Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: i/lpWrG+SWOrfQ71WjfFGCFP6ECZm6JjgrO2UuhgTBs=
Subject key identifier: 21:24:3C:BB:6F:2C:05:B4:CA:47:66:3A:F0:3F:9C:08:9A:7F:86:5D
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 44C3ED6D7071A61ECAED6389C0C2591F98E2C5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 017E
Signing time: Sun 20 Apr 2025 16:21:58 +0000
Manifest this update: Sun 20 Apr 2025 16:16:56 +0000
Manifest next update: Mon 21 Apr 2025 19:47:56 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: 4CwUOFYlM5nYqmHVaUB+vZBIEih3Xl8eB/7RauNeBQo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c3:ed:6d:70:71:a6:1e:ca:ed:63:89:c0:c2:59:1f:98:e2:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Apr 20 16:16:56 2025 GMT
Not After : Apr 21 19:47:56 2025 GMT
Subject: CN=21243CBB6F2C05B4CA47663AF03F9C089A7F865D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:3e:fd:02:1b:fe:f6:88:d2:43:56:f6:3a:
3e:c1:f3:62:13:ea:fd:66:75:2f:89:fb:68:74:c3:
a3:d0:b8:b2:25:1f:24:b6:e0:cd:34:8f:c3:ef:36:
65:17:60:36:37:a5:db:55:d2:8a:bc:a3:aa:2d:1b:
03:fa:f4:19:43:20:24:6c:80:0d:a9:ba:7b:6e:ed:
a4:c6:09:94:7c:47:6d:7d:8c:56:25:7d:18:30:fc:
cf:4b:4a:6b:f1:68:01:bb:6f:7a:14:78:4c:12:67:
04:da:6c:e7:ee:37:a8:06:25:09:04:95:76:75:18:
ad:a9:b9:10:76:6b:fc:0a:06:c8:66:6a:7e:a7:15:
15:e6:b2:1a:90:96:4d:e5:c3:8f:68:7b:f7:87:9b:
93:42:f0:48:f8:55:74:ae:e9:87:df:92:5a:3a:95:
8d:ff:d8:c5:18:71:2c:05:47:d3:24:69:74:28:cf:
54:04:74:9b:88:f0:39:e2:47:64:ea:5b:18:68:dc:
f2:2b:11:e7:bf:b2:ca:b5:f6:a1:8c:bc:9b:ba:1a:
af:4d:6a:1b:23:79:c0:d4:e9:3b:53:4c:75:ce:1b:
68:2d:d0:8b:65:f0:e5:c9:4b:93:d4:f8:db:66:72:
4c:a2:53:5f:16:4e:f8:76:2e:1e:97:4e:1a:73:1b:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:3C:BB:6F:2C:05:B4:CA:47:66:3A:F0:3F:9C:08:9A:7F:86:5D
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9e:d2:a9:20:b1:b6:eb:4a:53:72:0c:6c:4f:02:16:d3:e4:
b2:af:67:8c:2d:11:ee:7e:4a:1e:5d:52:cc:a2:24:f1:14:73:
eb:8b:3c:35:f4:aa:30:22:d1:10:d6:be:e4:45:92:af:dd:fb:
6b:f4:fe:87:f8:db:be:76:15:d3:f9:ee:7b:63:cf:40:a7:9b:
b4:7e:11:c6:a0:1e:23:75:49:07:8b:13:23:10:73:10:b4:b8:
a4:00:44:a8:aa:77:81:58:90:c5:a4:86:1c:f5:eb:57:62:6e:
24:a5:4c:8f:23:d4:ec:1c:e9:fd:70:20:82:17:90:58:3c:13:
14:39:8a:d8:e2:1c:5e:63:da:b5:28:bd:d4:65:4d:fe:c5:a2:
0a:fc:a1:d2:0f:3c:25:d1:35:d0:2e:7a:95:c4:4c:a2:18:7f:
a5:bf:4b:6d:00:72:19:c9:89:61:cf:f0:15:1a:ec:27:09:74:
ec:ec:5b:bb:1b:e6:4c:8a:9b:90:cc:8f:fe:b8:72:0b:57:9c:
4e:95:d5:9f:64:35:56:2a:03:69:a5:20:6e:82:2f:90:b4:bd:
65:9f:90:9f:39:81:d2:0b:4b:e4:a2:08:6b:34:ea:47:32:a3:
bb:7c:ef:35:25:bb:c9:8f:ba:0c:45:b7:a2:0e:b2:2d:e9:c2:
5b:13:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:37 2025 by rpki-client