Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: joXs0wrtnIKopdJINU8RkvRZ4rDBmPvJUXO6p0X9k4U=
Subject key identifier: 6D:2F:15:A0:0C:6A:9F:EA:16:C5:BE:CF:AB:C4:88:FA:96:2E:9C:30
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 24E89BF75BE978DB2717B84D3AE5BDF6E9AC6C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0277
Signing time: Tue 11 Nov 2025 12:27:06 +0000
Manifest this update: Tue 11 Nov 2025 12:22:04 +0000
Manifest next update: Wed 12 Nov 2025 13:52:04 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: VgcrlNHUgq5G0pUiOkbee6dWwwqJjQELj5gFGGNeog8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e8:9b:f7:5b:e9:78:db:27:17:b8:4d:3a:e5:bd:f6:e9:ac:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Nov 11 12:22:04 2025 GMT
Not After : Nov 12 13:52:04 2025 GMT
Subject: CN=6D2F15A00C6A9FEA16C5BECFABC488FA962E9C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:6c:73:60:f9:ab:1d:4c:d9:61:61:66:45:
b2:f5:65:e1:67:ec:e3:d6:f2:4f:f8:0b:8c:ea:55:
2f:a4:ae:69:ad:40:43:d1:a1:0a:ae:93:7b:1e:1b:
c3:14:80:79:5b:16:dd:d6:63:80:6b:68:00:8d:03:
77:64:23:0e:e7:8d:31:e9:fd:46:1e:7e:74:09:9a:
97:75:4f:3c:25:f2:1c:29:95:98:79:17:45:de:b4:
a8:69:8a:7b:08:02:f5:7c:04:40:e8:17:ab:d9:72:
b9:36:08:0b:e7:d9:81:c4:45:7d:89:29:69:81:ed:
2e:86:1d:82:37:cd:50:55:24:50:89:51:2a:1a:7a:
5b:1a:fb:75:01:1e:4c:c4:19:17:30:80:3e:a5:62:
98:7d:18:b6:b5:c7:b6:b0:69:74:cd:4d:28:80:87:
f3:9c:1a:01:65:b4:c1:1d:60:31:0c:7f:e4:af:d5:
12:50:fb:ed:4b:34:33:31:cd:f0:bf:bc:0e:21:aa:
b7:47:a8:09:77:b3:ae:12:9a:b4:54:f2:ae:94:b5:
4e:b6:3b:36:30:16:ae:b7:83:41:8b:a8:2c:55:ff:
71:70:27:89:82:41:e8:71:98:c5:6d:08:b5:5a:02:
73:d8:f9:f2:08:db:e0:63:f4:f0:da:c7:e8:f5:42:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:15:A0:0C:6A:9F:EA:16:C5:BE:CF:AB:C4:88:FA:96:2E:9C:30
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:23:ff:c4:16:e2:fe:06:8e:b4:0d:13:94:ee:ab:5f:b5:
24:d1:4e:ab:39:9e:9a:3f:e8:a9:b5:c9:2d:4a:19:28:ab:88:
2c:c8:1c:99:4a:1b:d7:00:f3:99:9d:25:b5:dc:42:cc:cb:1a:
34:72:a2:46:6b:d1:70:fc:c8:00:f3:d0:dd:4c:d0:a2:b7:06:
12:10:54:af:43:a0:d7:66:c8:70:49:29:b7:da:a8:90:21:fe:
a1:06:18:0e:67:b9:a2:8a:a5:df:9c:75:14:e5:a0:6d:97:c7:
83:af:61:88:e2:cc:13:58:2a:5e:87:75:4c:ae:d1:5d:32:22:
0b:a7:5b:3c:ed:1d:a6:cd:73:db:cf:01:3f:f8:b5:89:84:93:
7b:b6:5a:c1:62:0c:50:62:3e:f2:33:de:bf:fc:6a:fc:38:d5:
37:5a:e3:27:ac:33:2d:dd:f7:87:84:ef:fa:d9:4b:44:ed:bf:
d4:14:3a:57:59:76:10:5c:1d:2a:e2:e4:7f:db:80:b8:1c:1e:
56:4e:e7:03:c7:ce:9b:c5:4f:65:b0:fd:fe:78:e7:cb:c9:22:
fa:11:ae:e5:6c:2f:08:3f:53:98:8e:80:35:91:1c:14:f0:ba:
63:4c:55:74:d5:c8:bd:83:fc:30:1b:1c:83:58:79:8a:09:cb:
9c:38:c2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:46 2025 by rpki-client