Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: J073alImm4iAuEd4D7XbvbzhwrGzwwnx4ZX1DBcQybs=
Subject key identifier: 2A:F8:20:DB:FE:D6:B5:05:D2:2D:1A:40:8B:CB:B2:FF:C4:7C:4F:49
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 44B21F7B72CF62822B592C37A6E28AE88FB17080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 01C9
Signing time: Sat 14 Jun 2025 03:34:46 +0000
Manifest this update: Sat 14 Jun 2025 03:29:44 +0000
Manifest next update: Sun 15 Jun 2025 03:55:44 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: YVPWa6X5CzGkpZ7VnVyspJjaljEhbeXlTLSomEajCCo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b2:1f:7b:72:cf:62:82:2b:59:2c:37:a6:e2:8a:e8:8f:b1:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Jun 14 03:29:44 2025 GMT
Not After : Jun 15 03:55:44 2025 GMT
Subject: CN=2AF820DBFED6B505D22D1A408BCBB2FFC47C4F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:ec:b5:1b:be:d8:53:cf:b0:58:16:b0:de:
cb:66:3d:67:d7:e3:3e:b3:43:d2:1b:ee:68:57:8d:
62:94:45:93:3c:ec:bf:55:26:9f:c4:32:f1:59:ca:
4b:73:14:54:71:b4:f4:6c:fe:bb:44:32:e0:b3:16:
fe:93:c0:ca:7d:7b:d5:97:db:25:a4:1a:67:8c:f0:
81:d4:7b:9c:40:44:2a:1b:1d:e3:f9:11:50:73:36:
e2:c5:0b:32:f9:07:f3:35:63:eb:73:eb:16:8f:32:
36:c2:8e:b5:4f:4d:78:29:7f:32:2b:5b:89:8f:7b:
d7:d3:3e:b2:8d:50:b9:09:be:b3:ed:90:31:de:22:
81:f1:28:ee:26:19:51:92:4b:31:4b:c8:68:6f:17:
79:70:0d:d9:07:f8:84:66:12:ca:b9:73:6e:39:02:
8c:57:e9:00:36:d6:bd:50:83:2f:a5:95:e9:4a:3f:
da:12:b9:8f:53:af:05:a0:f4:a6:1e:3f:4d:29:f2:
c2:31:02:8d:fb:8d:9f:9b:54:73:9c:27:45:04:d2:
c9:d0:07:c0:30:03:cd:62:be:a9:a3:48:69:ca:c3:
65:f7:48:c9:6c:e0:08:0c:bd:cb:cf:2c:c7:cd:90:
76:dd:b5:ff:fd:81:97:6f:6f:a9:af:09:ee:13:46:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:20:DB:FE:D6:B5:05:D2:2D:1A:40:8B:CB:B2:FF:C4:7C:4F:49
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ae:4f:42:2b:7a:76:c3:0b:7f:c4:74:ee:b9:02:a6:d6:f0:
bb:7c:2d:c1:f9:a0:5b:29:55:09:61:dd:ce:a1:a5:66:83:1f:
cc:8c:ec:9f:c7:84:72:6e:7c:1c:92:41:18:30:15:fc:b8:27:
4c:db:45:98:be:04:d5:72:00:a7:41:1a:a2:de:ef:09:c8:f6:
5f:5a:a6:7f:86:23:89:de:3e:b5:a7:3f:25:e9:3f:10:ec:90:
e1:90:fc:74:7e:94:42:5a:53:c1:f7:df:76:48:c1:92:74:e0:
00:7b:57:8f:60:c2:89:f0:02:e2:7d:b9:70:b5:50:6b:b9:27:
09:53:4b:bf:84:92:7e:b5:22:c8:aa:c6:62:41:f5:78:ef:6a:
95:ff:6d:49:09:a6:34:15:26:07:67:11:8a:41:3a:eb:f2:ed:
af:e4:d8:29:ef:ad:a2:40:06:72:56:f9:2b:90:ab:f0:2f:ee:
22:f1:8b:6a:c4:08:b1:39:1d:cc:64:6e:1a:e1:91:54:38:8d:
7b:a3:3b:40:ce:75:22:97:5d:49:18:03:32:02:ab:70:89:1e:
4a:0b:cb:2c:b1:49:61:0f:fe:10:34:d5:f7:79:da:89:ec:76:
2a:b8:47:d5:38:2f:b3:54:fd:9b:0f:af:45:cd:60:ac:6c:15:
e8:81:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:12 2025 by rpki-client