
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
File: 5777980E886C29F0060C3A073B6E681A8A70574B.mft (raw, json)
Hash identifier: nko/jSsNQZYXIGCTtoTR+9U7FpoXD+avh2+66dqzPFg=
Subject key identifier: 89:13:5B:9C:BD:EB:91:D9:BB:50:EA:A5:98:1D:2A:2B:69:3D:4B:D8
Authority key identifier: 57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
Certificate issuer: /CN=5777980e886c29f0060c3a073b6e681a8a70574b
Certificate serial: 596F671275A9FDC1CA76303B18846A9185B151DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
Manifest number: 01F6
Signing time: Thu 10 Apr 2025 07:19:29 +0000
Manifest this update: Thu 10 Apr 2025 07:14:29 +0000
Manifest next update: Fri 11 Apr 2025 09:52:29 +0000
Files and hashes: 1: 5777980E886C29F0060C3A073B6E681A8A70574B.crl (hash: sjtEd3S9qfDgmE3qF0Q96b9BuBkh4b4Ig1jzx8c0yOE=)
2: AS216311.asa (hash: K7m3KVo3vTMDgBc/83DKyhT7Azk3LWdIWk6sAr0WLFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6f:67:12:75:a9:fd:c1:ca:76:30:3b:18:84:6a:91:85:b1:51:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5777980e886c29f0060c3a073b6e681a8a70574b
Validity
Not Before: Apr 10 07:14:29 2025 GMT
Not After : Apr 11 09:52:29 2025 GMT
Subject: CN=89135B9CBDEB91D9BB50EAA5981D2A2B693D4BD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:96:d4:9f:b1:ff:77:2b:63:94:21:7f:d6:
f8:5d:7b:51:c5:f1:bd:d3:3e:e2:d9:9f:93:c8:63:
d0:f8:c6:81:36:56:97:81:17:14:57:d7:c6:90:8c:
a0:10:63:0f:ee:37:99:76:68:d9:5a:3a:ce:4a:0a:
f1:20:f4:b9:73:0b:10:98:e6:9e:9a:d3:5d:10:56:
7a:d5:c7:f0:03:35:54:16:54:fb:d8:40:b9:72:5b:
82:48:be:f0:49:94:dc:53:e9:79:1b:24:36:d5:2d:
d6:16:27:70:d3:3e:87:4c:22:09:13:e7:6d:a9:5b:
f1:45:aa:ee:5e:3e:83:2f:33:66:0d:b6:11:fb:b9:
b6:64:85:f3:12:ac:ca:91:81:3d:29:6f:8e:b5:25:
de:bd:04:eb:91:0f:45:6f:e1:b5:e2:2f:d9:c1:bc:
24:a0:2d:59:7c:8e:c0:19:db:05:3f:05:a0:d2:c1:
70:7c:2a:01:a3:80:af:cc:ad:da:a1:57:76:d4:08:
77:0a:0e:42:eb:9d:db:64:fd:aa:36:49:44:a9:cc:
35:94:7b:6d:7f:9f:8c:70:32:9b:e5:be:8f:16:e7:
1f:75:06:3b:a6:18:6e:98:ea:60:61:61:a1:93:cf:
f6:88:ab:f2:93:8a:6d:54:10:04:93:c4:1a:8a:41:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:5B:9C:BD:EB:91:D9:BB:50:EA:A5:98:1D:2A:2B:69:3D:4B:D8
X509v3 Authority Key Identifier:
keyid:57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:10:e8:34:94:2f:d6:d0:63:ae:02:b6:38:d6:32:35:ae:2d:
11:bf:0b:8c:63:f0:80:61:ac:64:36:ba:4a:ed:16:34:7b:54:
43:15:21:de:bf:4c:58:5a:45:b6:8d:d7:e6:78:e7:70:6d:4c:
50:86:70:50:24:34:be:0a:8e:2e:80:24:5a:2e:8d:a1:86:d7:
01:32:5c:18:22:11:c1:67:84:d4:4a:c8:24:e3:8f:1a:7f:58:
bb:77:de:ad:33:5b:10:ec:fc:08:7a:09:c0:fe:31:ac:ec:03:
cc:2f:a5:5d:9d:4c:3b:92:10:ab:4a:48:9d:63:c9:b9:9f:d4:
ba:d9:36:12:9e:09:ef:bd:89:9d:56:ce:2b:1b:f5:96:0e:14:
e9:16:b2:5f:aa:f0:d6:02:b5:84:f1:7f:db:69:c2:cb:b9:d4:
e3:6b:71:28:de:b5:ba:49:f4:0d:ab:85:31:3e:2e:85:af:00:
d4:9b:74:84:d0:cc:b8:12:84:42:62:dd:a7:e3:ef:33:d2:be:
44:b8:5c:7d:61:6b:94:cd:a4:c3:87:0b:ee:1a:3e:56:0c:80:
c3:0e:a2:c5:f2:be:b7:c8:8e:95:fc:e8:74:07:5e:cf:0d:a8:
6a:51:73:cb:09:d5:8a:e4:d8:5b:5e:e6:bd:db:d8:0c:c4:9b:
34:fd:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:17:36 2025 by rpki-client