Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: qG5InURygpWtMSKYDjoPxjEz7yPKDP23fk5VXLWbirc=
Subject key identifier: D3:3D:D4:55:51:1E:1F:73:71:BC:9E:07:86:04:E2:F9:7C:21:C3:AF
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 3C97B4C140A3A3E6153E8171794765F74E9FBD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 01DB
Signing time: Sat 28 Jun 2025 06:40:30 +0000
Manifest this update: Sat 28 Jun 2025 06:35:30 +0000
Manifest next update: Sun 29 Jun 2025 09:18:30 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: BcDgzok4iMamJ/rDuGQ3VJc+s3a30I9YyNGeH6f+zTk=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:97:b4:c1:40:a3:a3:e6:15:3e:81:71:79:47:65:f7:4e:9f:bd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Jun 28 06:35:30 2025 GMT
Not After : Jun 29 09:18:30 2025 GMT
Subject: CN=D33DD455511E1F7371BC9E078604E2F97C21C3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:82:71:c7:db:1e:8f:38:00:95:07:3c:20:
e5:ca:6c:ac:46:40:24:80:af:da:dc:21:9a:37:cc:
f0:81:d0:f0:b4:00:2b:34:a9:c4:49:a8:1a:d4:29:
54:0b:eb:d6:9b:e0:45:c5:29:2b:b5:8b:73:6f:8a:
eb:6e:22:55:0c:eb:c4:5d:56:09:11:21:fc:1d:e0:
76:1b:df:17:58:b8:25:bd:90:fa:d0:df:06:2c:fc:
99:cc:2b:06:86:f1:dc:50:59:bf:78:a7:ee:78:ec:
e4:58:5a:83:16:4e:59:87:51:7a:83:e6:e6:ed:d6:
a3:2e:54:ad:8a:5a:06:98:37:cb:2d:4e:58:3f:1b:
84:16:04:8d:17:0c:43:84:46:d5:20:cb:df:0f:37:
48:dc:a4:a5:30:26:ed:54:54:ba:8c:1e:8a:7e:4e:
03:39:2c:e6:17:53:83:f4:27:ab:66:0e:9d:0e:36:
5c:9d:b8:de:92:5b:3f:44:0c:cb:05:97:a2:cd:93:
64:0d:61:d6:22:30:0d:ba:2e:e8:8d:3b:b3:95:1f:
ef:df:3c:9b:d9:99:fd:2e:5d:e1:a2:14:25:44:6a:
5f:35:53:82:c5:db:51:91:db:d8:74:57:6a:44:3d:
9d:c3:81:b6:9c:ad:f3:85:af:bb:65:8b:52:e0:1c:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:D4:55:51:1E:1F:73:71:BC:9E:07:86:04:E2:F9:7C:21:C3:AF
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:45:96:0d:b7:b0:56:6b:ba:2b:57:0e:c2:d6:b9:b5:fc:
9f:b0:5d:59:fc:63:de:e9:e9:09:48:6d:a1:f7:89:bd:a2:40:
2b:2f:d6:78:36:2b:12:3f:62:38:55:c9:93:15:7d:5d:ac:c4:
ad:64:14:e1:98:d9:37:e7:57:e0:95:50:4d:a0:7c:ea:ee:0a:
9f:05:7f:d0:aa:19:49:75:32:65:ea:bb:59:f8:e7:24:27:8e:
11:6b:4f:2a:aa:19:b5:85:65:fb:40:31:2c:18:d0:3b:9e:96:
23:be:19:bc:5c:f5:1d:50:fe:33:16:b5:0e:70:e5:9b:10:f1:
92:3c:aa:94:73:8a:53:6b:0c:68:5d:2c:c4:1d:d0:7e:16:2b:
d7:b3:4e:c6:37:4c:71:83:01:63:97:27:3e:b6:f5:78:ce:d3:
af:5b:2d:50:47:bf:ce:86:12:ef:af:f1:e5:de:e7:87:d1:71:
5d:df:61:74:7c:35:8d:98:cf:e4:5d:e3:22:b2:00:39:4a:5c:
1a:3e:05:97:c8:2b:4e:ad:df:cd:20:71:b9:a8:44:6a:c4:20:
bc:79:2d:71:07:16:0d:a1:e8:d0:7d:08:fd:3e:33:d0:8d:9c:
31:af:05:43:95:30:9b:45:67:2e:ec:12:71:4e:3d:60:ed:2e:
b8:75:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:07 2025 by rpki-client