Manifest
$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: YIqieFTFfOgnmBBBBT0tkdIDaftv7DXcWbuGsMQAlik=
Subject key identifier: 5D:E7:BB:AC:22:EF:54:FE:0D:62:B4:81:76:75:22:27:2A:89:64:8D
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 41EEECF5B258A1FD7E945FFEDAA21C3C7557E69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 0400
Signing time: Tue 13 Oct 2026 10:00:50 +0000
Manifest this update: Tue 13 Oct 2026 09:55:49 +0000
Manifest next update: Wed 14 Oct 2026 12:48:49 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: TUErL6WWBWfNa4iDKfOYe/+yIPe9+QHTzkI4EeMHNvM=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ee:ec:f5:b2:58:a1:fd:7e:94:5f:fe:da:a2:1c:3c:75:57:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Oct 13 09:55:49 2026 GMT
Not After : Oct 14 12:48:49 2026 GMT
Subject: CN=5DE7BBAC22EF54FE0D62B481767522272A89648D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:a0:2d:56:b5:cb:54:a9:b7:78:ab:89:87:
ef:11:e7:f0:07:3c:89:9c:d3:51:64:2e:ab:f3:e0:
88:d1:8a:c4:63:9e:91:71:d0:55:ed:73:85:b6:01:
71:b9:ac:89:08:1a:36:aa:41:8d:d7:3b:12:89:ab:
10:bb:0d:c0:ca:f4:2d:09:48:2a:7c:03:32:b7:2d:
7a:af:6d:64:2e:44:01:1f:a5:c4:3c:32:19:b6:34:
90:b9:6b:7b:60:3b:f0:c9:10:52:db:8d:f7:3c:82:
0f:40:42:6e:bf:90:8d:a0:42:20:50:70:58:35:c3:
52:20:32:47:4c:a3:dc:83:d1:8e:28:16:32:f5:1c:
c2:f3:1c:38:85:90:ad:41:f5:e5:58:eb:a0:fb:e4:
84:d2:79:90:b5:af:ea:ac:7e:04:20:2e:6f:6c:f2:
4f:11:9a:a5:96:68:e2:95:5b:93:c8:ca:ee:2d:91:
93:b2:f5:2a:c7:b9:4d:37:41:27:32:e2:36:2a:c5:
83:4c:12:cd:24:d6:8c:eb:6e:37:74:56:01:51:64:
5e:fc:f5:17:4d:79:3f:61:e8:ef:bb:e8:fd:d5:72:
a9:f7:c9:88:18:4b:b4:51:d4:77:84:86:f6:dd:19:
59:aa:93:1c:65:1c:d0:0a:71:5e:f4:a1:50:b5:5b:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E7:BB:AC:22:EF:54:FE:0D:62:B4:81:76:75:22:27:2A:89:64:8D
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:23:00:a1:47:5c:6d:d3:13:7f:e2:d4:07:7a:73:3a:02:
3c:0a:4c:27:69:2a:1d:d9:d0:9f:99:fb:6e:bf:72:90:a8:2a:
5b:70:f7:30:a9:2e:be:0b:92:2b:b4:2d:8a:57:4d:f9:2a:aa:
2f:90:d5:85:98:fe:69:5d:65:79:b2:59:d2:72:dc:84:d9:57:
17:cb:9d:39:f2:6e:39:ea:88:85:01:6a:c4:21:3f:43:24:3e:
f3:e2:06:c8:13:2a:4a:e0:6a:4c:37:fa:59:4b:f4:9a:14:e7:
8b:80:47:ce:b3:de:b0:32:1f:33:b4:4d:68:35:9d:ed:6b:78:
f9:ad:3a:dc:a2:86:e7:38:ed:61:3f:b7:92:22:96:6c:67:e6:
30:dd:58:11:ba:db:cc:1e:f9:6e:b5:56:aa:d9:7a:3c:d0:a9:
b0:5a:81:d6:bd:03:67:85:c8:e1:2c:ae:da:8e:a4:87:e8:f5:
2c:ed:ac:b8:6b:20:97:f8:8c:d0:90:86:69:92:8a:1e:d0:df:
94:73:44:95:38:6c:71:73:e7:2d:e5:20:53:4e:f2:f4:01:29:
48:2e:8d:7d:b7:42:15:6b:92:46:02:06:30:5d:f5:cf:f1:e4:
f1:3c:74:02:e9:74:1b:67:11:45:63:18:fe:ea:a0:10:2c:70:
ca:1a:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:45:53 2026 by rpki-client