Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: w+KtUew7howfeJdLZjA7h4NzSNKgSRB6dMJdLe5VWGs=
Subject key identifier: 3D:7F:26:88:43:E1:49:97:E9:BB:F2:B6:25:21:11:7A:E5:B4:B9:0F
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 266CB4FB3B1D27CA24C7096D7FA173A15222FE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 0276
Signing time: Tue 11 Nov 2025 04:34:38 +0000
Manifest this update: Tue 11 Nov 2025 04:29:36 +0000
Manifest next update: Wed 12 Nov 2025 05:18:36 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: a2/Q1cgn2UFN7RQcNE/NQh+w4oCFdBqC2BDfNtqlcws=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6c:b4:fb:3b:1d:27:ca:24:c7:09:6d:7f:a1:73:a1:52:22:fe:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Nov 11 04:29:36 2025 GMT
Not After : Nov 12 05:18:36 2025 GMT
Subject: CN=3D7F268843E14997E9BBF2B62521117AE5B4B90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:72:f9:3a:c5:52:5c:93:14:3d:df:63:99:
2f:75:7f:66:0d:cd:3f:b9:a7:16:fd:1e:1c:65:06:
df:00:5a:c5:dc:ed:2a:7a:40:b6:09:32:2b:f1:2d:
f7:05:4e:4b:85:94:f6:ba:d0:e4:2b:fd:39:2b:d3:
60:46:4d:3c:d8:4b:7d:14:a3:24:68:c9:69:25:52:
44:5d:53:be:99:2e:c0:97:bb:92:03:2e:73:00:c9:
af:a3:38:59:71:e4:4c:57:26:19:88:94:8f:c1:ae:
79:04:da:05:11:aa:16:f4:98:55:8c:8d:81:6b:c5:
07:36:67:6a:af:2f:2c:15:9f:e0:24:8a:c3:cc:ea:
fa:2d:e7:13:c2:05:db:cd:64:72:9f:f4:bb:23:b4:
06:9c:bd:84:32:31:5e:6b:b6:76:86:34:9b:a1:ab:
ac:1b:8b:c7:26:c8:16:08:be:eb:d1:d2:c8:71:d8:
d5:3a:b7:2d:a5:64:14:e2:19:c5:80:57:40:fc:67:
16:18:e1:78:5d:11:9b:72:20:5c:d5:51:25:74:c3:
ec:91:ee:2c:d2:68:44:a1:e0:00:83:4d:20:d8:c3:
42:1f:4c:04:91:f9:b7:8a:72:ce:1a:e8:45:3f:ab:
56:1d:74:7a:f5:3a:8d:c3:57:7a:26:7a:0f:24:45:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:26:88:43:E1:49:97:E9:BB:F2:B6:25:21:11:7A:E5:B4:B9:0F
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:04:13:d1:21:f7:6c:8d:2c:65:4a:fe:84:ea:98:98:0e:
ed:36:f2:b1:82:b3:b8:7f:29:72:27:22:1e:6a:cd:0f:74:ad:
d5:5a:2a:4d:4d:64:d5:6b:b9:ca:98:1a:ed:05:85:2a:b3:97:
af:3d:85:4f:4e:89:93:bc:db:77:8c:7b:f0:ab:d5:9f:0f:bd:
98:fc:27:8a:20:3d:85:02:b8:ac:14:c8:12:06:47:9c:18:c5:
b8:97:5c:1d:e6:b7:ee:4b:09:41:ba:b0:dc:79:b0:9f:2c:a5:
d2:cc:41:26:c6:ba:bf:d5:03:61:27:ae:40:68:77:e9:01:20:
d1:c3:70:fc:56:90:c4:ad:02:25:95:2d:f8:fd:10:8a:bb:81:
e7:83:b7:6a:da:53:ee:56:67:0e:88:7b:63:28:5f:fc:b3:72:
78:06:ed:1b:81:4b:32:db:fb:b1:58:34:eb:2d:4d:99:db:46:
d4:6c:c5:34:0d:57:25:81:1f:18:6c:84:7d:27:57:42:e5:e4:
ba:f7:b0:c5:13:57:39:ab:97:9e:3c:b0:7a:df:8f:b3:6f:64:
14:f1:3c:f4:f9:de:3c:17:8c:67:3f:00:b8:9f:fb:ab:78:ce:
c0:4c:d7:d7:b8:0b:4a:5d:90:da:2e:64:1b:b0:10:dd:e4:5b:
9c:2f:5b:c2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUJmy0+zsdJ8okxwltf6FzoVIi/iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4
ODM0ZTA5ZDAeFw0yNTExMTEwNDI5MzZaFw0yNTExMTIwNTE4MzZaMDMxMTAvBgNV
BAMTKDNEN0YyNjg4NDNFMTQ5OTdFOUJCRjJCNjI1MjExMTdBRTVCNEI5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCD3L5OsVSXJMUPd9jmS91f2YN
zT+5pxb9HhxlBt8AWsXc7Sp6QLYJMivxLfcFTkuFlPa60OQr/Tkr02BGTTzYS30U
oyRoyWklUkRdU76ZLsCXu5IDLnMAya+jOFlx5ExXJhmIlI/BrnkE2gURqhb0mFWM
jYFrxQc2Z2qvLywVn+AkisPM6vot5xPCBdvNZHKf9LsjtAacvYQyMV5rtnaGNJuh
q6wbi8cmyBYIvuvR0shx2NU6ty2lZBTiGcWAV0D8ZxYY4XhdEZtyIFzVUSV0w+yR
7izSaESh4ACDTSDYw0IfTASR+beKcs4a6EU/q1YddHr1Oo3DV3omeg8kRcTlAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUPX8miEPhSZfpu/K2JSEReuW0uQ8wHwYDVR0j
BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv
MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx
YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC
OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABQgQT0SH3bI0sZUr+hOqYmA7tNvKxgrO4
fylyJyIeas0PdK3VWipNTWTVa7nKmBrtBYUqs5evPYVPTomTvNt3jHvwq9WfD72Y
/CeKID2FArisFMgSBkecGMW4l1wd5rfuSwlBurDcebCfLKXSzEEmxrq/1QNhJ65A
aHfpASDRw3D8VpDErQIllS34/RCKu4Hng7dq2lPuVmcOiHtjKF/8s3J4Bu0bgUsy
2/uxWDTrLU2Z20bUbMU0DVclgR8YbIR9J1dC5eS697DFE1c5q5eePLB634+zb2QU
8Tz0+d48F4xnPwC4n/ureM7ATNfXuAtKXZDaLmQbsBDd5FucL1vC
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:49 2025 by rpki-client