Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
File: F861C17CCC63A8FE4F54B725229D4182E376702E.mft (raw, json)
Hash identifier: P789Y6UjxSM+QI0qv6zkYGmByvTe1HS6jBuwUp8RdsI=
Subject key identifier: 04:0C:2E:58:65:2A:E4:8C:EC:50:64:A2:4D:0C:12:8A:F0:1E:3C:B2
Authority key identifier: F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E
Certificate issuer: /CN=F861C17CCC63A8FE4F54B725229D4182E376702E
Certificate serial: 111339E95BC92C420B556ED721AEA6366B900876
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
Manifest number: 5F
Signing time: Sat 31 May 2025 01:21:54 +0000
Manifest this update: Sat 31 May 2025 01:16:54 +0000
Manifest next update: Sun 01 Jun 2025 02:20:54 +0000
Files and hashes: 1: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: nEpVXZ4G7eLeVLBw2JFUizV21nv5AkYeo88InoKYBm4=)
2: F861C17CCC63A8FE4F54B725229D4182E376702E.crl (hash: 2VRJakJDhqJiZwVv+8GtdCE4g691ktUYTh5H00Ni+nQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:13:39:e9:5b:c9:2c:42:0b:55:6e:d7:21:ae:a6:36:6b:90:08:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F861C17CCC63A8FE4F54B725229D4182E376702E
Validity
Not Before: May 31 01:16:54 2025 GMT
Not After : Jun 1 02:20:54 2025 GMT
Subject: CN=040C2E58652AE48CEC5064A24D0C128AF01E3CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:1a:03:54:3b:53:d6:9e:1f:80:d6:13:1f:
cf:f3:0b:08:9e:f6:dd:93:d8:da:c8:ea:d9:85:51:
44:3e:5e:5f:87:33:52:0d:e2:6b:6f:27:3b:8f:60:
ea:9b:46:45:e0:0f:94:6c:89:51:4c:8e:9f:48:5c:
82:aa:51:7a:72:74:85:a8:82:72:8c:a3:76:96:df:
a8:1b:48:19:65:75:e9:0e:7e:75:87:e1:98:03:03:
47:c9:1c:3d:63:2e:34:f1:7f:66:7e:26:d2:49:70:
9c:63:dc:c9:ce:61:a6:99:4d:64:4d:f5:34:7f:ed:
b6:b5:83:74:f3:8e:4a:59:7a:2f:84:c6:26:a0:d9:
02:bb:ba:60:c1:84:a2:c1:e4:b8:07:b1:18:28:26:
01:13:f7:af:e5:b0:db:0a:3e:e2:ef:ce:cb:06:59:
d3:a3:39:04:b2:44:13:8e:e0:16:ef:69:50:b3:62:
af:56:fb:79:5f:14:5f:09:06:3c:3c:0b:3a:33:f7:
76:10:0f:00:29:8e:5a:0a:7f:25:cd:f1:9a:30:2a:
23:16:0a:54:f1:fa:69:e0:88:0d:69:96:31:61:a8:
73:86:77:4f:21:1a:e9:50:d0:40:35:b0:4c:35:6b:
0e:db:c4:c5:4c:d4:10:d8:28:f4:b1:f4:17:1b:be:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0C:2E:58:65:2A:E4:8C:EC:50:64:A2:4D:0C:12:8A:F0:1E:3C:B2
X509v3 Authority Key Identifier:
keyid:F8:61:C1:7C:CC:63:A8:FE:4F:54:B7:25:22:9D:41:82:E3:76:70:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F861C17CCC63A8FE4F54B725229D4182E376702E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1028ecde-2bba-4e46-a245-fbc81d5c1432/0/F861C17CCC63A8FE4F54B725229D4182E376702E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f7:dc:e3:1a:26:66:98:8b:bf:0f:6b:8b:47:1e:87:df:67:
c1:0a:f7:55:90:6a:91:b3:ef:44:54:86:d4:bc:77:bd:c6:8f:
fc:49:47:f5:d6:e4:29:0e:82:53:a6:0d:d6:8b:11:68:39:0c:
0c:40:af:d2:ea:22:43:d9:82:c0:c4:14:89:fa:0e:84:1d:71:
6a:94:05:92:4c:f0:cd:37:29:e1:43:c3:b3:c6:d8:80:e4:d1:
f5:e3:cf:d6:0f:9c:41:82:7d:73:51:ac:fc:b9:0d:e5:98:7f:
95:90:27:21:e3:a6:5b:70:59:e8:5b:dc:36:35:6f:4e:a9:36:
d7:d5:0d:7b:29:09:4a:ae:ec:a5:ab:0f:46:0c:8c:60:ce:30:
81:6c:04:97:7e:d1:bc:e3:f4:4d:62:eb:d7:25:25:0a:08:47:
85:3a:b3:1f:2f:46:53:80:27:89:7d:8b:29:b9:cd:71:89:2c:
2d:a5:65:b6:23:e3:73:40:83:93:6c:42:4b:a7:59:c9:56:9c:
2c:04:f2:77:31:b0:1d:90:f2:a8:a5:9a:e0:36:75:45:8d:1e:
6f:da:6b:98:f6:80:93:d2:cb:e9:56:ef:77:aa:66:ec:9f:46:
9f:e1:b5:e0:93:07:53:19:6f:6f:09:1f:87:e3:a9:af:23:ae:
50:18:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:52:53 2025 by rpki-client