Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: 6GVCsDBCVm2oMaMjmGF9vAm0KceLVtrtM2KqAXVPgLw=
Subject key identifier: 04:18:DC:3B:67:F1:44:2B:0B:5E:59:E5:44:66:A5:F4:C9:4C:9D:3C
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 3D4D79E7349ED36248FF647B09C13F6B71E0CCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 01BF
Signing time: Fri 06 Jun 2025 23:35:55 +0000
Manifest this update: Fri 06 Jun 2025 23:30:52 +0000
Manifest next update: Sun 08 Jun 2025 00:45:52 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: 29P2po8Th93WcT1xy7lUHx0FZkWyEgRUO0wDFtRUi8E=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4d:79:e7:34:9e:d3:62:48:ff:64:7b:09:c1:3f:6b:71:e0:cc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Jun 6 23:30:52 2025 GMT
Not After : Jun 8 00:45:52 2025 GMT
Subject: CN=0418DC3B67F1442B0B5E59E54466A5F4C94C9D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:3e:2e:b6:5c:e3:1f:b2:30:63:db:a6:07:
89:c3:85:da:5d:0e:77:87:c2:46:69:35:8e:62:dd:
ba:c7:7e:ae:e5:50:d6:e1:fe:54:dd:a9:7d:13:66:
95:60:51:ba:22:60:40:c2:a1:57:0d:69:99:40:06:
8a:8f:a5:a1:bf:b4:9e:9b:49:2a:67:cb:55:6b:6b:
0e:2b:54:44:4c:f0:ad:82:4a:9a:a7:40:c9:c3:52:
f2:83:86:56:8e:0f:63:b0:b3:0f:3a:a7:c1:04:ea:
aa:05:1f:b5:ac:58:0b:6e:a3:ea:89:06:71:59:bd:
59:c3:39:2b:30:5f:cc:38:bd:65:f2:0a:a5:1a:a8:
57:64:64:27:b1:15:cb:e2:f3:da:2d:ea:9a:29:ce:
d0:2c:e9:51:8f:87:07:ca:bb:2d:50:d6:59:76:4e:
46:a6:67:8b:53:89:d0:c7:13:82:28:48:e9:3a:ad:
21:c9:39:f1:00:28:79:19:73:5f:e2:9c:32:dc:6b:
17:3d:5b:60:17:5d:07:9a:75:32:57:2e:eb:88:35:
d0:e7:22:7a:f6:3a:8c:75:7b:17:87:6b:0b:83:38:
06:99:e6:c5:39:6a:3c:bf:97:ad:0f:95:e4:c1:ee:
77:bb:6d:fe:ed:50:41:1b:de:2f:3b:8c:b5:1c:90:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:18:DC:3B:67:F1:44:2B:0B:5E:59:E5:44:66:A5:F4:C9:4C:9D:3C
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9e:87:07:9f:f2:cb:e4:84:9f:4c:2c:98:61:79:95:93:87:
ca:88:43:d8:95:e6:e6:f4:73:80:ac:08:21:ec:70:73:d9:33:
e9:b9:d2:9e:d1:d9:cb:7d:bf:df:07:8d:95:ba:06:12:29:6c:
95:be:8f:eb:8b:fa:05:86:a4:66:c8:be:1e:ce:31:98:80:83:
f4:8d:ee:c6:d7:c5:d4:7c:82:46:81:85:06:b3:9e:98:7f:68:
57:84:a5:ca:df:98:10:fb:b7:9f:a7:1a:34:f4:18:45:ef:55:
f5:22:a8:2b:11:2f:6b:f1:af:9d:69:69:58:49:33:78:36:39:
88:c8:de:2b:88:e9:c5:4c:15:f7:91:81:06:54:f3:49:0a:cc:
fb:b7:b9:22:6b:ba:93:51:5d:d0:e8:66:d3:28:1b:4f:63:ef:
a9:a1:31:7a:07:4a:b7:1b:0d:f0:92:8b:b0:59:36:aa:5c:12:
d9:d7:66:fc:4b:34:9f:5a:37:73:b7:bc:e6:24:06:da:04:53:
09:25:49:d5:2c:74:76:70:33:7e:93:28:1b:66:0f:5f:95:4b:
03:04:2a:70:e7:88:59:31:bd:d2:f3:e3:78:e4:db:40:08:9a:
03:99:b1:10:99:e2:79:df:4e:66:33:b6:72:9c:6f:09:f2:15:
da:ad:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:03 2025 by rpki-client