Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
File: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft (raw, json)
Hash identifier: TEvzZykTpiktseJBBGJdtq3Zoa82O7wYoZJ6u9RrJIE=
Subject key identifier: 15:87:D8:53:7A:C5:AA:23:71:BC:7C:07:C7:A6:04:E6:62:85:8D:29
Authority key identifier: 69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
Certificate issuer: /CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Certificate serial: 124CF4C19CA283DD38C08DC3557AB27A27C66869
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
Manifest number: 5F
Signing time: Sun 28 Sep 2025 06:52:06 +0000
Manifest this update: Sun 28 Sep 2025 06:47:06 +0000
Manifest next update: Mon 29 Sep 2025 08:24:06 +0000
Files and hashes: 1: 6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl (hash: vbgPKSjOSQXvzPzL9lLOmxtLcQpC5g9ALeGbcDCyhSE=)
2: 326130613a363034303a343430303a3a2f34382d3438203d3e203530313034.roa (hash: JDVDvoY2LzG4FOnjq1lk2gJuRJSJTwl39Idwnd4C3E8=)
3: 326130613a363034303a343430303a3a2f34382d3438203d3e20313532333638.roa (hash: cr9zAfMvxZve/7JXD2f4n3BhiKrPiLnrwH/qsV4egwU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4c:f4:c1:9c:a2:83:dd:38:c0:8d:c3:55:7a:b2:7a:27:c6:68:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6986DC82812C47DA14994B8E6E727B72E0B2F8D8
Validity
Not Before: Sep 28 06:47:06 2025 GMT
Not After : Sep 29 08:24:06 2025 GMT
Subject: CN=1587D8537AC5AA2371BC7C07C7A604E662858D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:1f:16:33:0d:6a:fb:a0:9c:48:93:7e:86:
dd:85:38:b4:54:6d:60:4a:64:b1:b6:2e:88:f9:ad:
b7:89:4f:a1:ac:96:6f:c7:a9:0c:4a:f9:09:c4:d5:
f2:02:f5:a6:dd:57:4d:9f:bd:9f:61:f6:da:4f:e0:
ab:38:6c:4e:7e:28:05:95:96:8e:cd:d1:ba:dc:87:
e4:ec:17:38:48:8b:c5:25:5f:c3:85:fc:44:c2:2e:
8b:2e:3a:6c:7f:ac:7f:85:95:55:4e:99:6a:5d:f6:
55:cb:5a:3f:9b:17:7b:92:fe:b8:bd:b1:d2:46:6d:
fa:17:84:5f:1e:c7:63:06:ea:09:5d:91:c1:a9:f3:
dc:e2:e4:fd:81:14:a5:61:59:59:a0:ff:ab:75:15:
db:84:91:d4:1a:07:1c:6a:b5:24:d7:88:1b:13:ec:
57:31:5e:61:3b:13:30:65:6c:af:92:3b:63:10:8d:
49:f2:92:a7:9d:95:12:e0:37:a5:5c:96:8e:a9:78:
80:e9:4f:c3:a6:57:2a:b7:27:32:ff:96:08:45:44:
f3:87:05:80:a9:40:50:c1:43:18:63:74:5f:03:fc:
56:3b:6c:88:30:dd:ac:ad:b0:99:ec:c9:6e:ab:ab:
86:58:f9:97:60:a8:b0:61:25:14:4d:ac:7d:c6:5f:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:D8:53:7A:C5:AA:23:71:BC:7C:07:C7:A6:04:E6:62:85:8D:29
X509v3 Authority Key Identifier:
keyid:69:86:DC:82:81:2C:47:DA:14:99:4B:8E:6E:72:7B:72:E0:B2:F8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/9/6986DC82812C47DA14994B8E6E727B72E0B2F8D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0e:66:99:28:11:8e:cb:ba:0c:9f:b2:4e:c7:32:33:27:16:
e3:1c:f2:8c:95:25:ff:07:52:2f:7a:be:f8:77:eb:60:9d:95:
e0:4e:6b:bd:d4:69:a0:16:9f:c3:de:08:fa:ee:20:7c:35:f1:
ab:43:9b:22:67:f3:40:19:60:95:c0:2b:c4:eb:56:eb:10:af:
01:53:e9:ce:cf:c8:29:ad:0f:f6:25:07:00:4a:36:39:8e:12:
f4:ed:ae:63:6c:2e:c3:a3:b9:1f:ac:bc:6b:ba:37:68:68:44:
10:7f:cc:de:5d:4d:8e:f5:a4:58:29:fa:96:f1:06:db:e2:3f:
8a:80:0a:17:e4:50:9a:75:1e:aa:b5:82:ef:c2:a9:31:4b:b9:
c4:25:32:26:74:67:98:db:cb:af:28:83:16:e3:6b:21:94:a6:
37:b1:46:8e:87:bc:0e:cf:02:88:33:02:a9:56:80:07:e9:41:
2e:31:c1:0d:06:65:f2:03:03:d3:73:b1:69:22:71:c7:66:9c:
56:30:0d:e8:0a:7e:0f:35:d0:8e:00:28:97:b3:15:38:39:05:
9b:79:d5:ad:e5:15:d3:29:41:38:9d:61:03:5e:d3:02:e6:2e:
05:c8:ce:bc:d0:d9:6a:36:e2:8c:75:94:bf:b4:aa:c7:97:d5:
3e:f4:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:19 2025 by rpki-client