Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: 4QNcretJF567I4uBJH5JBtddIr3LKYhurX7ai7mMNFo=
Subject key identifier: 25:D8:25:A0:31:35:66:06:B1:97:21:8A:E6:DD:BD:B0:08:E2:8C:8A
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 7C073E231E405B033CE0BA5EEF7DEE8D349175BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 0200
Signing time: Sat 26 Jul 2025 03:23:57 +0000
Manifest this update: Sat 26 Jul 2025 03:18:57 +0000
Manifest next update: Sun 27 Jul 2025 06:10:57 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: AW9DscbrTygD1NGnsYU8f77vCFEZ2Wjx7otobW86xGw=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:07:3e:23:1e:40:5b:03:3c:e0:ba:5e:ef:7d:ee:8d:34:91:75:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Jul 26 03:18:57 2025 GMT
Not After : Jul 27 06:10:57 2025 GMT
Subject: CN=25D825A031356606B197218AE6DDBDB008E28C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:40:9d:b1:47:df:80:e3:66:e0:9e:3b:ae:
bc:a5:4a:26:82:b2:e8:a8:2a:cd:b1:b6:aa:ea:66:
b7:e6:64:10:ff:bb:30:37:1e:ef:7f:29:1f:b2:27:
20:79:c7:3f:fb:bb:4d:ca:56:91:f2:09:50:0c:c7:
e7:14:8e:88:ae:2a:f1:41:49:88:da:59:c1:aa:0c:
d7:fb:96:de:67:8a:36:0d:5c:bf:a2:00:a4:04:f5:
d2:6c:a3:5c:a1:e8:60:df:50:e2:7c:56:16:14:0a:
41:9b:83:b7:b7:e1:b5:f4:ac:ab:e7:ea:10:ec:40:
85:69:70:c7:6d:59:1c:4d:fe:82:29:04:8e:9b:e9:
f4:5e:57:c9:c3:47:04:53:46:c6:f2:d6:42:b6:c4:
02:a1:06:96:4f:a4:e5:3b:7f:f4:20:82:08:0e:95:
8e:95:2a:b4:d7:fd:4d:2e:ee:ef:fb:a0:c5:ef:22:
19:72:c4:96:2e:4d:bd:00:dc:46:a2:f7:fa:1b:3e:
e0:18:53:f8:44:a1:bd:0c:99:dd:4b:56:5a:ab:8f:
35:45:25:ac:e9:a8:00:30:2e:a6:0b:ec:7c:39:94:
15:47:de:1c:39:b6:7d:f9:18:36:ba:df:61:2e:c0:
3a:28:4f:7b:b7:ab:93:f7:9f:d0:ad:5e:6a:b1:95:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:25:A0:31:35:66:06:B1:97:21:8A:E6:DD:BD:B0:08:E2:8C:8A
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:78:05:81:77:c2:de:20:50:2e:e8:9b:7b:e2:0e:67:9f:19:
1a:7f:21:1e:28:41:ac:0b:fd:af:92:7a:76:6e:95:fa:33:a0:
d6:14:27:2f:55:6d:3a:71:23:b4:96:2b:fa:aa:2c:f6:85:bb:
a5:26:bb:59:a8:a5:b3:63:1f:0e:b8:f7:0e:ac:db:5b:51:06:
e5:58:6b:99:8c:0a:13:39:37:9d:cd:08:25:2d:4c:eb:ae:66:
dd:4f:4c:73:20:a9:c5:93:67:84:5d:68:b1:ff:11:5f:4a:c9:
3d:57:1d:6a:82:35:20:31:27:9a:34:7b:06:aa:7d:d9:9a:b1:
a2:82:41:15:9e:c9:92:7d:52:db:23:16:2a:d7:19:ee:8c:12:
73:d6:b9:0f:cd:cd:f2:ea:9d:98:09:48:03:ce:12:6c:17:b9:
65:38:3b:0a:62:35:ae:1a:02:97:57:46:a6:9d:fc:f3:bd:26:
27:e3:7e:4f:68:6e:64:a2:7c:ad:4b:41:55:a4:75:33:79:4c:
22:04:dd:27:af:91:26:b3:0b:91:4f:c1:88:98:2a:75:d3:94:
c9:32:5b:cf:43:0c:c8:1d:0b:86:7d:c3:3a:20:5f:0d:c7:1e:
5e:b7:ef:0c:2b:c6:2b:31:9c:41:96:e2:78:79:64:99:4e:dc:
af:33:89:7d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfAc+Ix5AWwM84Lpe733ujTSRdb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4
ODM0ZTA5ZDAeFw0yNTA3MjYwMzE4NTdaFw0yNTA3MjcwNjEwNTdaMDMxMTAvBgNV
BAMTKDI1RDgyNUEwMzEzNTY2MDZCMTk3MjE4QUU2RERCREIwMDhFMjhDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgECdsUffgONm4J47rrylSiaC
suioKs2xtqrqZrfmZBD/uzA3Hu9/KR+yJyB5xz/7u03KVpHyCVAMx+cUjoiuKvFB
SYjaWcGqDNf7lt5nijYNXL+iAKQE9dJso1yh6GDfUOJ8VhYUCkGbg7e34bX0rKvn
6hDsQIVpcMdtWRxN/oIpBI6b6fReV8nDRwRTRsby1kK2xAKhBpZPpOU7f/QggggO
lY6VKrTX/U0u7u/7oMXvIhlyxJYuTb0A3Eai9/obPuAYU/hEob0Mmd1LVlqrjzVF
JazpqAAwLqYL7Hw5lBVH3hw5tn35GDa632EuwDooT3u3q5P3n9CtXmqxlXezAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUJdgloDE1ZgaxlyGK5t29sAjijIowHwYDVR0j
BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv
MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx
YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC
OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCheAWBd8LeIFAu6Jt74g5nnxkafyEeKEGs
C/2vknp2bpX6M6DWFCcvVW06cSO0liv6qiz2hbulJrtZqKWzYx8OuPcOrNtbUQbl
WGuZjAoTOTedzQglLUzrrmbdT0xzIKnFk2eEXWix/xFfSsk9Vx1qgjUgMSeaNHsG
qn3ZmrGigkEVnsmSfVLbIxYq1xnujBJz1rkPzc3y6p2YCUgDzhJsF7llODsKYjWu
GgKXV0amnfzzvSYn435PaG5konytS0FVpHUzeUwiBN0nr5EmswuRT8GImCp105TJ
MlvPQwzIHQuGfcM6IF8Nxx5et+8MK8YrMZxBluJ4eWSZTtyvM4l9
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:21 2025 by rpki-client