Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/EC6C7177521BD791A07FA0AA12E710B684F06985.mft
File: EC6C7177521BD791A07FA0AA12E710B684F06985.mft (raw, json)
Hash identifier: BU2lIYcemQVzlA/WNJkC3Rsr7zCira3+VjFyKr7lYxU=
Subject key identifier: 29:89:B5:CC:68:68:99:A5:2F:88:37:4B:1A:41:B9:03:2D:9F:A9:7E
Authority key identifier: EC:6C:71:77:52:1B:D7:91:A0:7F:A0:AA:12:E7:10:B6:84:F0:69:85
Certificate issuer: /CN=ec6c7177521bd791a07fa0aa12e710b684f06985
Certificate serial: 1EB2A88F39D237E809D2A63FEA1BBCD62EEB43E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gxxd1Ib15Ggf6CqEucQtoTwaYU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/EC6C7177521BD791A07FA0AA12E710B684F06985.mft
Manifest number: 0100
Signing time: Tue 25 Feb 2025 13:11:30 +0000
Manifest this update: Tue 25 Feb 2025 13:06:30 +0000
Manifest next update: Wed 26 Feb 2025 16:28:30 +0000
Files and hashes: 1: EC6C7177521BD791A07FA0AA12E710B684F06985.crl (hash: AciyUvxrLQT6g24S6m76r3x8M2EODVhByH6rphC5BSo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b2:a8:8f:39:d2:37:e8:09:d2:a6:3f:ea:1b:bc:d6:2e:eb:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6c7177521bd791a07fa0aa12e710b684f06985
Validity
Not Before: Feb 25 13:06:30 2025 GMT
Not After : Feb 26 16:28:30 2025 GMT
Subject: CN=2989B5CC686899A52F88374B1A41B9032D9FA97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:b7:0c:83:ba:40:06:e0:9e:15:0a:0d:f4:
b9:fd:17:03:ed:36:85:46:02:89:d4:02:bd:02:15:
9e:14:b2:c5:47:48:e7:91:a5:d9:6a:f5:da:5e:dd:
90:91:36:0f:be:c8:01:35:dc:bf:b4:06:a0:a9:1d:
a0:4f:fc:30:b2:cf:d2:ff:9c:68:1c:4d:13:be:e7:
d3:34:42:81:c1:b3:b5:38:fb:ba:b9:8c:a2:97:db:
0d:53:76:3c:ab:c7:a0:df:d8:19:98:cc:1e:8f:fd:
f7:c0:98:b3:ae:5f:be:56:0d:ad:8f:38:29:18:89:
62:2f:fc:40:78:23:00:38:7f:8c:14:d8:43:e8:3a:
01:fd:61:85:6d:6c:db:1e:63:de:10:db:4f:eb:19:
02:83:77:1e:ad:77:14:3e:05:76:cb:22:57:ce:04:
34:c5:ad:d6:bb:9d:3b:e5:4d:19:e5:30:6d:b0:fc:
01:f6:60:e2:0c:34:2c:a5:68:7a:2d:63:c9:4a:07:
f2:99:8a:79:e0:0a:1f:fa:6f:a0:9d:a0:1d:bd:7d:
89:fa:21:c8:2e:d5:ea:d2:56:18:cb:41:9a:ef:77:
dd:06:cf:95:4a:33:27:15:76:59:80:c5:17:e7:69:
dd:24:1c:14:ac:92:99:6e:f1:f7:47:a0:34:c4:46:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:B5:CC:68:68:99:A5:2F:88:37:4B:1A:41:B9:03:2D:9F:A9:7E
X509v3 Authority Key Identifier:
keyid:EC:6C:71:77:52:1B:D7:91:A0:7F:A0:AA:12:E7:10:B6:84:F0:69:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/EC6C7177521BD791A07FA0AA12E710B684F06985.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gxxd1Ib15Ggf6CqEucQtoTwaYU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2feab205-d14b-4a2a-a38a-6be9ee483ace/0/EC6C7177521BD791A07FA0AA12E710B684F06985.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:02:59:f7:b5:a8:ba:94:54:59:3f:db:08:55:eb:c2:ac:31:
49:ef:96:5f:42:bc:26:8e:9a:61:d4:1a:ed:94:29:f8:f2:4e:
5f:c1:6b:c5:74:08:15:98:2f:7a:a2:60:7e:13:60:9b:91:82:
9f:7b:ff:ae:4a:e6:cd:f3:b6:07:89:e4:96:6c:d0:6b:39:ba:
70:fd:40:82:ff:9e:5c:04:9a:74:7b:5a:6d:e8:0e:87:8c:a0:
9b:e9:c2:d5:f5:0e:33:66:b6:40:fa:80:ba:7c:06:ad:8f:6c:
1e:66:67:6a:58:9e:0f:a2:57:28:b4:0c:7c:36:3f:85:df:95:
28:5d:d0:59:36:78:21:3b:53:4b:22:40:24:58:8a:09:0c:82:
e2:5f:af:a3:ce:42:01:1f:66:90:53:70:ac:38:2a:45:5b:3c:
df:f5:fc:93:d9:93:31:6d:59:8e:d7:2d:1c:e8:23:75:14:21:
ef:9d:df:83:38:41:48:59:d4:a8:da:2f:94:88:43:64:79:98:
f7:a7:88:ce:47:55:09:18:a5:a2:15:a5:20:bb:af:9b:c0:6b:
45:fd:fe:f2:3c:49:96:54:81:6d:5f:dd:ed:7d:95:e9:8e:75:
2f:63:dc:48:c0:cd:fa:6b:c6:51:b7:15:3d:03:f7:a6:07:28:
ce:1e:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:27 2025 by rpki-client