Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json)
Hash identifier: 9TcvCHP0qHcyC2izqg1iJ+3iLrnvWPjoQTgDYmm01NM=
Subject key identifier: E0:56:B8:B6:B5:51:21:BE:69:08:83:97:64:30:D1:57:08:CF:D7:88
Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B
Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
Certificate serial: 4D48C08BB29B8DD3EA752AC09E1C305C99333DD0
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
Manifest number: 0139
Signing time: Thu 05 Jun 2025 16:25:28 +0000
Manifest this update: Thu 05 Jun 2025 16:20:28 +0000
Manifest next update: Fri 06 Jun 2025 19:32:28 +0000
Files and hashes: 1: 326131343a373538343a323030303a3a2f34342d3438203d3e20323134343531.roa (hash: TvKEkNYj4nNFZRmfcRKXhCgzG3ePxJK2Myah2LEVKqU=)
2: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: CFnkTp4Sn1rRalYXpJXSbgyAFGq8VVit9rBrAV17k7w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:48:c0:8b:b2:9b:8d:d3:ea:75:2a:c0:9e:1c:30:5c:99:33:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B
Validity
Not Before: Jun 5 16:20:28 2025 GMT
Not After : Jun 6 19:32:28 2025 GMT
Subject: CN=E056B8B6B55121BE690883976430D15708CFD788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:88:6a:f5:28:33:56:c4:58:0a:11:95:30:
6f:b7:c4:b8:0b:f8:72:be:cb:42:94:5d:41:7e:e2:
7e:53:c9:14:83:7e:3c:9a:87:3f:9d:9f:a9:4b:27:
3d:b0:98:3b:d6:0f:b5:f2:75:0b:29:e5:ef:8a:21:
2d:a0:bf:fa:aa:15:b8:69:96:17:eb:48:4d:df:67:
10:94:80:37:d3:d4:1b:51:72:11:36:ce:a0:75:a7:
35:10:75:da:dc:7f:17:64:96:a1:8a:8c:97:b2:82:
27:67:0f:93:d5:23:78:6f:81:9c:c8:aa:cd:18:26:
82:32:0c:e2:d0:9f:7e:8a:91:8c:e5:f9:d4:ba:49:
db:ff:7e:87:29:41:12:0a:37:21:b6:fe:22:40:e6:
3b:16:e7:5c:50:57:48:6e:c4:68:6e:a1:c1:c5:6a:
a5:69:79:61:6e:f9:6c:bb:93:18:18:e9:a0:7e:f4:
c2:73:55:73:d7:93:56:17:fe:26:b6:be:a4:33:a5:
8e:00:4a:85:94:68:c0:75:43:ac:95:e2:15:1c:d5:
58:d3:58:fc:a5:61:74:09:1a:e2:c4:07:ed:22:84:
57:50:2b:2e:06:30:23:08:51:c8:b7:cb:f3:e7:69:
1d:ae:d9:e6:a6:f5:ae:50:57:31:ab:04:f8:2d:34:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:B8:B6:B5:51:21:BE:69:08:83:97:64:30:D1:57:08:CF:D7:88
X509v3 Authority Key Identifier:
keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:85:3a:c0:6e:a4:1d:cb:0c:28:dd:6a:59:e9:20:ab:d0:00:
16:75:cd:61:30:01:02:b6:a2:d5:36:7c:0c:5c:49:c7:2c:ea:
fd:e7:e2:76:77:a8:f6:4b:8e:79:48:bc:d2:77:78:c5:55:4e:
10:90:6c:8c:65:3c:87:fb:1a:31:f9:3e:e3:3b:f8:ef:0b:42:
18:e9:d5:41:04:97:29:98:84:b8:f7:c5:7e:df:d4:db:2a:26:
b0:1f:de:b9:ae:11:de:6d:66:71:d6:a5:0d:d6:4a:75:9a:f4:
c0:46:4a:b3:1e:9b:ad:93:b3:17:1e:e0:4c:af:cd:b2:92:aa:
c9:d1:2a:86:73:73:04:a3:ef:99:ba:9e:fc:dd:43:e0:ac:55:
31:df:1d:6f:8e:de:72:95:87:ae:d8:d5:de:ef:67:56:9c:0c:
0e:c0:93:e0:1d:1b:ee:6c:c3:a5:ad:cc:2f:4f:0d:d4:85:b8:
4c:c9:d1:7a:e9:68:80:0c:0b:1c:71:1c:a3:b3:e3:66:a4:11:
76:2f:ea:9d:7e:30:6d:eb:6d:cc:18:1b:79:fd:fe:61:55:aa:
7e:5b:e3:88:d2:b0:e3:ff:9f:63:ae:47:05:cf:40:16:ff:79:
06:18:13:f7:22:c0:99:d2:b3:4c:b0:fc:37:7a:ec:ea:fa:a5:
89:93:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:06 2025 by rpki-client