Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: +nHGNemXH98loGnGEPrbcc7aA52ypL4Q4N/V9VIZo2g=
Subject key identifier: 04:6E:D6:E9:62:79:20:DD:A4:C4:A3:26:59:52:DA:82:51:E7:99:32
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 64C81D0DA81F5A4A3A69FBEAD6DCBFA1763635ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 5F
Signing time: Fri 30 May 2025 20:21:33 +0000
Manifest this update: Fri 30 May 2025 20:16:33 +0000
Manifest next update: Sat 31 May 2025 21:43:33 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: 1gp6GXZ/cQCP0vjAPxGkhR+VG3J5PWJwxhck9M0SAvI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c8:1d:0d:a8:1f:5a:4a:3a:69:fb:ea:d6:dc:bf:a1:76:36:35:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: May 30 20:16:33 2025 GMT
Not After : May 31 21:43:33 2025 GMT
Subject: CN=046ED6E9627920DDA4C4A3265952DA8251E79932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:bc:16:e5:1b:30:66:10:75:13:cb:94:fd:
86:1e:96:e0:67:c7:25:7c:5f:0c:e9:73:07:92:89:
a2:04:9a:b7:44:be:54:8a:62:e2:3f:19:71:4b:41:
13:1e:fb:f4:e8:f0:9f:40:b8:66:af:12:50:24:ad:
c9:41:bc:d5:4d:24:89:f1:b3:88:9f:66:d5:10:03:
61:7f:52:a0:72:9f:c7:7a:68:17:9c:c5:19:78:e5:
18:43:da:04:65:8f:f5:12:8f:09:f6:c6:88:1e:e4:
e7:99:18:67:c8:b2:08:38:35:36:6c:9c:d3:51:2f:
dc:4b:e9:7b:2b:b2:ea:d1:8d:89:71:64:bb:ae:bc:
90:94:86:cb:1e:a5:b9:3a:14:78:e5:08:5f:98:3c:
aa:1f:99:49:1c:c0:65:11:4c:41:bd:7c:71:eb:2b:
bc:92:fc:76:2e:cc:a1:6d:75:bf:9f:e9:41:ae:5f:
2b:f6:2d:63:67:1d:42:48:29:ea:3e:b7:69:6a:ab:
78:bb:50:b2:8f:11:9a:6c:7c:3a:db:13:5d:e1:c6:
ac:af:4d:04:d5:8f:3f:85:3a:36:e0:dd:1a:41:8b:
fb:c2:0c:89:0b:ac:90:93:24:5c:6d:06:d9:c4:15:
31:7a:9b:6e:a5:ff:f3:a3:03:bc:2b:fe:99:70:97:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:D6:E9:62:79:20:DD:A4:C4:A3:26:59:52:DA:82:51:E7:99:32
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:b4:bb:d1:e5:d7:30:f3:57:63:c0:8d:3e:90:8f:96:64:
82:a1:8c:6c:13:92:7e:c0:41:a1:8e:4f:9a:b6:85:8a:99:dc:
f9:df:b6:f4:7e:00:c1:8f:f0:69:4e:f0:7a:a9:59:26:aa:0e:
ea:5b:75:71:96:5d:c0:f8:55:58:3e:03:02:cd:fe:c3:08:91:
88:b3:ba:cc:85:ca:82:4e:eb:ad:8f:8f:7d:da:ed:e3:6b:f8:
41:cd:e6:5e:b6:38:0d:e7:e8:e4:89:f9:c5:69:ba:f2:e0:e4:
52:ac:d7:6e:8e:85:09:42:34:2e:19:70:78:5e:6d:36:bc:d8:
3d:84:0f:c0:b2:d5:19:40:55:00:0e:c2:55:21:f9:33:19:37:
67:b2:e1:1a:5b:5f:10:eb:0a:2c:ad:a5:c7:d4:79:34:29:96:
23:34:51:87:43:ee:e7:20:65:c3:b2:17:e8:00:5a:b2:bf:6f:
0e:12:3f:ee:67:01:04:8b:f8:62:de:0c:8f:7e:86:c2:fe:2b:
71:c3:ab:0e:3c:5e:54:f6:4a:fe:e0:89:72:5f:8c:63:9f:f8:
d0:e9:6f:4c:79:04:0e:bc:ef:f3:19:e5:06:54:98:20:e4:c6:
a8:49:5a:0e:f3:5e:f3:07:c9:0a:b9:19:ca:87:d8:91:f9:b5:
90:84:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:45:22 2025 by rpki-client