Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier: 9NVmzIm4U2onUj9weE7r94BUZmKKViTijCI6i2knfdg=
Subject key identifier: CA:F6:96:D7:A0:92:F1:9A:CF:17:7B:DB:4B:11:5D:A9:BC:D2:AD:F9
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer: /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial: 2F141A2FC3EEBA4329AFB9139265231D740A3928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number: 0137
Signing time: Fri 06 Jun 2025 07:50:28 +0000
Manifest this update: Fri 06 Jun 2025 07:45:28 +0000
Manifest next update: Sat 07 Jun 2025 09:08:28 +0000
Files and hashes: 1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: 0BH0Fygo/VH/smdZsDGewBLZcHKfhcyyuUHayCPwD5U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:14:1a:2f:c3:ee:ba:43:29:af:b9:13:92:65:23:1d:74:0a:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Validity
Not Before: Jun 6 07:45:28 2025 GMT
Not After : Jun 7 09:08:28 2025 GMT
Subject: CN=CAF696D7A092F19ACF177BDB4B115DA9BCD2ADF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:c4:72:6b:55:a5:a9:d1:39:fa:29:b8:d7:
72:dc:0d:d3:d1:d7:ad:30:d7:80:94:c4:56:a2:4f:
eb:ac:53:1f:6c:f3:fa:b8:49:98:ee:7e:50:0b:8c:
ee:fc:f9:4c:43:44:33:a6:1a:69:c4:cf:63:cd:bb:
cf:ec:2a:9d:90:5c:ca:cd:a2:5e:b2:5a:7a:45:2e:
9a:a1:97:12:ba:58:d4:4d:11:a0:f9:a3:a9:4d:4e:
15:a3:22:c6:4b:54:f7:8d:05:cc:14:3c:ce:d8:21:
c6:fc:bf:0e:d7:21:8d:fb:df:e5:f4:02:be:23:fb:
b2:27:d7:ec:f5:1e:d8:a3:b0:11:b0:40:d7:11:a8:
91:9e:b6:3e:c6:d5:cb:c3:10:62:50:1a:91:77:ae:
5a:64:a9:4e:fe:d1:cc:ae:fa:77:08:fd:d4:17:5d:
5d:f6:45:fa:f4:e6:69:1a:b5:2f:1f:3b:54:ac:5f:
ec:2a:5a:15:92:29:d9:4f:22:37:1c:d1:90:72:77:
ae:26:8e:a9:1b:20:d9:cc:47:8e:2d:57:84:b1:d9:
a1:a3:49:ce:aa:a0:f3:db:bf:32:5a:75:12:c4:cf:
b6:30:59:98:1b:86:62:f6:95:6b:73:e5:ef:af:14:
c7:f9:4d:2e:5e:48:cc:84:a7:17:10:1a:41:fd:09:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:96:D7:A0:92:F1:9A:CF:17:7B:DB:4B:11:5D:A9:BC:D2:AD:F9
X509v3 Authority Key Identifier:
keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:17:d9:ea:86:70:ea:47:a0:e8:70:3f:cd:e0:51:16:87:e3:
83:9c:45:60:eb:30:08:b7:7d:cf:21:4a:22:40:70:70:92:5c:
54:8f:bb:cb:c9:17:c9:12:0b:b1:1e:47:05:1b:6c:14:d9:b2:
be:e6:71:38:60:66:0e:9b:65:dd:18:49:80:f1:ba:87:1a:e5:
e4:75:95:4b:18:a4:fc:5f:a8:87:06:3f:0c:69:57:dc:3f:ce:
f9:5d:0c:1b:b4:fb:fa:cf:8c:43:d5:0b:a3:10:8a:8a:2e:f2:
89:83:38:d3:63:e2:72:45:e5:2a:22:4f:8c:0c:39:d8:1b:9c:
ad:dc:75:72:4b:f7:4d:c3:50:53:1d:50:bb:8b:f3:5f:16:64:
e2:21:b0:08:93:1a:9a:f0:7e:81:3d:73:d0:32:af:4a:7b:53:
0f:9f:a9:df:6a:6f:69:4c:88:ff:5b:0c:d5:25:ab:ab:59:67:
d0:07:43:1d:59:6b:d7:a2:76:ca:1e:4e:b5:55:11:c0:bf:62:
d3:3e:e3:0e:70:db:57:c3:4e:fa:3f:b4:07:20:da:22:43:c0:
cb:f5:89:07:46:eb:63:59:e0:05:69:25:cc:5b:5e:63:ad:b6:
d0:39:b2:e4:bd:56:d1:54:15:f9:85:c7:17:fd:98:21:67:53:
43:80:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:27 2025 by rpki-client