Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: a7mD8ujK71vN3OEH6ZVNFB70lxpbnV/RD1P6sFtRVRU=
Subject key identifier: B2:09:F6:41:70:A8:0F:EC:39:5F:E4:41:45:89:5C:B4:12:83:BA:FE
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 1D423857E1B98974784329B605B55530FC39094D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 03A7
Signing time: Fri 24 Jul 2026 12:10:41 +0000
Manifest this update: Fri 24 Jul 2026 12:05:41 +0000
Manifest next update: Sat 25 Jul 2026 14:07:41 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: mHMLS4mRhwpSP0RbQVnWtfI7lcsePWfbAKoSmKgUtps=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:42:38:57:e1:b9:89:74:78:43:29:b6:05:b5:55:30:fc:39:09:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Jul 24 12:05:41 2026 GMT
Not After : Jul 25 14:07:41 2026 GMT
Subject: CN=B209F64170A80FEC395FE44145895CB41283BAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:0c:74:50:2d:00:d6:f6:38:3e:44:fb:77:
49:13:07:58:82:be:a5:6f:08:b4:77:16:8c:8c:38:
72:23:24:5d:ae:f8:bd:54:00:2a:8f:b5:a7:47:65:
6c:63:1f:0d:c4:3f:9a:38:15:85:34:05:2f:74:7b:
18:9e:63:fb:7e:2a:84:64:a0:14:fc:16:24:45:f4:
e7:39:fe:c0:19:25:3b:3c:5b:fd:3d:a6:ca:c2:7e:
c8:36:90:b1:53:39:94:e9:84:b6:1d:e5:c4:15:ed:
ff:5b:a3:cd:15:d9:2f:4f:61:85:c5:2c:3f:63:8f:
43:8f:c8:0a:b5:08:ba:33:b7:0a:ee:7b:3e:3b:ab:
27:05:45:b6:5b:5b:5d:d7:cd:38:12:a4:54:27:20:
59:6d:98:30:9a:ef:2d:7b:69:b1:5a:e8:8b:72:7d:
f9:72:3b:8e:3b:8d:f2:ac:e0:cc:47:26:3d:7a:1b:
ac:a0:ce:3d:96:38:58:b9:5c:af:9e:89:6d:b8:a3:
e2:4b:cc:03:47:38:93:b0:73:02:ee:3b:8d:91:1c:
4d:5a:c6:a8:21:22:a4:0e:eb:8d:99:7e:1a:d8:22:
94:d8:25:f2:8f:82:b0:63:78:40:2f:6e:7d:3c:35:
4b:b1:39:77:16:33:53:f0:aa:6f:fb:f1:cb:cd:b6:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:F6:41:70:A8:0F:EC:39:5F:E4:41:45:89:5C:B4:12:83:BA:FE
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dc:7b:da:88:24:63:54:23:ad:98:ba:4d:03:7a:d7:1a:90:
ee:6c:8c:f8:0f:3a:88:68:4f:86:bb:45:bd:48:8b:8f:e1:b4:
20:4f:db:cd:c1:00:e0:66:68:d2:4f:bd:4f:b0:94:d4:f9:27:
c4:a7:82:ae:80:5a:fa:8e:31:76:cb:d1:56:f4:e7:a8:2a:df:
c0:1e:ac:4b:a0:e9:b5:c6:59:61:b7:d5:c6:58:72:ae:e2:92:
46:de:41:9b:90:20:e7:56:f9:dc:ca:90:b3:7f:52:45:fc:a7:
3c:c9:c0:a5:ba:85:46:6e:25:60:6a:39:41:fb:6b:af:2f:8c:
92:aa:1a:91:15:63:4d:4e:84:20:97:ad:2d:e7:ed:a0:34:e8:
2b:61:36:c1:35:85:99:8b:60:96:c4:d8:0f:60:0c:e9:f3:9c:
0a:36:99:a2:7c:23:27:cb:fc:cb:22:34:b4:e7:d5:73:bd:bb:
dd:27:63:5c:8d:fe:f2:1a:b0:12:90:8b:61:77:2d:ef:72:2a:
aa:20:ae:5d:4d:0f:34:09:03:d7:f9:ea:61:50:74:34:1f:8e:
07:65:e5:18:53:f1:3e:8a:1f:b7:67:74:04:c9:77:3b:4a:45:
6b:6e:38:89:7c:7f:27:27:93:ed:3a:18:4d:26:e8:c2:61:da:
11:27:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:52:59 2026 by rpki-client