Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier: 2HKbEoHqALBDLEuH0hRXRrXQJu+BbGxfVgbB3Qu6Eao=
Subject key identifier: 45:B1:CA:FB:99:B3:65:B3:25:BD:86:B7:D8:5F:FB:4D:BA:E3:48:A3
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer: /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial: 3FE383D154F91AFA9A5D374356DB0FC4686E0B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number: 0275
Signing time: Mon 10 Nov 2025 23:19:52 +0000
Manifest this update: Mon 10 Nov 2025 23:14:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: uk3LM2yPikMQuSGTp98Zv/Qc5WTWeHcLqUYMfj1D1Dc=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e3:83:d1:54:f9:1a:fa:9a:5d:37:43:56:db:0f:c4:68:6e:0b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Validity
Not Before: Nov 10 23:14:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=45B1CAFB99B365B325BD86B7D85FFB4DBAE348A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:79:25:cc:ef:c3:96:86:47:e5:93:47:c4:
60:53:73:c0:db:a8:dd:e5:ce:64:64:f3:e3:9f:87:
96:b5:cb:44:6a:c8:b4:c7:e1:6d:76:1b:46:26:bc:
5f:d6:d6:1d:e4:5b:a9:ef:92:55:5b:3a:24:fa:a9:
78:a7:87:e1:bf:5f:d8:36:ad:4e:1c:71:ae:0b:b3:
a6:2f:70:a4:4d:25:82:58:12:d5:d1:6e:b3:1d:23:
14:e6:41:d2:25:a0:66:c7:3f:cf:1d:23:a9:41:e8:
b0:78:c6:38:1a:7c:9b:1b:fa:4e:09:2e:0e:c3:e3:
02:21:57:8a:11:1e:f3:34:fe:51:68:49:fc:19:c0:
05:d7:ce:e8:eb:2b:4f:9a:5f:e7:d3:f1:09:17:10:
65:28:8b:d6:32:36:9e:72:a9:e8:69:1f:59:68:69:
82:b5:2c:92:32:97:4c:60:8d:81:30:5a:62:28:73:
b5:75:8f:43:4e:17:a6:44:64:2d:8d:af:5d:58:a9:
8d:1c:0d:c4:0f:50:02:b9:38:e2:64:30:5e:64:f3:
b7:9b:ee:f5:be:7d:21:b9:38:fb:c8:92:26:4d:41:
4c:79:2d:e5:7c:a2:43:eb:ec:3c:d2:cd:ca:0c:45:
20:5a:73:7e:5d:27:ce:56:3d:12:04:41:39:b7:b4:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:CA:FB:99:B3:65:B3:25:BD:86:B7:D8:5F:FB:4D:BA:E3:48:A3
X509v3 Authority Key Identifier:
keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e7:ae:56:50:f4:18:3f:79:13:05:1b:45:25:6a:e5:24:44:
b1:bf:b3:c3:8b:de:8f:5e:f3:74:d3:d8:72:b9:45:38:b3:d8:
8b:7c:ac:46:29:dd:c1:7b:04:28:71:ea:e6:bf:99:6d:c5:80:
52:b3:30:c4:1a:9c:b8:78:b6:4b:f7:64:df:e2:51:fe:06:d0:
5f:dd:fb:78:76:66:b5:c9:c5:ce:55:ef:a2:30:c4:73:39:86:
58:8e:86:ff:ee:a4:b7:e5:51:e6:cf:bd:ed:95:45:cd:da:20:
ef:23:ed:94:c4:9d:6b:19:00:41:26:52:90:34:88:9b:c7:dc:
2a:34:45:2e:cf:34:81:a2:9d:0f:38:3d:13:c6:b6:7f:ec:29:
bc:cf:bc:43:a4:3e:91:a1:c7:0c:e9:67:18:82:05:c4:25:1b:
2a:0e:95:12:bc:ab:51:97:62:08:07:41:e4:46:26:34:cd:75:
fc:e8:50:24:b6:52:05:b5:7a:52:b0:18:67:f4:02:32:35:c1:
2d:37:a1:66:08:17:fc:5b:86:1c:1f:97:70:3c:0a:6e:14:4d:
35:c3:fa:c6:85:06:ea:c7:f5:df:b2:cf:4d:8f:b1:da:35:e3:
07:b9:9f:f5:bd:1a:79:09:40:28:66:a4:1a:24:1e:33:05:f6:
78:4e:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:21 2025 by rpki-client