![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
File: 130671BB4F638012F828BBA2CCE785C172530C02.mft (raw, json)
Hash identifier: eOt7zgLqv1y15z/A7Uo7/QlPcczbw0nFhJi9gmP0QAc=
Subject key identifier: 72:D3:1F:C6:F7:55:5B:7E:4F:10:C3:9F:19:AB:10:45:E6:BC:06:07
Authority key identifier: 13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
Certificate issuer: /CN=130671bb4f638012f828bba2cce785c172530c02
Certificate serial: 50A96FF7AED1A5F6B5F45E56C874FDCEC45E351D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
Manifest number: 0150
Signing time: Wed 12 Feb 2025 17:27:07 +0000
Manifest this update: Wed 12 Feb 2025 17:22:07 +0000
Manifest next update: Thu 13 Feb 2025 18:00:07 +0000
Files and hashes: 1: 130671BB4F638012F828BBA2CCE785C172530C02.crl (hash: 46zRBWO69HzTIViJaTP29kKpGU4w8P1SlELE3X7FhrQ=)
2: AS216265.asa (hash: 7Lz5u6dspoAf8XEf9PvYLdZiJcFIKOab5BVMust54Ec=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a9:6f:f7:ae:d1:a5:f6:b5:f4:5e:56:c8:74:fd:ce:c4:5e:35:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130671bb4f638012f828bba2cce785c172530c02
Validity
Not Before: Feb 12 17:22:07 2025 GMT
Not After : Feb 13 18:00:07 2025 GMT
Subject: CN=72D31FC6F7555B7E4F10C39F19AB1045E6BC0607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:42:f9:99:77:be:e6:af:c5:47:31:c4:51:
46:12:f4:97:d7:a0:93:41:e9:b5:e7:1f:65:99:d0:
c1:12:ec:a4:53:91:31:21:78:ba:41:cc:be:ef:ed:
89:e2:5c:1e:ad:f0:84:ec:10:90:54:07:35:b6:de:
4c:94:5a:0a:09:dc:4a:d2:d1:5c:9a:b9:50:48:34:
34:ae:52:6c:ed:9b:4f:9d:28:09:f8:81:b2:85:b8:
5e:b0:5c:b7:f6:97:12:07:35:32:5e:fe:6c:82:24:
86:4a:f3:32:f7:a9:e1:59:80:c0:48:7c:b0:4a:4b:
11:0d:ea:74:16:3a:95:c4:fd:73:8e:03:3f:38:01:
57:6c:27:af:3c:04:9c:82:08:1e:f3:eb:09:06:aa:
73:77:87:66:c0:60:da:26:7d:03:c9:1a:fb:4d:69:
c7:72:7a:93:7b:4e:d3:94:07:6b:0d:7b:a5:3d:0f:
cd:c4:07:3f:aa:eb:d2:74:00:45:ab:1b:f2:cd:b0:
b9:08:4c:42:dc:d6:73:39:b3:51:e4:85:db:37:44:
2f:db:9c:cf:d7:8e:29:6a:0b:9f:5f:2c:3b:fa:9c:
f0:a1:3a:2b:e8:ef:a1:f7:8e:58:f0:84:b9:5f:eb:
9e:5a:65:34:7a:62:03:06:cf:ca:15:49:bc:8d:e0:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:1F:C6:F7:55:5B:7E:4F:10:C3:9F:19:AB:10:45:E6:BC:06:07
X509v3 Authority Key Identifier:
keyid:13:06:71:BB:4F:63:80:12:F8:28:BB:A2:CC:E7:85:C1:72:53:0C:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwZxu09jgBL4KLuizOeFwXJTDAI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24cc8de5-4b4b-4276-aa26-8c5580099026/0/130671BB4F638012F828BBA2CCE785C172530C02.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:83:d4:3c:89:89:cc:18:6d:c5:12:7a:48:be:fb:50:34:4b:
f3:70:df:3e:50:81:2e:59:a3:6e:2e:4c:67:97:57:5a:0c:f5:
60:69:e1:9d:d7:66:5e:01:f9:37:9f:cf:be:cb:2c:20:41:ee:
de:96:55:ed:69:a9:99:5d:ba:4f:a0:f0:eb:6b:4d:bb:60:e3:
c3:35:79:71:0d:26:cb:88:da:91:2f:0b:54:c4:6e:b0:d4:ee:
f8:9b:72:c9:e9:7d:15:02:5b:de:1b:d5:49:0f:d1:11:7c:d1:
56:99:3b:ec:df:54:48:2d:b2:e5:5a:7b:08:bc:e8:54:57:c2:
a2:9d:10:ee:12:8f:63:46:f2:e9:4f:d2:d4:3f:eb:5d:69:7d:
fb:d2:56:cc:2b:db:46:38:d4:e0:2c:2e:51:70:25:c5:9a:9f:
fa:7a:bc:d6:21:70:a8:95:29:2a:74:b7:e9:33:87:06:59:4d:
ba:45:d6:ff:ae:59:b1:8a:35:8c:6b:5f:bd:98:9f:06:50:61:
eb:80:33:69:a0:b0:84:66:07:4f:d9:c8:97:ed:fa:fb:c1:56:
19:ac:e9:cb:9d:37:85:d4:49:ec:ca:b7:85:d9:2d:60:7e:5f:
81:ca:da:14:41:2c:f0:dc:1c:c8:f3:b1:96:76:b8:cc:76:85:
54:51:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:23 2025 by rpki-client