Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: FoLKDOXq4V2vObACgRBS7Hv0fKsvx4mv0QvFtgTClY8=
Subject key identifier: A6:2E:15:C4:18:A6:7E:5D:89:45:59:6C:29:BA:73:A9:0B:75:BB:FB
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 511BE23999BEDA66DA57AAE93C64616A0D7D995F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 01DD
Signing time: Sun 29 Jun 2025 06:06:21 +0000
Manifest this update: Sun 29 Jun 2025 06:01:21 +0000
Manifest next update: Mon 30 Jun 2025 06:20:21 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: 0OfC4pq4eSHRMCvFLxJJhG7bTdHLE4eH1Zju64JD2Jw=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:1b:e2:39:99:be:da:66:da:57:aa:e9:3c:64:61:6a:0d:7d:99:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Jun 29 06:01:21 2025 GMT
Not After : Jun 30 06:20:21 2025 GMT
Subject: CN=A62E15C418A67E5D8945596C29BA73A90B75BBFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0b:8a:5e:63:38:2f:09:ac:97:3a:d0:d5:f7:
a8:90:f8:7e:fd:79:a6:4e:c5:17:78:fb:ef:eb:e7:
1e:22:67:7e:01:67:48:79:c3:e4:d1:90:61:fb:45:
56:91:05:ce:68:d4:58:dc:09:b9:a3:8b:42:48:4b:
19:2d:e3:4a:47:e5:d9:8e:29:d1:eb:d3:2e:15:6b:
1d:98:28:15:ac:8c:ea:99:20:85:79:c9:c2:68:07:
94:ed:a7:a8:5a:2c:c8:ee:35:3e:f7:17:cb:ce:71:
60:8c:dc:68:90:fd:1d:d9:1e:23:46:fc:c6:15:46:
b1:95:6c:09:0c:55:49:a8:f1:36:ab:4d:6d:0b:04:
b8:ac:b4:7c:be:e0:64:a3:c7:e8:26:f5:5a:9e:2b:
99:a5:27:01:9e:5a:1b:ef:c4:77:a6:dd:67:bb:7f:
be:bc:c5:87:ce:3c:22:5b:45:6a:f6:58:93:6f:a6:
b4:48:41:4c:4d:7c:e2:a8:07:67:d1:9e:09:b8:9f:
ad:ac:d6:a3:71:9b:3f:be:0c:c4:e4:f6:f8:a8:2d:
d9:77:de:14:fb:2e:5c:d0:71:58:22:f9:e1:19:45:
7d:a5:56:07:f3:df:95:b8:44:25:3f:b1:51:f5:5b:
52:fb:82:eb:2b:44:36:b4:4f:3d:78:6b:d3:92:90:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:15:C4:18:A6:7E:5D:89:45:59:6C:29:BA:73:A9:0B:75:BB:FB
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:ca:f7:23:7d:b2:0c:82:3f:b6:52:26:10:4b:bd:6f:a0:
ee:c1:93:ba:49:1d:06:31:40:79:93:f6:65:e8:46:92:f3:63:
eb:50:84:13:40:5c:7e:fa:d8:61:e8:25:2d:df:a8:40:fa:6b:
d9:64:6c:36:ee:cb:5b:10:9d:1d:6c:5f:95:21:8e:c8:df:ae:
cf:74:f0:04:39:fc:39:36:a5:57:e8:bc:a0:52:3b:88:b3:4f:
c8:56:a7:cc:fe:f9:a6:28:f8:3c:e7:fc:9f:31:4e:9a:20:25:
3b:39:bb:b4:d2:d0:bd:3c:65:20:83:31:43:88:53:ce:ef:e8:
e2:47:fa:11:8f:92:ed:fc:8d:1a:ff:83:79:a9:0a:4f:26:85:
14:c0:2d:0e:3c:e7:0a:fc:67:b9:e7:4b:66:b4:57:bb:5b:98:
80:e1:d2:4d:31:a1:85:52:26:89:93:45:38:6c:b5:2a:96:4f:
62:1a:46:86:ab:ba:51:13:86:31:cb:3c:1c:4f:ec:97:42:eb:
73:ed:30:1c:7e:f2:12:31:ff:a9:dd:81:b9:07:a7:3e:e2:9e:
d5:9f:3e:e8:f9:02:44:7c:45:ca:f0:48:9e:4d:b7:ea:e5:3f:
85:5e:da:8e:38:6f:0b:9b:5a:3d:29:04:5c:17:27:30:5e:7f:
09:56:af:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:48 2025 by rpki-client