Manifest
$ rpki-client -vvf rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
File: FF0595CB477C33B6B94C7E477213C842A6067D6B.mft (raw, json)
Hash identifier: mf5KmcRyVf9vGHmsrz1aYpz2izv1Zy8QZdxiTSxgXDI=
Subject key identifier: 2E:FE:F6:36:B9:C6:3A:5D:21:BB:05:19:20:83:90:F3:8A:6A:FF:05
Authority key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Certificate issuer: /CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
Certificate serial: 03F778E9605EBAF596FAC30F742E1DFA285CE8E9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
Subject info access: rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
Manifest number: 05CA
Signing time: Sat 13 Sep 2025 11:19:23 +0000
Manifest this update: Sat 13 Sep 2025 11:14:23 +0000
Manifest next update: Sun 14 Sep 2025 13:25:23 +0000
Files and hashes: 1: FF0595CB477C33B6B94C7E477213C842A6067D6B.crl (hash: vktPhsDMXJywLm/qiJroURzLX+OJLrEkrpe1H9gig5I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f7:78:e9:60:5e:ba:f5:96:fa:c3:0f:74:2e:1d:fa:28:5c:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
Validity
Not Before: Sep 13 11:14:23 2025 GMT
Not After : Sep 14 13:25:23 2025 GMT
Subject: CN=2EFEF636B9C63A5D21BB0519208390F38A6AFF05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:ad:b1:2e:7b:66:83:b4:f2:ef:c5:3a:68:
42:cd:54:b4:9e:e5:52:f3:31:e5:63:37:f1:c9:d6:
e9:5f:a3:10:d8:3b:bd:d8:5d:d8:48:57:71:0c:c7:
88:7b:d9:9f:59:f7:94:aa:c6:54:3a:63:b6:ab:dd:
46:9e:de:54:ae:79:2a:71:71:67:65:cb:4e:5e:77:
77:27:b7:28:b7:16:9e:87:53:29:3b:f6:21:88:29:
fa:76:50:ce:c3:c1:58:ca:11:c1:75:3e:be:f5:6f:
f6:00:d7:ea:46:39:80:22:94:2c:64:ef:0b:84:e3:
b2:a6:ad:36:11:6e:3e:8e:1d:31:62:f6:72:f5:2b:
bc:aa:9a:43:46:cc:cf:41:a8:69:dd:93:fd:ff:1a:
18:2b:9b:56:27:18:7f:1c:ca:80:7f:55:7a:11:c1:
37:ee:72:da:07:37:1a:64:c9:8a:80:10:e5:4a:ae:
39:12:ab:d4:05:40:ed:67:b9:4e:3b:8e:27:72:36:
09:8e:09:24:c7:e0:75:52:69:43:59:35:69:6a:c5:
2a:5b:03:1c:3e:19:32:74:32:64:11:b3:bc:d2:2e:
63:c3:0d:fd:4f:62:2d:96:c5:e1:2b:03:5f:9e:4e:
4b:9a:ed:0c:96:9a:50:5e:e7:6d:15:05:04:58:fb:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FE:F6:36:B9:C6:3A:5D:21:BB:05:19:20:83:90:F3:8A:6A:FF:05
X509v3 Authority Key Identifier:
keyid:FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:86:2a:82:9c:37:12:3c:42:1e:77:3a:10:c8:09:56:9b:
cc:87:1a:d0:2c:f3:b9:9d:5a:f1:7b:0f:91:57:57:dd:5f:9b:
71:ee:8c:da:e0:7a:8e:e5:f4:23:de:08:48:f9:7c:03:e0:8e:
d0:22:0b:93:8e:8b:3e:b5:34:32:63:f7:56:37:61:63:b7:12:
3d:a6:42:33:3b:3f:e1:6e:38:ff:69:08:e0:39:02:a7:11:f7:
b2:43:51:fe:54:f8:03:c8:e1:8d:87:c3:e3:20:05:8c:02:ed:
f9:8a:1d:d8:57:dd:6d:a8:c6:35:ad:b7:37:9f:2a:60:cd:c2:
5c:ed:93:e3:da:fa:3b:f4:f5:70:b4:07:86:4e:fc:a6:01:20:
f2:6c:82:55:f3:bf:06:8c:9f:55:3a:0e:dc:b1:3d:3e:6f:c8:
1b:94:74:cc:e1:3f:8d:dd:62:4f:b9:94:5c:33:25:a6:04:16:
f7:21:ff:c8:ba:13:28:e4:8a:63:2e:ff:3b:87:ef:c7:c4:59:
8a:9d:fe:83:38:9a:64:f9:65:2b:15:fd:c2:62:c3:b4:33:53:
b5:74:76:50:a1:66:7f:ac:cf:34:d8:0f:e3:e7:af:5c:fb:7d:
95:f1:da:f1:bc:07:3c:28:4e:8f:d2:38:6d:e2:52:57:4c:7b:
41:24:f7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:39:07 2025 by rpki-client