Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier: DYJLFTFHpJ3GbTot4gEmvVxKF/m0cz98u50xn7CokGo=
Subject key identifier: 36:90:8E:81:5D:21:98:A2:60:91:7E:B6:C4:F5:92:7F:B9:13:99:4F
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial: 3F86AE41CCC129F38291BF56BC3692A84BF9D984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number: 0255
Signing time: Sun 19 Oct 2025 18:20:29 +0000
Manifest this update: Sun 19 Oct 2025 18:15:29 +0000
Manifest next update: Mon 20 Oct 2025 21:19:29 +0000
Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: y3M8GHqm5/kPs3R2JIBN9+fvznZuQCydS80KJo+BA0c=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:86:ae:41:cc:c1:29:f3:82:91:bf:56:bc:36:92:a8:4b:f9:d9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Validity
Not Before: Oct 19 18:15:29 2025 GMT
Not After : Oct 20 21:19:29 2025 GMT
Subject: CN=36908E815D2198A260917EB6C4F5927FB913994F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:31:27:9e:d0:6f:37:31:5f:b8:b5:35:46:
f0:4c:04:a0:67:f8:b1:74:61:43:e0:99:1e:d3:ca:
51:8e:60:ae:b5:23:67:ef:cd:1d:a5:25:6c:dc:ee:
d6:3f:a5:6c:66:00:a5:99:7b:9b:5b:04:a7:c3:65:
3d:d4:c0:d5:2f:7d:47:63:80:b8:f9:e5:40:f3:da:
3c:c0:f6:f3:71:d3:60:20:ab:a0:13:bf:55:38:5e:
dd:b3:11:69:9d:25:43:47:12:57:5a:20:ce:be:f9:
17:74:a7:03:a3:f9:b9:96:f8:03:b8:2b:cc:b5:e2:
63:62:f9:9b:84:c7:42:64:28:fe:74:ed:f7:ff:b4:
a9:1b:d5:1a:8a:9f:a3:4a:40:e9:23:68:36:4b:1b:
26:20:cf:2d:1f:4d:0e:89:6c:b6:00:cd:5c:3b:51:
0f:eb:bc:1c:1f:8b:22:06:e7:4f:be:ea:46:92:19:
af:f0:8b:4e:19:c0:69:f7:09:7b:59:70:26:ff:61:
2c:d4:1f:4e:67:4e:54:d5:bf:ba:2b:9c:ec:87:83:
48:39:c1:27:25:74:cd:8c:e2:45:37:bb:30:69:88:
0a:a5:ce:cd:e9:5d:53:58:fa:47:d0:75:94:bb:58:
f9:94:49:e9:cd:38:60:92:60:71:e5:6a:b6:38:26:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:8E:81:5D:21:98:A2:60:91:7E:B6:C4:F5:92:7F:B9:13:99:4F
X509v3 Authority Key Identifier:
keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:40:69:cb:f1:45:48:1a:14:eb:6f:c4:32:49:55:db:c4:6f:
f7:9c:85:f8:b5:1d:0f:6f:38:e2:1b:e8:ed:55:8a:09:2f:1c:
52:ed:cb:e7:76:d3:d8:ba:3f:95:86:86:db:a0:db:22:46:1a:
b7:33:34:14:f8:29:b3:0c:1e:71:f8:a0:26:dc:6c:17:ee:9e:
43:49:b7:0e:39:80:75:fd:ac:d5:24:68:66:49:df:6c:9c:b0:
e2:e1:bf:55:24:57:23:fe:23:bc:ad:e2:c5:03:73:9f:06:5d:
62:81:e4:5f:9c:33:af:c4:91:b5:c2:c7:7c:28:27:50:3c:f6:
de:46:33:fc:1f:5f:3f:b0:99:d4:80:95:02:51:a8:f6:91:fc:
97:66:c1:81:01:bc:5a:bb:c1:bf:49:d8:a4:c2:b7:eb:3f:cc:
67:53:ae:99:44:cf:04:43:a9:6e:bd:c2:9f:13:1b:2d:e9:9c:
ed:dd:3d:68:7e:59:d8:24:4e:3a:fc:d4:a5:0e:c5:26:9b:98:
43:61:99:5b:76:0b:7d:a9:9c:8f:66:f3:57:3f:1a:55:d2:d9:
48:37:a6:f1:13:9c:5d:d2:1b:fc:10:b9:5b:09:b8:9c:e6:b1:
cc:75:bc:de:80:e4:e1:6b:f3:05:11:ca:0f:03:48:6d:32:4e:
0f:aa:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:54 2025 by rpki-client