Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: 3tO4cKUj/BmZNRcpZ5wS4c7B+zZgo6wVIeHPCNUxaC4=
Subject key identifier: 11:2B:D0:D6:D4:DD:37:62:CE:D1:55:21:EC:D2:F5:71:D7:E2:7E:1D
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 7BC0A35FBFBDD693CAD8474F6ED6ECECEB9E0BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0214
Signing time: Sat 09 Aug 2025 09:02:58 +0000
Manifest this update: Sat 09 Aug 2025 08:57:57 +0000
Manifest next update: Sun 10 Aug 2025 10:43:57 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: 6p+jMJ1yrKgPknCTKmYNLD6ISIKE5KuLdrac5Iyxovs=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c0:a3:5f:bf:bd:d6:93:ca:d8:47:4f:6e:d6:ec:ec:eb:9e:0b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Aug 9 08:57:57 2025 GMT
Not After : Aug 10 10:43:57 2025 GMT
Subject: CN=112BD0D6D4DD3762CED15521ECD2F571D7E27E1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:44:14:78:cf:54:cb:a5:5d:04:e0:d6:6d:
4f:14:19:e9:74:e1:40:75:05:92:3a:3e:6a:0d:39:
92:2e:32:e8:e9:bc:3b:59:3d:73:d8:39:0f:1e:65:
aa:c8:07:a1:91:ea:f5:a6:1a:a6:cc:b5:b0:00:f9:
28:0f:02:13:10:f8:c4:f9:6e:72:62:e2:fd:19:74:
4b:89:e8:88:91:42:63:73:b4:1a:3d:00:f2:1f:f1:
16:a5:41:e5:03:c9:4a:c6:fc:11:9f:7e:8c:b6:3e:
6b:4a:bc:4d:0d:90:28:6f:cd:cd:b3:50:2c:d4:f9:
a8:de:4a:ef:39:e7:93:ea:cd:6d:f3:b7:e5:61:f5:
03:e4:fd:5f:1d:89:45:da:04:b6:3e:34:f5:de:1a:
bc:bc:67:79:bd:d6:72:04:39:c3:03:29:95:ba:5d:
5d:a4:5d:26:df:b1:73:53:ff:43:36:57:b3:78:bf:
2f:64:bf:78:a2:b2:35:66:39:af:3d:66:f2:2e:77:
b0:b5:44:f2:ec:80:11:95:2d:d7:25:7d:9b:c9:4f:
b5:dc:68:95:a1:59:df:6a:ac:81:78:4f:45:70:e0:
88:56:d3:fc:33:54:2e:4f:37:30:9e:b9:56:64:c0:
66:f3:91:86:15:c4:c9:08:b1:86:f6:1f:16:47:8d:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:D0:D6:D4:DD:37:62:CE:D1:55:21:EC:D2:F5:71:D7:E2:7E:1D
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:43:25:7c:a4:a6:8f:ab:c2:02:ba:df:82:68:a1:d8:be:a2:
74:2e:d5:46:06:77:21:11:70:39:50:e9:6e:d4:4b:13:01:1d:
85:d2:a6:be:2f:2f:47:35:30:67:96:fd:7e:81:cf:76:a4:8b:
bc:dc:e2:ed:f9:6a:88:b0:a9:5d:ab:b5:7d:72:35:6a:82:8f:
fb:79:24:f6:19:ce:85:cb:7b:13:9a:55:5b:3b:e0:5b:d4:ac:
10:9b:d2:80:14:4f:95:e9:97:72:15:71:a5:29:6c:1a:89:f9:
21:a6:23:06:0e:8c:fc:fb:2a:fe:24:7d:8b:61:bd:18:a1:8f:
96:23:e5:c2:87:e5:78:15:08:e0:32:13:c5:26:07:7b:e5:c2:
26:31:0e:78:43:c3:ee:e6:ce:32:8f:87:64:d4:d5:56:65:55:
6f:59:f2:e7:0c:9d:68:30:e0:6f:31:3d:21:5b:2a:09:c6:70:
e0:eb:4c:ee:8c:8f:5a:c9:44:db:26:fc:ab:b7:9b:d5:46:2d:
98:59:9a:2d:b2:1b:1c:7d:66:ad:cd:a4:3e:e7:50:64:1f:b9:
1b:a7:d4:6e:2e:9b:b0:1a:fc:36:61:db:cf:cd:40:59:c7:cd:
8b:e1:54:90:9d:0e:e3:de:63:15:9b:98:69:72:f7:bb:e2:00:
3b:7b:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:15:59 2025 by rpki-client