Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier: 5y8od/jSPA8hb0KBL5EohCZv6CBjrPliNaEJhMEKJ+8=
Subject key identifier: FD:E5:8B:B9:2C:F1:CD:44:2E:B8:34:37:C7:25:30:CE:8B:42:FB:06
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial: 191A39FC2D69BACDE61D142B9D264CCF1E5C37FC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number: 14
Signing time: Sun 01 Jun 2025 16:35:32 +0000
Manifest this update: Sun 01 Jun 2025 16:30:32 +0000
Manifest next update: Mon 02 Jun 2025 17:32:32 +0000
Files and hashes: 1: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: tBPsN56khpMPulX2xhWdFkSuw1W2wRlpWAAZfHbPRnY=)
2: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1a:39:fc:2d:69:ba:cd:e6:1d:14:2b:9d:26:4c:cf:1e:5c:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Validity
Not Before: Jun 1 16:30:32 2025 GMT
Not After : Jun 2 17:32:32 2025 GMT
Subject: CN=FDE58BB92CF1CD442EB83437C72530CE8B42FB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:0f:e9:4a:71:c1:b0:88:1f:a9:68:c2:b9:
6c:02:cd:15:07:4a:9d:cb:8b:45:d1:0c:44:28:3d:
ca:77:2d:94:7b:d7:fc:b8:e5:04:9f:8d:84:6a:c9:
ef:a3:10:8c:15:ad:cd:0c:15:c7:be:a6:6f:9a:58:
e0:06:ff:70:c8:ec:75:34:45:fa:7a:7d:59:01:90:
5f:c4:ef:6f:27:a7:60:c6:38:be:a8:7b:25:cd:f9:
f5:0e:85:10:88:6c:9a:fc:f2:02:55:7b:13:63:54:
65:99:1f:ce:46:d2:eb:6a:28:39:91:ea:25:f7:1e:
a1:e3:7a:e8:86:0b:06:d9:6f:21:cf:ef:ba:56:82:
2c:74:71:6a:10:74:1a:e7:79:99:db:3b:d5:02:f9:
53:f3:85:95:e1:fa:f1:78:fa:03:3a:1a:19:db:ae:
9b:72:a2:ec:15:44:a0:5c:74:78:f9:cc:bb:85:9d:
82:4c:99:9f:63:6b:71:c3:42:44:41:21:36:29:e1:
3d:32:91:6a:a7:94:3a:af:f1:f7:09:17:0e:5f:c2:
a1:cf:fa:18:e2:e7:a7:69:e8:c4:59:94:ed:f1:eb:
34:f5:dc:93:2f:e1:52:9d:93:09:d7:07:e7:16:d6:
0a:be:92:56:09:2c:e1:cc:13:68:91:db:52:a5:f7:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:8B:B9:2C:F1:CD:44:2E:B8:34:37:C7:25:30:CE:8B:42:FB:06
X509v3 Authority Key Identifier:
keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:50:60:3f:b8:a0:1c:55:c7:db:83:82:7d:c7:8a:be:43:1e:
20:44:24:0c:b6:24:d1:3a:ce:e4:e2:fd:ec:47:4b:88:42:4d:
7a:60:5c:fb:0b:75:70:3d:14:b7:d6:39:e9:1a:25:1f:aa:49:
69:19:c5:09:ee:e9:16:80:1e:62:f4:13:53:d7:c2:1a:bd:cc:
20:eb:21:7f:7e:ad:ab:01:a3:ff:e6:a1:b1:b1:63:4a:e6:38:
df:c9:0c:e9:d1:81:1c:e4:f1:b4:cf:4b:f4:85:b3:73:b2:f6:
07:e6:be:86:b6:e5:ba:54:7d:31:37:ab:89:d3:97:93:a6:e6:
28:ac:8b:42:27:d1:85:1d:e2:66:70:a2:66:0b:42:8f:82:65:
3e:b6:77:e7:41:f0:6e:a1:d5:82:a9:79:53:6d:c8:25:47:4b:
a3:cb:53:1d:4a:31:c0:d0:46:ce:cb:6a:66:8c:9e:3a:89:6a:
7f:5b:4e:c8:93:14:ea:e8:3f:c7:32:f3:32:fc:22:e9:16:5c:
dd:c4:50:8c:00:25:0b:d0:48:51:83:ad:bb:65:4e:fe:4d:2c:
c7:64:e9:a7:9d:8e:d9:bc:37:d7:72:4f:fa:c5:96:ab:bf:0d:
d2:51:dc:d0:ab:4a:0e:de:bf:e0:9b:a5:f0:18:f0:5b:bc:28:
cf:f7:0f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:53:55 2025 by rpki-client