Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
File: FF4F1D48A6088FEC5ED73270F82068A436391A71.mft (raw, json)
Hash identifier: qWVEUF/gqt+5OUDoe7nNBhjxqPHLiLQyB3XqNHXCDC0=
Subject key identifier: 24:3F:02:1B:F7:E0:2B:9A:6D:EE:D8:3C:7E:1E:6C:30:CE:3C:56:BE
Authority key identifier: FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
Certificate issuer: /CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Certificate serial: 5B077836D3B4207C96330F820E392FF7251E6D26
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
Manifest number: 65
Signing time: Tue 30 Sep 2025 06:50:38 +0000
Manifest this update: Tue 30 Sep 2025 06:45:38 +0000
Manifest next update: Wed 01 Oct 2025 07:23:38 +0000
Files and hashes: 1: FF4F1D48A6088FEC5ED73270F82068A436391A71.crl (hash: 79aie/xx3j6zER2aQhWETzohcIf+dMTmNNoLZ4nn1OA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:07:78:36:d3:b4:20:7c:96:33:0f:82:0e:39:2f:f7:25:1e:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF4F1D48A6088FEC5ED73270F82068A436391A71
Validity
Not Before: Sep 30 06:45:38 2025 GMT
Not After : Oct 1 07:23:38 2025 GMT
Subject: CN=243F021BF7E02B9A6DEED83C7E1E6C30CE3C56BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fe:29:ae:94:bb:e8:fa:ad:16:64:d2:9c:f0:
f7:95:c6:e8:9a:13:76:03:ac:84:b7:b4:3d:a8:31:
76:56:f6:b7:f7:62:ca:13:05:4e:17:9a:f1:84:d9:
bb:7c:f7:3b:19:4e:39:68:26:da:87:c3:61:f8:e4:
7d:e3:41:c6:56:a1:52:58:10:25:a4:cf:23:0a:62:
53:31:b5:a9:4e:09:22:6c:66:86:38:72:a0:41:d5:
3b:14:b8:6c:00:7b:ca:de:f3:c7:79:f0:3d:ac:75:
d6:8f:b0:d6:d4:c7:b1:1e:a7:62:14:dd:c0:f9:4f:
f3:49:90:6e:2c:49:68:68:90:44:cc:7e:3a:15:df:
76:79:b4:4a:5c:a7:5a:44:db:bb:54:17:4a:3d:d0:
a5:48:3d:a5:99:0c:51:e7:48:05:34:27:0c:5d:63:
45:bf:16:8a:32:81:19:ee:13:4d:eb:51:2b:e2:03:
e4:d1:44:40:18:03:49:d7:61:05:28:5e:3b:ad:90:
5e:69:4a:5d:d3:9a:da:29:28:60:fa:30:8b:68:5c:
f0:e8:9b:9d:01:a6:95:6c:a0:81:f7:80:45:1b:e0:
e0:e5:a9:b1:81:bc:59:ad:01:2d:5d:09:7b:f8:2b:
3d:d6:1e:7a:c5:a6:85:ed:c2:bc:98:83:5a:82:aa:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:02:1B:F7:E0:2B:9A:6D:EE:D8:3C:7E:1E:6C:30:CE:3C:56:BE
X509v3 Authority Key Identifier:
keyid:FF:4F:1D:48:A6:08:8F:EC:5E:D7:32:70:F8:20:68:A4:36:39:1A:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/FF4F1D48A6088FEC5ED73270F82068A436391A71.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/2/FF4F1D48A6088FEC5ED73270F82068A436391A71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:04:fe:48:f6:f2:c5:15:9b:a6:e4:b9:2c:a3:71:cb:f7:
65:6c:96:58:ec:f8:b3:d3:32:ec:d8:1d:0d:0a:a1:a4:0f:5a:
8b:6e:b4:0a:89:77:b1:04:04:ad:37:15:fd:a3:77:6d:27:02:
3b:9a:7b:71:7a:bd:06:dd:25:5e:40:9a:03:c4:e3:99:3a:98:
08:8d:da:3e:31:aa:4c:62:47:54:19:78:58:79:19:9b:be:49:
6c:41:d3:88:17:ab:50:25:dc:02:d1:83:53:20:e7:81:62:62:
fc:77:97:e5:f0:5b:59:98:74:2e:56:d9:78:3b:23:13:c3:52:
61:2b:05:13:7d:cf:38:96:4b:e0:f5:52:07:25:f8:cb:65:e9:
9b:cb:83:ac:bd:eb:1b:10:d2:9a:a0:4c:08:14:62:ea:ca:f3:
78:4c:93:eb:6f:d0:46:0f:45:1c:9f:c7:52:19:25:4c:cc:2f:
6f:c1:36:d6:14:7b:bd:d7:1f:ad:07:0b:f5:a7:b9:0e:52:e3:
58:90:57:cc:b8:49:2b:5b:12:8b:7f:e4:04:22:42:70:48:a5:
f2:c6:b5:72:be:1f:e4:94:19:4e:d8:3a:50:8b:37:53:ba:bb:
38:dd:04:f6:b6:a1:12:c4:76:f5:54:78:c7:6c:70:4c:c2:44:
89:9c:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:37:02 2025 by rpki-client