Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File: B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier: KkUHUsd3aNDZRWfqhD9BgX6qb/9VNroxADcHP8ideBw=
Subject key identifier: 9B:AC:28:01:B6:A7:48:38:3C:AD:D1:F1:98:AB:69:49:BC:90:63:3A
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer: /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial: 1C4138DD7820333E369AAC0D58ED8DA05A3621A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number: 0309
Signing time: Sun 29 Mar 2026 04:36:26 +0000
Manifest this update: Sun 29 Mar 2026 04:31:24 +0000
Manifest next update: Mon 30 Mar 2026 08:10:24 +0000
Files and hashes: 1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: lh1mftF9xOEM/ck5vj40XQ3W2WLS1h4MRjDRVOcPLbU=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:41:38:dd:78:20:33:3e:36:9a:ac:0d:58:ed:8d:a0:5a:36:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
Validity
Not Before: Mar 29 04:31:24 2026 GMT
Not After : Mar 30 08:10:24 2026 GMT
Subject: CN=9BAC2801B6A748383CADD1F198AB6949BC90633A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:a7:e3:bc:8e:7c:19:54:2f:33:77:32:7e:
dc:91:e3:0c:2d:48:61:be:02:02:bd:9f:c3:89:51:
34:0e:15:6f:1d:89:25:54:99:4a:c4:c0:46:4e:40:
b4:26:2a:81:de:78:71:15:2e:41:d2:68:f2:bd:bf:
38:7a:cf:30:14:14:3f:89:90:43:73:94:cd:36:5c:
95:c3:50:26:79:d2:e9:ef:8b:d3:df:ac:04:d9:c4:
25:c2:06:2f:52:68:de:24:3e:fa:f7:1a:b8:fb:0c:
0a:89:3c:2e:05:51:0d:cb:87:02:c3:ff:de:a8:52:
d9:72:5c:2b:dc:a5:f8:40:79:19:d8:bb:f6:7d:96:
fe:dc:e4:0a:b7:13:f0:38:8e:c8:05:a4:01:45:42:
ac:62:74:d7:b4:e4:bf:72:4b:72:08:90:08:6c:81:
ec:03:28:a7:14:8d:dd:04:56:66:69:81:e9:9b:1d:
c8:74:94:d9:69:2f:a8:79:7f:b7:53:57:b1:56:c0:
e4:16:e0:ea:cc:55:21:c2:2d:15:34:18:3a:7a:41:
6c:bc:6a:79:10:d0:ad:c9:2f:e5:b3:d4:ff:9f:1a:
0c:bb:54:14:3f:31:60:e1:0b:5c:85:ab:e5:66:98:
53:ff:d9:e7:2b:84:b8:79:51:90:01:fe:33:a8:93:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:28:01:B6:A7:48:38:3C:AD:D1:F1:98:AB:69:49:BC:90:63:3A
X509v3 Authority Key Identifier:
keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:26:81:f1:94:d1:0a:88:01:0b:c7:0e:d6:16:95:d1:04:71:
19:eb:c3:03:b5:f1:01:aa:a0:95:1f:61:57:19:17:6d:b7:12:
69:af:2f:d6:5c:38:f9:49:c6:a6:1d:7f:7a:50:90:e2:78:5d:
4b:be:47:a0:88:f2:f6:63:22:50:84:69:76:69:ee:52:26:46:
26:c2:e4:0a:b6:bf:5e:d7:98:a6:40:93:b1:da:f3:b3:ad:f4:
6d:bb:ef:b9:ce:19:71:f3:b1:09:77:4c:33:f7:3e:46:b5:6e:
2b:27:a9:a1:90:82:db:70:f1:50:45:19:d4:9b:6f:84:2b:e8:
9b:b4:0c:e8:a0:a1:c2:a7:b7:b1:d2:99:67:ba:81:be:d1:9e:
90:c4:6e:eb:5b:a6:a5:4d:c2:44:26:bd:11:e8:5d:31:42:5c:
5c:3e:29:ca:c6:4b:44:43:15:86:55:25:7e:f6:fa:f5:64:6f:
43:c8:bd:92:91:9f:4e:61:25:0f:08:99:85:87:d8:87:14:f5:
9d:c9:4d:1c:c3:94:3b:27:c6:01:23:f2:bc:e1:88:2e:3a:f2:
dc:24:13:ef:21:c7:d0:0b:4a:8f:8f:d3:74:e7:71:6a:d7:f7:
23:83:76:fa:a7:4b:dd:ef:a0:c4:ca:ab:39:29:83:a0:86:98:
77:f6:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:28 2026 by rpki-client