Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: oyZAc0bMMxOCA7aWoDScfQKvaXsdKW3Qj3pYo9+vYhw=
Subject key identifier: CD:7E:9A:7F:74:D0:76:59:37:59:1E:51:81:97:BE:A9:BC:FC:D3:AB
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 3D0B82CBBC2CEACC43B5384107D15376B1DCF34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 02EF
Signing time: Thu 26 Feb 2026 05:25:23 +0000
Manifest this update: Thu 26 Feb 2026 05:20:21 +0000
Manifest next update: Fri 27 Feb 2026 07:48:21 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: uQZgNaFYpqJ3tjhlVvyrZYUtGDhkmmQ0G2K4p0oR0I8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0b:82:cb:bc:2c:ea:cc:43:b5:38:41:07:d1:53:76:b1:dc:f3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Feb 26 05:20:21 2026 GMT
Not After : Feb 27 07:48:21 2026 GMT
Subject: CN=CD7E9A7F74D0765937591E518197BEA9BCFCD3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:9b:b4:8a:d8:dc:3a:83:c1:87:37:53:b0:
c7:f6:3a:a3:ad:47:fc:7a:2c:74:00:f6:33:67:c6:
eb:61:87:e4:df:99:6a:ff:68:00:22:a0:85:a2:ea:
01:26:28:49:36:e1:0e:c3:58:92:4a:36:40:ca:ff:
20:39:39:13:74:19:ba:c0:53:b2:fa:a5:c6:68:5a:
79:56:bf:f0:1f:b3:ac:27:59:47:e0:a2:da:f0:b2:
3d:f1:9f:9c:f3:97:c4:13:65:55:4a:45:bb:d6:6c:
53:f6:85:3c:0d:36:57:be:04:27:b3:1f:88:4a:5b:
5e:ff:47:7b:5d:62:70:9b:b8:77:c4:c1:81:4e:d3:
04:2f:bb:24:b0:00:b4:05:6c:34:0a:99:0c:bf:4e:
0b:d4:d6:7b:b0:3b:9e:28:24:57:95:35:67:04:7d:
76:26:a3:5a:3b:c3:aa:1a:d5:e2:8f:ce:09:22:c2:
40:2a:83:96:98:44:ac:e8:9f:8a:a5:c1:7b:52:54:
8e:2e:60:54:28:97:68:02:56:ac:2c:c4:4f:39:d9:
77:42:0d:fa:84:ce:5e:98:4f:b9:a6:8f:91:8f:2f:
15:b4:86:6a:54:2f:da:49:0b:07:ee:5d:b8:a6:35:
63:ef:b7:84:c8:5e:99:08:6b:3d:04:8b:a4:ce:4c:
59:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7E:9A:7F:74:D0:76:59:37:59:1E:51:81:97:BE:A9:BC:FC:D3:AB
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:37:75:c0:45:2f:91:28:15:72:60:df:e8:48:b9:40:3a:0a:
0a:75:e2:ac:b7:27:2c:68:f7:ae:48:ce:2e:3c:2a:3b:d6:c4:
d2:5a:c4:34:40:db:4d:20:1a:d4:23:9d:55:72:6d:ae:36:a0:
b9:f6:c4:4c:70:ae:e9:73:88:ae:2b:f5:3f:2a:8e:a3:ab:b2:
3c:4d:46:76:c4:96:0a:af:3c:27:e7:c1:b4:1e:05:2f:0f:98:
41:15:da:7b:b3:e0:d9:06:7a:b8:b5:41:14:81:4c:59:c4:59:
8c:f6:13:08:b0:43:be:1a:f7:71:da:d0:3b:3a:9e:dd:d8:e7:
1f:7d:1a:ae:bb:8c:93:a7:5d:dc:03:62:58:58:87:21:6c:06:
be:ea:4e:f1:2e:86:e6:5c:13:e3:70:52:28:21:65:a4:fc:ad:
ee:8c:c1:16:5c:57:46:f0:5e:0a:1e:f2:73:4c:fa:09:16:c1:
23:1e:39:86:3b:6d:dc:f4:40:1e:a4:90:b6:bc:4b:79:a8:ee:
4f:ab:e7:ef:60:aa:24:4b:16:39:a5:10:aa:5c:9b:06:b9:b4:
8b:ba:7a:a5:53:ca:c7:aa:16:30:f4:2e:26:01:6f:f3:0a:6d:
b0:10:7a:57:b4:58:08:0a:d6:2b:58:a8:24:19:d7:de:03:5f:
ff:82:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:39 2026 by rpki-client