Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: tAwkQnVW1ro0RxZ6YIXs05CB2H55Ohx7SPv1eOma0Hg=
Subject key identifier: 6B:16:4F:B0:15:DE:DC:3E:06:1E:CA:C0:35:6B:18:AA:E9:39:4D:16
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 031C313F0C779484DBE2FD48A05896407ED936A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0201
Signing time: Sat 26 Jul 2025 04:14:00 +0000
Manifest this update: Sat 26 Jul 2025 04:09:00 +0000
Manifest next update: Sun 27 Jul 2025 06:08:00 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: z001JCXvp2bVGX6eTJaADDBhGU3JwR59cO+WUdfKmuQ=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1c:31:3f:0c:77:94:84:db:e2:fd:48:a0:58:96:40:7e:d9:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Jul 26 04:09:00 2025 GMT
Not After : Jul 27 06:08:00 2025 GMT
Subject: CN=6B164FB015DEDC3E061ECAC0356B18AAE9394D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:61:44:49:6b:9c:3d:11:d1:8b:3d:7f:8e:
53:4b:0b:e7:25:7f:f6:74:e2:e6:05:07:57:ed:14:
ba:4b:f7:9c:86:50:2b:f6:e7:f2:cf:e8:c4:13:ff:
b3:bb:bd:e0:75:87:ad:e3:66:32:9c:7a:8c:7f:e9:
fc:2d:d3:96:17:d3:a8:58:d2:5a:ef:57:01:e7:b5:
74:96:51:bd:fc:18:40:6e:5d:89:fc:62:04:48:44:
66:6c:cb:6f:4e:14:4a:01:bb:a6:00:1a:d4:2f:d4:
6f:2b:53:b6:5a:d8:ed:49:64:9f:26:0f:87:44:cc:
8e:ca:fc:af:e1:b7:14:0d:99:b8:b2:3d:01:55:83:
c6:79:e5:a8:a1:05:79:40:88:37:ef:01:e3:2a:cc:
af:47:2f:2a:76:9e:06:cd:f3:90:a0:e3:1e:12:7a:
e8:84:ec:9a:af:30:13:95:cf:39:4e:51:48:aa:b7:
79:16:20:a2:5b:ba:00:47:29:a1:fe:56:3c:67:71:
ec:4c:a3:e1:0f:1a:81:ad:48:96:de:64:84:e6:ff:
31:76:b5:64:43:e8:f8:41:45:86:b7:b3:c1:80:fc:
61:bf:3e:34:d1:2d:a5:95:b2:0c:0e:75:66:77:11:
43:fa:74:3d:a9:92:33:fe:a7:f1:dd:02:be:fb:01:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:4F:B0:15:DE:DC:3E:06:1E:CA:C0:35:6B:18:AA:E9:39:4D:16
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:43:67:c2:9b:1d:60:f3:5a:37:89:1d:e2:db:54:91:6d:91:
bc:c2:5e:e2:27:37:aa:56:3e:76:d1:4b:c9:b5:f6:e7:e8:89:
42:89:8c:53:93:98:a7:fd:a9:3e:f7:39:1c:06:95:a6:62:2d:
f8:6e:26:3e:f4:36:3c:7c:20:df:8c:4f:a1:88:e0:3d:04:20:
55:92:31:22:52:a3:1e:71:bb:4e:91:1c:c9:be:60:bf:e2:3a:
ca:e3:df:10:9b:4c:08:17:95:f6:52:14:71:cd:6f:12:d0:e9:
4c:af:45:21:29:27:1e:0a:d7:0e:89:7b:82:4b:48:72:1f:62:
bf:90:f0:f6:27:ed:e2:9a:54:af:d6:ec:b7:99:89:6b:fc:72:
75:93:76:eb:24:44:8b:32:47:a2:85:11:22:bc:22:e8:43:e8:
ff:9c:35:22:15:b9:66:4c:29:95:b5:1b:81:56:f5:17:e1:e1:
f8:38:d5:96:e6:53:a4:f9:61:b9:f1:22:b0:27:9e:14:73:56:
9b:67:6d:ca:f6:37:bb:be:bc:d6:42:d2:e6:a8:b9:cf:30:42:
f2:23:b2:49:89:02:26:df:e8:06:a5:65:2d:28:af:a0:2f:7d:
15:22:ff:d1:86:c9:14:78:19:7c:af:dc:ec:58:73:ef:9b:7b:
7a:79:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:39:03 2025 by rpki-client