Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: X02AiGlUjRIBfCYAtWd5w4xcuDX7sakEC2k5fwug9NI=
Subject key identifier: EA:AC:4B:5C:45:BE:36:F8:58:1A:FD:BA:F2:C5:96:62:BF:4E:54:F3
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 1C0E3A37C9B80E8A08FA72C671E67A51105D3832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 018A
Signing time: Sun 27 Apr 2025 18:46:12 +0000
Manifest this update: Sun 27 Apr 2025 18:41:10 +0000
Manifest next update: Mon 28 Apr 2025 20:49:10 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: aiF+E9j19VRLDRW+jAH5I8ONHd6kTgfV57Nto4qbvE0=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0e:3a:37:c9:b8:0e:8a:08:fa:72:c6:71:e6:7a:51:10:5d:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Apr 27 18:41:10 2025 GMT
Not After : Apr 28 20:49:10 2025 GMT
Subject: CN=EAAC4B5C45BE36F8581AFDBAF2C59662BF4E54F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:4a:7c:ee:b6:23:d2:4e:9e:94:3b:97:03:
85:43:00:b1:33:09:b3:2c:08:0e:19:a8:63:99:9f:
32:1c:8b:8d:46:82:fa:a1:ee:53:cf:6a:16:59:38:
c9:33:0a:bc:75:4f:1b:e4:4e:3f:ff:5f:f6:67:7e:
88:93:ae:b1:40:44:7a:f5:0d:43:e0:b9:2d:57:8b:
44:a2:40:87:a6:6e:f4:11:a0:5b:48:e6:d5:aa:67:
94:e4:81:7a:ee:c0:e3:c2:5c:4c:fc:43:03:39:f0:
4b:34:32:5b:24:69:c1:97:cb:26:e0:45:12:3c:33:
74:0e:76:8b:66:28:d4:78:a2:55:d7:0d:15:b3:a6:
20:78:93:45:75:90:25:5f:80:e6:22:7c:ed:e3:b6:
c8:2c:c8:5c:a9:62:5c:ec:1e:af:da:f2:3a:f9:da:
12:7c:59:52:5b:dc:c1:4a:a5:96:8f:64:bf:8a:b3:
d8:67:b0:ec:5a:f6:87:57:9b:e5:2b:d9:c1:c2:3d:
15:89:62:a9:5c:eb:6b:aa:ac:a5:68:e2:93:4b:02:
fb:ca:17:bf:2a:df:45:37:9f:78:e3:54:27:35:d9:
47:f9:b6:c5:ae:0c:7d:6b:49:7d:62:04:bf:0a:5b:
44:bd:b0:51:a6:df:f3:2a:2c:ca:57:c1:f5:0a:47:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AC:4B:5C:45:BE:36:F8:58:1A:FD:BA:F2:C5:96:62:BF:4E:54:F3
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:32:6e:d6:67:86:81:3f:2c:1b:86:40:bd:2f:8a:52:6a:a4:
83:7c:40:a6:5f:2c:68:7a:3f:e7:a7:d1:d8:bc:8e:19:f1:4b:
21:19:84:62:b3:b3:fb:ea:80:29:eb:ec:0e:fc:3b:82:21:5d:
e5:e2:95:10:23:07:13:6c:90:c3:8b:02:60:09:e7:c9:44:3b:
f2:4a:89:d6:4a:17:f4:b9:2c:a0:55:00:fa:d3:a2:1c:45:c9:
d1:0d:f7:f1:a4:56:14:e8:fa:ec:62:b6:c1:0f:19:3e:df:1b:
2a:38:09:6e:f8:94:dc:ed:60:c3:20:77:ac:eb:8f:e7:25:a5:
f5:cb:ef:f8:b6:93:06:06:d8:1c:6d:84:be:a7:e2:b5:6d:a7:
83:3c:f2:20:ec:8a:22:9d:37:7f:27:d6:84:8d:c4:ff:41:c6:
0c:e7:10:9b:99:1f:bf:f5:b3:df:b9:1e:fe:19:7d:22:8b:c8:
50:3a:ba:df:68:04:dc:7a:dd:6f:71:c7:4d:84:c1:3d:a8:b5:
7a:71:dc:26:0d:f0:6b:04:93:ad:f9:c0:ea:45:2f:e0:2a:29:
70:81:c5:1c:c9:59:63:04:eb:78:3a:6c:2a:63:51:d7:3e:c8:
fb:ea:f0:0d:4c:bc:f9:26:58:43:c4:42:4c:16:7e:7c:30:dc:
2b:2a:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:04:50 2025 by rpki-client