZjc5MDFmMC8xLzA2MjNCQjg3NDMxMTZEODZCMTNCOUJEOUU1MzQw
MjM5OEI3QTFFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCU2/24VG17B4R763zuOmYTn/lQc8Qzipwe
aicSBedn42LUC4lmqhJ6w5bevIW/huH8KdM8a+DdhzNBQnfrpU5glMzim1v4fxn4
yjw400Ax+Ru0kALNgsrx13yrtoOaFhXBQYtzBmZCekkrUUwEpqlxJnfUArM+0oeq
np8xvvGR/de18fJnPB6MjSDvbM2mmloWm8I+/tg9Dk5UxSw63QQTbyOY/XYGQ0vc
h8/8sWOKxU4B8upooZVPq5+ZfJZzYxH5sLY6JZjkXmkXSfQqRV+VAyItzxKwwk/w
mq9f6L1A7j4h/Fpg9JQ4Reu4ObylJ4bhUbczalh2jQYLevAVzCzo
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:54 2025 by rpki-client