
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft
File: CF1D094BB231C3433115D5C53880889E2E701056.mft (raw, json)
Hash identifier: 7Me6Iilt0IGdBy4ju3mvnwK/4ep3Ezxraw34V0an7IA=
Subject key identifier: A5:EF:DE:D8:CD:16:BE:EC:27:AB:FE:0C:25:3B:F2:E3:12:A0:73:91
Authority key identifier: CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56
Certificate issuer: /CN=CF1D094BB231C3433115D5C53880889E2E701056
Certificate serial: 04A429A203FA1E71A8C07DCD78C9A499180E5CAB
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft
Manifest number: 1E
Signing time: Sun 31 Aug 2025 12:57:25 +0000
Manifest this update: Sun 31 Aug 2025 12:52:25 +0000
Manifest next update: Mon 01 Sep 2025 13:00:25 +0000
Files and hashes: 1: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: 8Md/La44Xpn1oMAzaG9XDAjv3TiFqdmAMPIZYNeSYkk=)
2: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (hash: 9FuIWN2ec49H8+soA+LiveYXJ3y0qS/R7Tx2QWopf0U=)
3: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: VFCaT5gWrcJkaWXTyEtArHJX8FDqDPtqQh1zCLlvdkg=)
4: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: MIvcm2K98lb9KDO/Md94OH42iP6tyrugKzMZDItmUtY=)
5: CF1D094BB231C3433115D5C53880889E2E701056.crl (hash: FqiUBTs8cWgUvyEYKMLGenNaXMccRqd0c68ArC6zQ7k=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a4:29:a2:03:fa:1e:71:a8:c0:7d:cd:78:c9:a4:99:18:0e:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF1D094BB231C3433115D5C53880889E2E701056
Validity
Not Before: Aug 31 12:52:25 2025 GMT
Not After : Sep 1 13:00:25 2025 GMT
Subject: CN=A5EFDED8CD16BEEC27ABFE0C253BF2E312A07391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:8f:82:a6:d6:cd:61:3f:62:0b:b5:dd:62:
cb:36:a7:4c:0c:82:f8:28:82:3c:63:39:48:a1:99:
4c:6d:bd:ab:6d:80:ac:bb:50:6e:65:b1:54:3b:59:
1b:f9:67:f6:f2:4c:ea:3a:1c:99:2c:aa:1e:e2:65:
db:ad:ce:b2:fe:74:e5:f5:d0:0a:f3:b2:84:40:6c:
c9:65:84:57:8b:10:9f:a3:e8:e8:a2:6e:c2:10:c1:
78:c0:75:0e:53:40:0c:f0:75:02:bb:cb:3d:7e:7e:
24:c1:5b:55:9e:74:7a:59:a0:af:be:ab:ed:fd:1e:
b7:85:28:c9:c6:ff:e0:ad:de:a2:0f:3e:b3:96:0b:
1b:f5:c0:6b:4d:c4:18:f7:e2:29:49:0b:5c:06:80:
e6:44:0e:8b:c0:79:96:49:39:be:36:a0:e5:7d:5e:
b0:1e:57:e5:d4:07:b6:33:3b:6b:bd:05:9b:0b:d1:
2a:80:41:44:19:65:d2:d5:28:34:56:0f:5b:16:08:
94:83:4b:4c:e8:3a:00:df:19:75:44:e8:5f:1a:1a:
83:a3:40:5f:8d:d2:d9:b3:a2:ce:b2:da:47:a0:43:
ce:9c:02:a6:e1:f0:8b:f6:4a:8a:48:0a:30:dd:ec:
ab:3d:eb:aa:3d:f6:44:4c:a9:98:b8:5d:53:08:42:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EF:DE:D8:CD:16:BE:EC:27:AB:FE:0C:25:3B:F2:E3:12:A0:73:91
X509v3 Authority Key Identifier:
keyid:CF:1D:09:4B:B2:31:C3:43:31:15:D5:C5:38:80:88:9E:2E:70:10:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/CF1D094BB231C3433115D5C53880889E2E701056.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/27ebde03-34df-4f2c-92fa-8fe1d083d15d/2/CF1D094BB231C3433115D5C53880889E2E701056.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:91:da:c7:4c:51:a2:68:db:78:8f:51:16:d2:34:b8:e5:94:
5a:19:17:c9:87:fa:a4:a0:4e:47:b9:23:fc:a9:01:cd:0e:31:
3c:57:8c:7f:5f:ac:e7:c1:5f:e2:75:66:a5:f2:bc:a4:d5:ab:
e2:87:35:f6:54:02:16:fb:c1:54:3c:fe:65:4a:00:a2:73:af:
59:bb:53:fd:6f:47:c4:f8:78:6b:9b:67:f4:14:e1:b0:73:30:
a3:42:e5:7f:6e:69:44:6e:5f:18:ca:60:20:6a:e7:f5:36:1c:
88:0e:89:33:76:24:5a:f2:70:36:53:c5:d8:19:02:3d:fe:5e:
c8:01:16:82:3d:70:86:ed:f2:81:83:40:21:dc:35:4e:b2:57:
cd:73:dd:c2:78:92:c4:fd:c8:c1:6a:25:1d:54:7c:49:aa:64:
42:c6:1b:93:47:c7:4e:bc:b9:87:3c:3d:81:5f:08:f2:3a:54:
dc:b9:e8:c9:d2:02:21:6b:9a:a0:05:63:c1:11:a1:78:91:1c:
81:e1:0b:0e:fe:4f:ca:61:96:88:9b:06:78:96:bc:fe:46:2f:
58:6b:4c:7b:72:a7:ff:b7:d3:8d:f9:26:04:ba:ef:53:cc:5d:
37:f8:06:db:d3:1b:f9:94:cd:7f:7c:24:85:eb:c5:7e:21:5b:
19:32:bf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 18:29:47 2025 by rpki-client