Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5e151ee2-c71d-4386-849d-458a72d495b0/0/67275C28ED87462F4C8E69DC3954B05557609AD4.mft
File: 67275C28ED87462F4C8E69DC3954B05557609AD4.mft (raw, json)
Hash identifier: VTWmnWG0Rp4uot5JfumYVi8yjUb9E0ZM+HoXDjJUwPA=
Subject key identifier: EB:25:10:51:AF:71:B9:A2:7C:DA:A9:5F:7C:C0:F6:98:2D:72:6A:9B
Authority key identifier: 67:27:5C:28:ED:87:46:2F:4C:8E:69:DC:39:54:B0:55:57:60:9A:D4
Certificate issuer: /CN=67275c28ed87462f4c8e69dc3954b05557609ad4
Certificate serial: 28A419FD070B94F1F4EA752A83E313B9FBBB057E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZydcKO2HRi9MjmncOVSwVVdgmtQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5e151ee2-c71d-4386-849d-458a72d495b0/0/67275C28ED87462F4C8E69DC3954B05557609AD4.mft
Manifest number: 01
Signing time: Sun 29 Jun 2025 07:41:58 +0000
Manifest this update: Sun 29 Jun 2025 07:36:57 +0000
Manifest next update: Mon 30 Jun 2025 08:06:57 +0000
Files and hashes: 1: 67275C28ED87462F4C8E69DC3954B05557609AD4.crl (hash: 9eFpYn5AGwSJIs8mcm8213RDWGp6+GCbrETjISQUpV0=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a4:19:fd:07:0b:94:f1:f4:ea:75:2a:83:e3:13:b9:fb:bb:05:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67275c28ed87462f4c8e69dc3954b05557609ad4
Validity
Not Before: Jun 29 07:36:57 2025 GMT
Not After : Jun 30 08:06:57 2025 GMT
Subject: CN=EB251051AF71B9A27CDAA95F7CC0F6982D726A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:d5:c5:ff:9e:15:1f:9d:d2:72:a5:89:9b:
df:de:62:c7:ab:c6:95:7a:41:cf:87:18:a3:55:30:
2c:c2:62:5d:af:bb:27:60:55:4e:d9:c6:31:a3:2e:
af:7d:1d:7c:06:e2:83:2a:45:5d:c1:b0:98:ee:2b:
0b:6a:15:a9:5a:1a:e7:37:64:dd:41:bd:8d:94:c6:
97:a2:d7:3a:b0:5b:ef:be:95:38:a5:66:1b:58:5f:
cb:88:aa:29:20:d5:2b:ea:ef:0a:11:8b:7d:3b:57:
c3:ec:6d:c7:5a:15:67:df:e4:2f:fa:e7:de:f7:5e:
0b:1e:e3:01:15:2c:08:02:66:cb:56:ed:3a:b5:e2:
c2:bb:1f:37:10:c2:83:c9:ad:59:26:9e:c2:9d:73:
b2:f9:25:df:3e:5a:e7:bb:fe:aa:a3:ee:d8:8c:4e:
46:f0:94:89:54:67:39:66:d7:14:aa:30:55:4e:c9:
a3:2e:29:6d:a2:42:06:04:8e:9d:61:a6:04:a1:9e:
63:df:90:fb:2a:6f:43:60:6a:ee:26:48:a4:92:d4:
5f:11:72:35:75:ed:6b:e8:81:1e:15:07:0c:39:6a:
2d:a5:c3:d5:72:21:d6:45:dd:2c:9d:fe:b5:8c:89:
f9:ce:c5:41:eb:1f:75:f2:85:4e:86:f7:9b:66:13:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:10:51:AF:71:B9:A2:7C:DA:A9:5F:7C:C0:F6:98:2D:72:6A:9B
X509v3 Authority Key Identifier:
keyid:67:27:5C:28:ED:87:46:2F:4C:8E:69:DC:39:54:B0:55:57:60:9A:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5e151ee2-c71d-4386-849d-458a72d495b0/0/67275C28ED87462F4C8E69DC3954B05557609AD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZydcKO2HRi9MjmncOVSwVVdgmtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5e151ee2-c71d-4386-849d-458a72d495b0/0/67275C28ED87462F4C8E69DC3954B05557609AD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ef:83:40:71:c8:d2:78:6f:42:ce:bb:8d:0c:a3:68:fb:6a:
fe:f9:7d:4a:f2:51:aa:f7:d4:91:89:d5:3b:f9:24:56:8d:28:
98:e3:24:ff:31:4f:42:ff:18:a7:c3:7d:0d:25:c4:dd:44:aa:
a8:71:40:a0:06:23:15:c8:99:74:ae:48:7f:8a:09:b1:b9:a9:
2d:de:17:92:53:a8:dc:c4:93:2e:98:af:1d:b6:d2:33:a7:4d:
bb:68:59:97:10:d3:b0:cc:26:65:a7:8f:b0:47:f2:6a:82:f9:
61:e8:3f:0b:bb:24:2e:c8:1f:83:5a:4a:30:ed:5a:df:ba:17:
24:39:a7:70:0a:2a:86:87:0a:26:0a:3c:21:ba:9d:4e:52:6c:
3d:cc:28:94:0b:63:36:e2:62:28:c6:1b:76:57:c1:a9:54:bb:
62:40:96:0b:03:e6:82:92:dc:26:e8:09:20:84:0e:51:ad:15:
9d:49:c3:c5:e9:47:8b:4d:7a:34:ce:19:f1:00:04:2b:34:c2:
1c:40:b5:b7:bb:e4:f0:2b:78:23:d6:00:1f:f7:53:7a:e5:08:
98:f5:e7:8a:6b:9d:d7:b8:02:03:8a:fe:d2:99:fb:94:7d:a9:
a8:43:30:a5:69:23:1e:ac:71:0f:00:78:ae:b6:27:e0:77:01:
27:43:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:50 2025 by rpki-client