Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: Oqeb+TPO1K69tQKCP2AKY30fBMd5mjQ9SLO9WE2pKMg=
Subject key identifier: DA:7A:45:CA:CE:EF:97:46:98:B4:FC:23:0F:CA:15:CF:C7:6A:56:FE
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 2DA743359D34B07EED50EB58A5ABFF8A385656E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 01BE
Signing time: Sat 07 Jun 2025 01:16:06 +0000
Manifest this update: Sat 07 Jun 2025 01:11:03 +0000
Manifest next update: Sun 08 Jun 2025 04:30:03 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: tcXGMZM7sqbQXkF0PMlTTkAJXpdpeXVqdIUdDuoXR6A=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a7:43:35:9d:34:b0:7e:ed:50:eb:58:a5:ab:ff:8a:38:56:56:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Jun 7 01:11:03 2025 GMT
Not After : Jun 8 04:30:03 2025 GMT
Subject: CN=DA7A45CACEEF974698B4FC230FCA15CFC76A56FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:08:dc:a0:f1:b9:23:ac:50:25:6a:85:45:
27:41:0c:d3:cb:d1:22:94:e0:cc:23:68:9b:4e:da:
6e:17:7e:9b:6f:4e:13:e0:3c:a1:87:63:ad:13:59:
fe:e4:7f:12:1b:58:d1:e4:e2:dd:16:73:39:38:63:
79:0a:a8:2d:cb:1e:3c:56:de:3e:e9:7f:8b:cb:bf:
b5:96:2e:6f:8b:1c:97:f5:96:43:79:f8:ac:e0:8b:
fa:9e:26:79:86:cf:e5:61:ba:13:be:72:da:88:c6:
a7:37:b5:92:7b:ea:3d:3c:d9:1f:55:97:87:4c:1f:
0b:05:50:b2:8b:55:e2:4c:26:ec:4e:a8:c8:53:23:
56:fc:d5:93:c4:45:58:54:8d:fa:3a:22:94:e0:15:
68:8f:e2:e0:2d:7b:6f:23:64:51:9a:88:0b:4b:c1:
bf:98:9c:72:2e:1e:49:ba:eb:e3:50:58:57:8f:9e:
37:65:1d:fa:53:5d:ae:53:72:33:7e:e9:9d:4c:42:
de:07:b0:e2:e0:bc:63:9f:0f:68:c7:85:ec:43:e5:
b3:a9:a4:a6:e6:b8:5a:9f:12:ed:5e:19:b6:19:ca:
2d:95:9e:b9:e6:ad:0b:e4:d4:01:54:e7:b5:13:4d:
e3:02:01:fc:eb:50:91:87:4c:91:97:ed:1a:28:f2:
63:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:45:CA:CE:EF:97:46:98:B4:FC:23:0F:CA:15:CF:C7:6A:56:FE
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a7:88:05:74:9f:26:01:a9:dd:4a:57:a6:30:d6:4c:bf:13:
52:7e:fe:70:79:b3:7a:52:85:8c:43:b4:79:e2:17:35:65:8d:
8b:af:ba:5d:46:4d:62:05:28:5e:5b:1d:d8:08:cb:d6:01:d0:
37:a7:c9:7e:f6:f4:ab:a4:f3:4b:a9:28:e7:4b:45:16:37:0d:
ad:26:c3:7b:66:28:6d:fc:66:d3:97:41:8f:8f:bf:a5:80:7b:
b3:78:c0:ca:fc:d3:e3:94:95:f0:ec:34:95:8a:68:91:0b:7a:
e8:fa:83:a5:6d:5e:dc:1f:80:4a:13:d6:00:d1:48:cf:45:fa:
98:ed:99:66:78:7c:f8:7c:d0:92:f9:3a:49:1a:97:d1:a1:b0:
dc:7f:ef:2f:f0:f3:dc:c4:56:48:3d:34:93:ae:70:80:90:2d:
c2:15:71:9d:0b:86:ed:5d:75:ce:d8:4e:fe:03:3a:d1:05:e1:
bc:5e:fa:13:7a:ef:b4:e0:04:07:dd:d8:0d:0f:8a:97:68:07:
e7:07:aa:70:27:59:b7:dc:99:1a:28:da:e7:b2:00:7e:b5:44:
e9:2c:03:e7:41:6d:ea:a6:a2:43:cf:74:bf:6b:11:e7:77:3e:
74:80:c2:23:84:43:20:1d:26:60:d9:1c:b8:af:9c:5c:f7:aa:
31:7f:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:44:57 2025 by rpki-client