Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: 9tPzIZFP2zwZS0S6Mhx4k26RvNSdCfnKqozm6wSrejs=
Subject key identifier: 4C:8D:BF:7E:B3:36:55:F4:35:B4:3E:85:48:C3:1D:85:51:A9:4B:EA
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 3B9E8E0878742485CDB724EBE500688A44C19895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0258
Signing time: Sun 19 Oct 2025 11:14:48 +0000
Manifest this update: Sun 19 Oct 2025 11:09:48 +0000
Manifest next update: Mon 20 Oct 2025 12:54:48 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: 0OL50ARPtLQex/Mg5rQ3lbQGHg4n2FeNKJ70snrOxG0=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9e:8e:08:78:74:24:85:cd:b7:24:eb:e5:00:68:8a:44:c1:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Oct 19 11:09:48 2025 GMT
Not After : Oct 20 12:54:48 2025 GMT
Subject: CN=4C8DBF7EB33655F435B43E8548C31D8551A94BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:43:4a:a3:2b:e3:52:fc:a7:cd:ab:68:32:
2a:be:73:49:da:34:a2:1e:27:7c:62:11:6a:af:9d:
97:b3:3d:a7:e1:0a:05:44:13:83:53:2f:1d:92:e4:
f8:73:ec:ab:b3:8d:fd:c7:1b:13:66:00:e8:c8:75:
18:4a:9e:a1:0a:6a:f6:73:c0:d6:1d:76:1a:b3:b4:
29:e0:7e:5f:10:83:94:3d:28:c5:29:08:83:05:32:
07:50:f6:b1:c2:5d:0c:37:08:76:63:7e:d2:46:7b:
93:c3:f6:d8:3f:d1:91:52:33:75:65:dc:94:fb:b3:
43:11:c6:c5:e8:03:0b:ff:f1:f3:4a:30:5d:d5:48:
58:85:a6:32:d1:6f:2f:61:2a:9e:c0:73:de:05:4b:
d4:bd:e8:91:22:b8:c2:c3:a8:4a:de:43:31:4c:60:
2a:d9:bd:6f:d3:e8:a9:4a:fa:90:a1:60:c5:af:a5:
1d:02:1d:ad:3e:ea:d5:8a:01:66:5e:92:48:3c:a8:
6d:49:53:28:35:76:96:b0:1d:b3:0a:ba:fd:d8:1c:
b8:c4:4d:cd:07:f5:58:9a:c3:a8:bf:c2:f3:95:8f:
c2:8d:57:a9:44:e7:40:4b:42:cc:24:7b:ff:89:4a:
e0:6d:b7:72:16:0f:8c:3a:54:2f:6e:eb:c1:78:5c:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8D:BF:7E:B3:36:55:F4:35:B4:3E:85:48:C3:1D:85:51:A9:4B:EA
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:10:be:be:f2:86:ca:c4:7e:f4:bd:64:bf:de:a6:44:99:65:
fb:2e:57:e7:38:f5:de:ec:b2:68:8d:2a:24:14:15:16:74:ae:
ef:88:7c:85:89:b1:ce:fc:f0:27:e2:0b:92:53:c2:ba:e1:17:
0e:aa:4b:1e:4e:00:3b:0d:8d:0d:ac:44:89:7c:df:82:44:a0:
94:68:e1:67:ba:bd:f0:05:d5:8b:5b:c7:52:0d:ee:db:c7:15:
f0:34:4d:65:a7:d3:d7:b2:d1:8d:82:38:9b:68:1b:27:23:e3:
a8:8b:ce:ad:b1:f2:0a:25:fd:76:26:68:25:96:25:8f:4b:f7:
88:5f:f4:f3:bf:41:3f:a4:12:f4:05:a8:49:28:61:c2:8d:a1:
18:92:ac:4b:04:3f:d8:24:58:a7:e2:c2:50:09:68:30:5c:d0:
51:25:9e:82:8b:b0:5b:92:fa:bc:28:1d:47:0c:10:53:df:09:
9a:cf:80:32:c7:2d:ec:6e:cc:2d:2c:56:56:f0:c3:c9:11:64:
a2:0d:ed:57:d9:15:73:ad:76:54:02:41:27:55:e4:0c:b6:ec:
56:ff:c4:25:a2:d3:c7:18:75:a3:d6:a1:ca:b8:4a:c6:82:e9:
13:a6:2b:e3:71:ff:af:d6:cd:06:82:48:8d:78:f1:31:14:1d:
95:f0:58:05
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUO56OCHh0JIXNtyTr5QBoikTBmJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlhYTk3N2EzYmM1YjZiN2FjNDYyOTU1ZDc1YTJhMzAy
ODdlMjU3NzAeFw0yNTEwMTkxMTA5NDhaFw0yNTEwMjAxMjU0NDhaMDMxMTAvBgNV
BAMTKDRDOERCRjdFQjMzNjU1RjQzNUI0M0U4NTQ4QzMxRDg1NTFBOTRCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxj0NKoyvjUvynzatoMiq+c0na
NKIeJ3xiEWqvnZezPafhCgVEE4NTLx2S5Phz7Kuzjf3HGxNmAOjIdRhKnqEKavZz
wNYddhqztCngfl8Qg5Q9KMUpCIMFMgdQ9rHCXQw3CHZjftJGe5PD9tg/0ZFSM3Vl
3JT7s0MRxsXoAwv/8fNKMF3VSFiFpjLRby9hKp7Ac94FS9S96JEiuMLDqEreQzFM
YCrZvW/T6KlK+pChYMWvpR0CHa0+6tWKAWZekkg8qG1JUyg1dpawHbMKuv3YHLjE
Tc0H9Viaw6i/wvOVj8KNV6lE50BLQswke/+JSuBtt3IWD4w6VC9u68F4XJhRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUTI2/frM2VfQ1tD6FSMMdhVGpS+owHwYDVR0j
BBgwFoAUiaqXejvFtresRilV11oqMCh+JXcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzU0NDhlNmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzEv
ODlBQTk3N0EzQkM1QjZCN0FDNDYyOTU1RDc1QTJBMzAyODdFMjU3Ny5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2lhcVhlanZGdHJlc1JpbFYxMW9xTUNoLUpYYy5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81NDQ4ZTZhYTI2MDY0MWEx
OTdiODI1MWFjMGMzZTYzMC8xLzg5QUE5NzdBM0JDNUI2QjdBQzQ2Mjk1NUQ3NUEy
QTMwMjg3RTI1NzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkEL6+8obKxH70vWS/3qZEmWX7LlfnOPXe
7LJojSokFBUWdK7viHyFibHO/PAn4guSU8K64RcOqkseTgA7DY0NrESJfN+CRKCU
aOFnur3wBdWLW8dSDe7bxxXwNE1lp9PXstGNgjibaBsnI+Ooi86tsfIKJf12Jmgl
liWPS/eIX/Tzv0E/pBL0BahJKGHCjaEYkqxLBD/YJFin4sJQCWgwXNBRJZ6Ci7Bb
kvq8KB1HDBBT3wmaz4Ayxy3sbswtLFZW8MPJEWSiDe1X2RVzrXZUAkEnVeQMtuxW
/8QlotPHGHWj1qHKuErGgukTpivjcf+v1s0GgkiNePExFB2V8FgF
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:48 2025 by rpki-client