Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: EGvy50GEvh5MVHs/NhPprLRyC8aG9HehZd+eDsVmrZY=
Subject key identifier: ED:DD:54:B9:FF:E9:39:2C:BD:DA:1C:46:B3:DC:2A:EC:95:20:AC:76
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 36E0CEF4B64D8A775A3B6C43D8945F019ADD22C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 0258
Signing time: Sun 19 Oct 2025 23:10:55 +0000
Manifest this update: Sun 19 Oct 2025 23:05:55 +0000
Manifest next update: Tue 21 Oct 2025 01:09:55 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: ly1QlO4qYrMFFNmngbKu8pqsmvFjl/cvkB/OMUUy7y8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e0:ce:f4:b6:4d:8a:77:5a:3b:6c:43:d8:94:5f:01:9a:dd:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Oct 19 23:05:55 2025 GMT
Not After : Oct 21 01:09:55 2025 GMT
Subject: CN=EDDD54B9FFE9392CBDDA1C46B3DC2AEC9520AC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:6b:43:75:5b:8c:0a:7d:3d:5d:b9:23:87:
22:64:c3:10:85:4a:97:3e:a7:9b:a2:08:12:68:e9:
22:1b:a1:67:be:bd:3a:74:f2:58:1f:8f:5f:01:c1:
e3:ef:2d:65:11:5d:90:6a:16:95:91:d7:08:6e:cc:
63:a3:96:b0:f1:74:37:5f:04:0b:20:2f:5b:26:ab:
0c:96:c4:6b:c7:24:73:0d:ac:47:b1:5f:be:0d:61:
f9:00:84:46:ef:e0:31:1f:b0:26:4b:0c:32:3a:1d:
03:15:54:ed:f4:21:3d:c1:5c:6a:ac:48:82:1f:b2:
92:c2:5e:d9:e6:2f:c9:94:eb:76:ad:a0:fa:43:31:
b1:7f:77:88:ac:53:e0:79:29:58:8a:ab:c4:90:32:
9d:ee:21:63:97:42:87:7d:31:3d:8e:6b:3a:e8:2a:
e8:a5:ab:5b:68:da:a0:0f:78:bd:71:c0:e5:34:48:
96:2e:e3:d6:46:3f:bd:7d:e3:2d:ab:73:a0:62:71:
03:9f:67:3f:dc:82:ed:50:14:ad:eb:d5:33:68:87:
44:a3:4b:68:a4:1d:5a:90:3c:a7:19:97:3f:7d:61:
f9:d5:60:9c:93:f9:42:3a:a5:f1:c6:7f:56:79:33:
fb:00:09:a7:86:1c:f7:a8:9c:7d:71:56:d0:33:a8:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:54:B9:FF:E9:39:2C:BD:DA:1C:46:B3:DC:2A:EC:95:20:AC:76
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8b:a3:4d:08:8f:2e:dc:32:8a:38:88:cd:49:51:3c:63:77:
f7:6f:78:f0:3a:8c:62:d7:38:35:4e:ec:17:4e:0a:6b:08:61:
7e:04:a0:64:7b:2f:0d:fc:68:92:bf:01:91:3b:3f:1e:72:57:
c5:90:ad:03:a4:af:cf:58:b3:db:80:41:1a:78:7d:00:f7:b4:
b1:08:71:b0:64:ce:3c:28:eb:c5:68:5a:50:ff:06:c2:ae:6e:
ca:aa:0f:08:bc:1e:7a:37:f9:94:d9:ae:4d:17:a9:20:a1:a0:
54:14:85:fd:9b:62:ef:e7:1e:a1:9d:26:d3:bb:ea:1a:03:51:
66:cf:fc:26:5b:51:6a:3a:45:70:d0:48:f6:0c:d0:03:b6:e8:
df:b4:48:3a:71:16:ff:74:d4:d2:f5:c3:d8:f6:e0:d6:b7:81:
34:16:5a:ef:29:21:7f:f7:1a:93:93:d7:15:c3:43:3c:e4:f9:
d1:9a:c3:66:b6:5e:a4:a9:a9:dc:e5:d9:5c:cd:7a:87:ea:5e:
84:3c:e1:3b:57:f1:ea:39:06:ff:73:8d:c4:db:61:83:0e:28:
cc:ac:3a:ff:6c:02:f2:53:89:b6:58:cc:38:ea:b4:a5:e6:0e:
93:17:68:49:00:c9:bd:af:36:23:04:34:13:45:50:c4:40:bb:
46:b3:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:15 2025 by rpki-client