
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json)
Hash identifier: XsZsWbhn7VcvJcrFCi14BGCfOaajBl46hJroOAiUm9I=
Subject key identifier: 57:B3:05:6D:ED:EA:CD:53:9D:D2:D5:C8:42:33:62:26:AA:DD:73:E4
Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Certificate serial: 76839786E0F58B4FFF379F307D7604F010A34151
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
Manifest number: 0260
Signing time: Mon 27 Oct 2025 05:51:56 +0000
Manifest this update: Mon 27 Oct 2025 05:46:56 +0000
Manifest next update: Tue 28 Oct 2025 08:11:56 +0000
Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: 56wdj4LexrvmS/CvEwVKhdwI/DYnTzl2JppuKCLBz4g=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:83:97:86:e0:f5:8b:4f:ff:37:9f:30:7d:76:04:f0:10:a3:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6
Validity
Not Before: Oct 27 05:46:56 2025 GMT
Not After : Oct 28 08:11:56 2025 GMT
Subject: CN=57B3056DEDEACD539DD2D5C842336226AADD73E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:db:04:e8:2f:a2:17:27:4d:32:50:15:01:
6b:73:ee:3d:5a:da:c1:d1:f7:57:6b:24:3d:db:4d:
5f:a5:9b:22:5e:14:95:b9:80:d8:a3:f0:f9:5a:03:
66:90:17:25:df:de:0f:6a:45:fb:7d:43:51:2f:1a:
3c:a8:f2:b0:0d:66:16:5d:13:67:e8:65:67:c0:98:
29:b4:f2:fb:b2:30:aa:0d:40:4d:a1:09:96:8b:d2:
b2:7b:34:bd:a1:df:1f:5c:07:26:fe:71:e6:0d:b1:
f0:28:f5:86:45:99:88:ee:0c:9e:55:19:da:05:b8:
e8:3e:6c:73:11:f0:7c:80:23:2b:11:19:54:2a:f8:
10:95:1a:20:b3:8c:0f:c2:5b:fc:37:ae:64:b9:2c:
5c:20:5a:24:b2:11:1b:5a:35:29:98:7d:d0:3a:7c:
9e:3f:da:a6:1c:8b:22:38:52:63:7b:8d:5c:f3:55:
86:c8:c2:df:19:3e:d5:dc:54:63:f8:d4:2e:6f:16:
37:de:01:40:bf:b7:f9:95:4b:24:34:87:96:ee:23:
aa:0e:3f:4c:36:8a:72:91:7e:e1:e4:31:c1:ed:4f:
d6:8d:7a:72:4f:fe:ab:1a:97:d3:2f:fa:9f:e4:28:
0f:58:1d:e9:e7:b0:1f:df:22:1d:27:c1:a5:7e:14:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:05:6D:ED:EA:CD:53:9D:D2:D5:C8:42:33:62:26:AA:DD:73:E4
X509v3 Authority Key Identifier:
keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:71:8d:be:d5:0b:fc:19:c0:46:b9:6d:02:4e:74:d7:99:d9:
53:c1:e5:9a:dd:fc:f0:06:9f:f6:86:c4:f5:8d:4a:38:b5:32:
78:ca:9d:cd:4a:0a:10:12:f3:5d:25:b0:a9:d3:ca:a3:ac:9f:
08:ea:e5:16:f1:2e:52:c0:78:7e:38:74:e9:84:36:16:ac:7b:
2d:b0:aa:28:2a:dd:36:b8:44:d2:c5:2b:32:05:90:27:ac:8f:
ef:38:d1:bf:4d:6d:a9:2d:72:41:3a:64:72:0a:82:3d:c4:3d:
d5:32:b2:e0:61:70:67:7c:28:64:ef:bf:14:cd:46:db:e0:98:
46:4b:91:be:65:de:4a:3f:33:16:3c:56:36:3c:88:3c:c4:ad:
9c:f4:14:01:ad:c1:59:c1:58:69:5c:05:59:4c:28:72:a6:40:
2f:4d:e8:9f:76:76:3b:a1:f3:0a:39:4b:70:28:e2:80:09:c2:
88:c2:bd:da:26:c0:08:f4:2c:97:33:09:08:0c:00:19:20:b5:
fe:ae:aa:e1:80:0f:59:dd:9b:98:37:37:83:80:b6:49:89:45:
26:c4:bf:56:6c:24:c0:81:4f:a8:43:b0:3b:2a:f8:82:e3:3f:
34:2d:5f:a8:ef:95:7d:d3:d9:9a:4f:7e:44:cb:c4:c7:5b:e2:
02:92:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:19:39 2025 by rpki-client