
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json)
Hash identifier: UWgzvv2tpfN1FCQg3cI9JoEdCO1m2pNSBRLUh9szYNo=
Subject key identifier: 6A:AA:C2:17:22:F1:39:FA:94:22:B5:76:65:12:DB:FC:43:E0:3F:A7
Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501
Certificate serial: 43C9A6C7D2170D40423001586D520193CCAD0890
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
Manifest number: 026A
Signing time: Tue 04 Nov 2025 23:14:30 +0000
Manifest this update: Tue 04 Nov 2025 23:09:30 +0000
Manifest next update: Thu 06 Nov 2025 00:02:30 +0000
Files and hashes: 1: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: LWpFZKo0Evb6T4RBvKj2MpUuYHCudnsADEkl/1hbhJ8=)
2: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c9:a6:c7:d2:17:0d:40:42:30:01:58:6d:52:01:93:cc:ad:08:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501
Validity
Not Before: Nov 4 23:09:30 2025 GMT
Not After : Nov 6 00:02:30 2025 GMT
Subject: CN=6AAAC21722F139FA9422B5766512DBFC43E03FA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:6f:65:9a:81:9e:0e:08:fb:af:ea:c2:f7:
ea:37:a6:14:2b:5f:41:50:d4:8c:91:7d:47:7f:a8:
bd:f0:31:09:89:28:f8:c9:ef:ad:bf:6a:e1:cb:81:
89:09:8a:36:bb:aa:f0:c1:c7:19:51:84:c6:14:51:
7a:7d:15:f3:77:47:1a:e4:28:56:40:4b:74:e3:68:
f4:2f:ae:8d:0a:71:c4:a4:2f:b5:d5:fa:ff:e9:c4:
27:b6:64:69:3d:a7:31:53:8a:1d:ff:05:53:27:6e:
ea:43:2a:a6:d4:e2:79:3f:12:8e:90:19:c6:67:8f:
73:86:52:f8:29:31:46:54:98:ce:ab:74:b8:9a:aa:
ef:e6:0e:98:24:30:91:71:68:98:29:62:ba:bd:28:
76:d9:2b:04:d5:04:c3:2a:8a:66:ee:0e:35:e2:86:
14:e9:d2:e4:c5:44:0b:79:fb:19:83:ad:da:d2:47:
c9:ab:91:d2:2d:3f:a3:9c:b1:68:c5:39:01:98:34:
aa:b7:3a:95:22:17:5c:c6:74:b9:56:28:59:b1:a5:
0e:ab:b2:1f:27:80:11:80:93:72:f8:63:e6:c8:9f:
35:23:3b:15:90:44:6d:a9:c8:92:4e:58:23:3e:52:
55:7c:b4:b6:42:a3:5d:b7:8b:87:f3:53:82:67:89:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:C2:17:22:F1:39:FA:94:22:B5:76:65:12:DB:FC:43:E0:3F:A7
X509v3 Authority Key Identifier:
keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5c:88:be:2f:de:ec:4a:5b:92:d8:14:46:94:3b:49:f1:c9:
09:c4:38:21:cd:91:7e:50:1f:c0:15:1b:aa:5b:91:a3:cf:96:
a3:e1:54:0a:29:0e:3c:df:9c:37:92:47:e5:8f:a9:49:e7:f3:
02:fb:e6:32:94:f1:bc:06:c3:08:93:dd:0c:a5:bb:6a:31:80:
07:07:28:09:3e:8a:1d:8b:89:4c:c0:ec:70:5d:79:a5:e4:bf:
b5:5f:56:3c:1d:05:18:19:41:5c:30:e3:28:85:45:d9:be:a7:
d7:b5:c5:a9:c0:b3:45:a2:37:2a:69:a6:a0:00:2c:d6:bf:64:
22:60:a9:3d:20:4c:06:86:48:f6:1c:db:76:f2:49:7f:d6:c9:
8d:3e:8d:c8:61:94:0b:b5:fe:b5:42:e8:75:14:d8:3a:a2:4f:
b4:8e:d0:e7:5e:39:1f:50:bd:b3:38:2d:eb:0e:c4:d4:ec:86:
09:79:c6:95:ab:61:56:53:cd:cf:3d:63:d5:db:75:f4:56:6b:
33:44:63:ac:7e:38:08:ba:ee:b4:9c:af:a3:40:1a:c7:f1:13:
05:a4:82:39:d4:35:16:69:1d:ce:ed:46:3c:d2:1d:51:10:76:
d0:80:03:1b:82:5d:e1:ef:35:de:87:1d:98:85:20:7c:71:be:
86:52:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:38 2025 by rpki-client