Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: 5ExllBcJ6vHKNEutXb/UVTbTZM3kYcg7ilrPAsRZhXA=
Subject key identifier: 45:B8:D6:5D:EB:E3:1B:7E:B5:1A:EE:49:70:7D:35:8B:35:F2:CE:4B
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 1BC81E65513B7D70D23BF08E334145C2D5C239CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 026D
Signing time: Mon 03 Nov 2025 23:39:25 +0000
Manifest this update: Mon 03 Nov 2025 23:34:25 +0000
Manifest next update: Tue 04 Nov 2025 23:59:25 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: ICJ3j/Gr7ykhLe2d2eEbSsUa5BW69slUgoYshWrF0UA=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 23:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c8:1e:65:51:3b:7d:70:d2:3b:f0:8e:33:41:45:c2:d5:c2:39:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Nov 3 23:34:25 2025 GMT
Not After : Nov 4 23:59:25 2025 GMT
Subject: CN=45B8D65DEBE31B7EB51AEE49707D358B35F2CE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:28:37:79:65:d4:74:55:59:bb:a8:ad:36:
6a:21:6d:52:29:3f:18:98:c7:a2:d1:f0:dc:70:a0:
f4:56:9e:a5:6c:98:4c:f6:ad:1d:1a:70:2e:05:6e:
fe:4b:37:21:2f:ba:46:d2:7f:96:2d:f3:f6:09:f7:
81:12:9b:fa:c7:a7:2c:43:a0:cc:23:66:e6:58:dd:
6d:3d:28:68:72:1c:62:de:72:ce:ee:ea:a1:91:f2:
fc:88:49:ad:0a:6b:ba:b1:ce:b6:ae:f0:de:2e:39:
87:ed:4b:56:2a:d0:bf:db:e9:cc:a5:c2:59:3a:b1:
14:62:ed:33:86:d0:c5:32:c2:b6:ec:ce:c5:b7:16:
c9:4d:31:75:2b:50:7a:6d:56:1c:be:7c:c7:30:fc:
0f:31:da:95:e4:4e:c9:fc:3c:79:38:2f:98:18:e0:
b5:0b:b9:04:a6:88:69:6e:b1:a5:6e:a6:79:2a:98:
49:82:7d:b0:a8:6c:46:3d:4d:2f:d4:f2:24:ad:c1:
55:18:3e:19:25:89:c4:37:18:29:d5:99:25:89:50:
8a:c0:26:1f:f0:55:1d:e4:e1:50:6b:0e:8a:29:1b:
54:17:d4:fe:50:83:45:a6:1d:a2:53:23:50:7e:3e:
da:7c:5e:89:fb:57:f3:ed:ef:1c:18:44:58:ee:fd:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B8:D6:5D:EB:E3:1B:7E:B5:1A:EE:49:70:7D:35:8B:35:F2:CE:4B
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:b8:27:a3:33:45:6c:d5:54:8d:11:2c:42:7f:75:a3:4a:
ef:84:42:01:74:59:33:a7:c9:9a:c6:0a:85:f5:97:94:d9:00:
2a:c8:83:bc:ac:56:c2:63:7a:4a:76:17:3b:83:0b:79:c1:99:
bb:b0:90:a1:62:01:47:c9:4f:03:be:fa:35:2e:e1:cc:24:12:
2a:a9:76:5f:73:cb:a5:75:96:af:c2:92:63:d4:7d:86:54:91:
5d:1f:6c:8d:a4:39:73:d0:ea:5f:0d:cd:09:29:8d:36:8b:4d:
ce:80:d2:ab:52:11:fb:98:4f:c1:65:c8:05:d1:53:18:cf:73:
d0:4c:0a:ac:15:f1:c8:e4:e6:24:e7:ec:a2:95:8a:db:96:04:
92:45:e3:63:80:64:c4:77:4b:6d:e6:bc:c0:b6:ec:e4:b5:da:
08:1c:92:c5:5c:29:c9:90:b8:19:57:7c:3d:2a:5d:96:ed:c7:
62:d0:24:40:0c:5f:6d:fa:7a:82:ed:ed:0c:62:ec:df:09:14:
1e:7a:92:b8:a3:e6:6c:a6:0d:8b:4a:40:47:ef:f8:4a:df:e5:
d9:32:42:6b:22:88:8e:82:cf:2c:79:af:78:2b:ad:5d:05:d3:
5b:93:e2:10:37:d5:40:b8:65:9b:5f:37:bd:b9:4f:cd:23:73:
b9:cd:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:38 2025 by rpki-client