
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json)
Hash identifier: gAHKR4xDMuCRlCsQFm59DrkSzzbt1LBTBAdIgd0Dev8=
Subject key identifier: BA:53:15:A1:C2:21:1D:77:92:A6:99:4E:23:22:03:CA:13:04:57:90
Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Certificate serial: 04738C9DCC979F0D4C824DB34AA657655D8BF3AB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
Manifest number: 0345
Signing time: Tue 12 May 2026 18:19:42 +0000
Manifest this update: Tue 12 May 2026 18:14:42 +0000
Manifest next update: Wed 13 May 2026 20:59:42 +0000
Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: QZpFbSInAo9N75QyOhAPLFD1wKHSeI5GRNKTDmXgZYc=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:73:8c:9d:cc:97:9f:0d:4c:82:4d:b3:4a:a6:57:65:5d:8b:f3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E
Validity
Not Before: May 12 18:14:42 2026 GMT
Not After : May 13 20:59:42 2026 GMT
Subject: CN=BA5315A1C2211D7792A6994E232203CA13045790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:a5:c6:70:e1:fa:05:0f:37:67:d3:88:eb:
d6:e9:48:45:ce:ac:60:37:34:82:94:23:1f:d1:03:
db:1c:98:d2:b3:94:d3:79:8e:7c:5c:7c:0a:e9:c9:
d3:12:22:b3:5f:31:f7:44:a4:b5:24:8b:42:99:42:
f9:ea:77:ac:5e:d1:6c:d3:24:20:93:5b:26:2e:66:
df:6d:56:c6:5d:19:58:ad:5d:0d:ee:f9:35:0f:00:
7d:8f:c7:89:8f:f5:93:1f:8c:72:a4:00:17:6f:68:
39:7d:ba:20:94:89:58:0d:9e:f7:99:c7:1f:6f:06:
76:24:ae:62:89:58:bf:17:d0:24:23:75:13:91:3c:
6b:74:dd:bc:e6:f3:3b:bc:7c:10:10:3a:45:a9:13:
18:41:07:c7:2b:db:8c:5e:7f:9f:95:ef:06:92:52:
e3:23:04:e5:2f:03:2c:91:3f:b3:16:a1:94:9a:80:
bd:14:44:e6:d5:bd:52:2e:2a:a3:d5:ee:13:6b:14:
57:cf:22:d3:fb:4e:6e:16:99:9e:24:89:2e:75:30:
77:42:aa:8a:07:58:eb:ef:e9:00:41:ac:9f:40:ae:
8e:c4:15:9b:43:aa:84:81:bd:7d:77:df:ba:9c:a2:
11:cc:41:45:d1:3d:58:64:60:24:fa:00:d8:30:2e:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:15:A1:C2:21:1D:77:92:A6:99:4E:23:22:03:CA:13:04:57:90
X509v3 Authority Key Identifier:
keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:26:72:56:aa:41:d6:72:04:5d:96:31:9d:b8:08:68:66:de:
79:39:04:ea:17:24:41:f3:23:51:de:42:b4:f0:fa:6a:0b:cb:
43:cd:d3:24:05:f5:93:03:aa:a3:f7:4d:d4:a3:61:67:42:db:
6e:96:b3:6d:a8:5e:a6:d8:fd:64:1b:3b:bd:51:fb:bc:d8:eb:
17:3c:2f:8f:43:ba:0e:e2:61:fd:c3:6c:ba:6d:97:2a:bd:a0:
fb:4d:68:af:5a:d8:95:49:4a:fa:8a:0b:26:08:c7:64:c5:95:
0e:26:2c:bf:5f:e4:1b:4f:c8:69:64:4c:6b:84:36:69:cc:3e:
90:a5:dd:e8:6d:d6:64:74:ad:22:88:0a:52:0d:1e:04:cd:77:
b8:ac:26:84:b4:60:b2:ac:68:f3:18:c1:0e:83:78:73:41:a3:
51:5c:d6:3d:f7:bd:32:64:59:8f:8a:9e:f6:37:79:15:c7:9d:
13:c9:72:e1:09:18:59:ce:88:f3:58:6d:a8:b5:39:07:b8:60:
91:06:79:9c:8c:f8:a3:b6:02:30:f0:83:c9:88:dd:18:ef:ee:
8d:27:68:4c:ed:80:20:34:88:e6:1b:84:da:fa:6d:81:b1:1e:
36:28:43:d4:c2:f4:ea:0b:b2:7f:b0:5f:78:94:7c:9b:20:c0:
d2:54:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:13 2026 by rpki-client