Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File: B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier: mnTYD/tG0go62qJkpQvqfSf752QKqUf/vD98AlR38Ig=
Subject key identifier: 2D:4F:DC:E6:31:FA:E4:96:F5:2E:7E:89:F7:45:B4:4B:38:52:7D:44
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer: /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial: 72A3926A327F42A6E9A9BFB85F6F0D37778E7DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number: 017D
Signing time: Sun 20 Apr 2025 18:48:09 +0000
Manifest this update: Sun 20 Apr 2025 18:43:07 +0000
Manifest next update: Mon 21 Apr 2025 19:07:07 +0000
Files and hashes: 1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: 8CiZrM+5Fv5Am2MzQu/U0xFFY7CL2G9rrnYMYsZBGZo=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a3:92:6a:32:7f:42:a6:e9:a9:bf:b8:5f:6f:0d:37:77:8e:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
Validity
Not Before: Apr 20 18:43:07 2025 GMT
Not After : Apr 21 19:07:07 2025 GMT
Subject: CN=2D4FDCE631FAE496F52E7E89F745B44B38527D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:d8:19:0b:b3:9c:7c:6e:7d:01:bf:be:73:
5f:29:fd:9e:8a:67:37:a4:3f:a4:fd:38:f2:ae:0f:
4d:18:b8:20:56:a2:11:c3:08:c4:b3:ea:77:f2:5d:
a5:6c:0e:ab:8a:36:d5:40:27:e1:77:34:72:eb:a3:
c8:b4:36:ba:20:d9:ec:ad:d0:ba:fd:fd:3b:82:0d:
e4:e6:40:fb:b0:78:80:a9:cb:14:a3:25:4f:05:72:
6d:dc:15:d2:30:24:ea:f1:f6:2b:ca:ad:90:9b:9e:
b5:0e:2d:56:5f:47:73:18:2c:8f:88:96:e1:21:02:
5e:f4:af:fd:32:cf:37:e9:a9:a0:95:8f:db:8a:46:
15:3f:e0:73:de:aa:75:d1:26:c9:ca:84:16:a8:9c:
a8:f4:54:0d:a2:31:46:cd:3a:d4:5b:b5:d0:b9:11:
a2:3d:d1:dd:bc:94:62:24:cc:93:b4:30:54:ce:21:
23:43:0c:e1:06:af:c9:00:d2:7f:d3:c3:6b:8e:de:
37:d4:91:c4:ce:aa:4a:26:a2:39:47:b5:a3:58:c8:
6a:36:df:31:ee:c6:b2:e3:88:1c:64:1e:be:69:9f:
4c:a2:8e:59:3b:bd:9d:be:67:91:60:13:b4:65:30:
b4:31:8d:60:3a:31:f0:99:e6:76:9b:39:47:2a:c7:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:DC:E6:31:FA:E4:96:F5:2E:7E:89:F7:45:B4:4B:38:52:7D:44
X509v3 Authority Key Identifier:
keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ef:be:a3:e3:64:69:8b:bd:8b:2f:5e:da:b9:64:0f:8a:72:
3f:af:d1:ed:02:b1:34:66:15:7b:dd:57:52:2a:19:61:73:6a:
f8:2e:28:21:a4:03:26:5b:94:5b:ae:2b:cd:03:f1:92:6f:3c:
f1:30:92:e6:12:fc:19:f9:57:7d:66:f2:33:3b:2a:1c:c5:31:
75:b5:66:2b:47:42:09:f3:33:46:d5:f9:2a:3f:14:2d:5a:32:
f3:08:28:30:26:3b:63:a3:68:d1:db:ee:c6:69:10:da:5e:27:
57:c2:ba:dc:34:06:db:fb:89:26:c5:e2:ca:42:ec:bf:b9:c5:
83:22:de:2f:bc:d4:f7:10:0b:58:c4:bf:e8:33:90:3e:4d:8f:
a4:2d:56:43:85:af:8c:f2:2c:62:57:2b:45:ce:59:c5:c3:d8:
a2:24:27:41:48:3d:b7:99:33:f5:af:65:34:7c:ee:28:04:b5:
47:61:57:0f:09:2a:8a:b2:b1:22:97:b8:50:b7:fe:36:86:e4:
ec:0c:33:48:56:11:c2:28:5c:c3:39:2b:dd:54:1d:5a:7b:e9:
43:6e:27:34:d8:4f:2f:a5:ce:8e:93:e0:53:e0:18:fe:b5:55:
f1:81:dd:e1:40:80:cf:a3:e4:7f:9a:fd:0c:2d:c8:16:fb:74:
f8:2c:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:15 2025 by rpki-client