Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
File: 7DNNDzoYvgAht7joQih2Qayxcxo.mft (raw, json)
Hash identifier: F+2n7Qx0Rcd5qBg2zeJDrSS1v8apx51Qg6rGuMfCSjk=
Subject key identifier: D6:F5:35:2F:73:34:90:01:E0:3E:18:D1:F9:F0:FD:C2:DC:B6:2C:49
Authority key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
Certificate issuer: /CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Certificate serial: 019710C271E650916C30723EF26B80ACECAE
Authority info access: rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
Manifest number: 06F1
Signing time: Tue 27 May 2025 08:00:54 +0000
Manifest this update: Tue 27 May 2025 08:00:54 +0000
Manifest next update: Wed 28 May 2025 08:00:54 +0000
Files and hashes: 1: 7DNNDzoYvgAht7joQih2Qayxcxo.crl (hash: mHyZqdkoU/fze7KPxAmDjLyF2yhEDu8oIJLj8K6liRI=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: VrpSWUKIQreFWudIE+ySYWqHFoQ1xNVdzeHG90cbD7s=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:c2:71:e6:50:91:6c:30:72:3e:f2:6b:80:ac:ec:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec334d0f3a18be0021b7b8e842287641acb1731a
Validity
Not Before: May 27 08:00:54 2025 GMT
Not After : May 28 08:00:54 2025 GMT
Subject: CN=d6f5352f73349001e03e18d1f9f0fdc2dcb62c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:e6:6d:51:21:df:1d:fa:75:ea:17:2c:65:
7c:1c:83:4a:b1:b2:2a:c8:2a:84:ce:7d:80:76:6a:
f2:e0:f7:1b:e7:1d:74:66:bc:91:73:c2:67:d0:e9:
f5:17:4c:f7:69:4b:b5:c4:6d:ac:d4:30:0c:dd:0e:
90:65:82:21:ec:b8:08:e6:92:ae:dd:52:ce:79:09:
d7:42:d0:d3:91:90:d1:af:9d:62:9a:b3:b6:64:e6:
69:ab:70:d2:66:12:81:64:c1:72:78:83:71:20:e7:
f1:7d:5c:09:ea:23:86:da:52:20:2f:77:d4:b9:99:
c0:60:35:01:26:54:e6:9a:5f:37:0f:0b:3f:29:64:
63:48:38:0f:a5:d9:41:d1:0a:a1:f8:25:29:25:7f:
f8:c1:0f:c6:05:ed:1a:cb:b9:db:27:e6:6c:79:e9:
9b:93:35:e5:cc:42:12:bb:ed:bc:61:5a:d4:49:f9:
f1:47:a5:94:39:6e:c5:77:11:14:fb:26:82:06:44:
78:ad:de:4e:10:0e:55:16:9c:de:b7:e0:d2:b8:6f:
df:55:ba:a9:cf:fb:0d:2a:55:a9:ed:9c:b4:32:e9:
b1:e5:75:41:f8:d0:6e:ff:a3:9c:e5:2a:d6:d8:c9:
95:2c:de:85:e9:30:76:98:fb:52:60:25:8e:cd:7e:
a6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F5:35:2F:73:34:90:01:E0:3E:18:D1:F9:F0:FD:C2:DC:B6:2C:49
X509v3 Authority Key Identifier:
keyid:EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:7a:fb:f5:ad:fb:0c:6e:4b:2b:c9:f7:33:19:0b:fe:71:
67:ea:ef:6a:5e:e9:0c:6d:33:5c:3e:14:60:0e:11:30:7c:3b:
fc:38:43:59:9d:f1:be:e4:1e:75:c0:e3:76:cd:93:03:9c:d1:
16:18:9e:cc:e3:4f:c2:c5:c5:7c:ea:e7:be:e5:9e:b0:9e:ac:
b1:d1:b1:cd:f6:bb:4d:3f:e1:aa:12:f7:5d:ca:7f:04:fd:68:
7f:3e:33:d7:a5:81:31:bf:b8:b0:5e:e1:8e:73:6a:46:55:98:
3d:ba:af:7b:56:85:02:4d:79:f4:56:4d:60:80:ed:68:18:de:
79:dc:0f:e8:f5:bc:6f:c2:e7:78:82:01:35:a5:75:cd:10:e4:
4a:27:50:67:91:38:10:a2:70:80:fc:13:e3:ce:53:96:23:30:
f1:8c:65:fb:dd:ce:3f:e7:9d:f9:9f:b6:40:61:f9:c4:6d:54:
a8:94:9b:b5:47:4e:ec:1d:79:9a:b5:19:3b:42:9a:f1:9a:04:
17:26:e4:9e:5f:65:bf:83:34:6e:85:d6:da:e4:cf:6a:7d:33:
d5:fa:3e:d9:c0:e0:8e:81:3f:09:12:e5:07:31:e8:3c:0e:e0:
4a:39:67:e0:2c:85:9f:65:db:bc:a1:9f:b9:70:f4:2c:c1:41:
1d:ef:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 29 00:28:41 2025 by rpki-client