Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: Bw0yGVblrQvSEo5lrQztcaKNZClpRkjZGRyaqwNmGO0=
Subject key identifier: 2E:CB:BA:7C:B7:F0:C7:4F:EE:2B:B1:A7:E4:80:E5:A2:46:95:E9:5E
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 21817EE6B7860C48BB5E6E6845651B805C275C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 0114
Signing time: Thu 15 May 2025 21:10:52 +0000
Manifest this update: Thu 15 May 2025 21:05:52 +0000
Manifest next update: Fri 16 May 2025 22:47:52 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: tJbsX7g0x93xySsZcn4k96L09VVWhewK9ryhQUUut3I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:81:7e:e6:b7:86:0c:48:bb:5e:6e:68:45:65:1b:80:5c:27:5c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: May 15 21:05:52 2025 GMT
Not After : May 16 22:47:52 2025 GMT
Subject: CN=2ECBBA7CB7F0C74FEE2BB1A7E480E5A24695E95E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:f1:1b:1b:8f:46:a4:67:44:33:b3:9f:48:
13:6a:6b:6d:3e:11:f5:52:1e:30:52:24:28:79:a2:
89:71:c5:4e:54:2c:12:d8:24:02:6e:c8:af:64:c5:
ce:ad:02:51:9f:8e:fa:e1:09:30:63:e8:c5:51:07:
78:9f:5e:24:ee:26:ac:5d:f5:53:de:69:7c:98:18:
ef:5f:1e:b1:a7:0d:45:f5:17:cd:8c:06:d5:36:b2:
47:a6:7f:30:e5:c0:72:76:c9:85:0a:4e:cc:07:ab:
93:ce:f9:04:a0:89:1e:3c:1e:57:40:9e:82:da:df:
c1:8c:00:50:69:59:35:ef:85:42:ba:fd:cf:21:f5:
eb:45:12:3f:9c:18:3f:00:9d:f2:26:1e:e1:06:72:
3d:dc:fd:cf:b2:c0:d1:9b:1a:8b:5e:7e:47:11:37:
4e:a8:6d:77:11:5a:50:af:b1:b2:7d:d2:b2:dd:7d:
85:9f:f2:c3:f7:85:9c:ef:cb:8d:0e:54:1a:d1:25:
5e:35:b5:ab:c7:51:0e:2a:6d:41:41:76:bb:14:8f:
00:15:12:7e:34:4b:b6:c1:7b:27:7f:0b:2d:4c:fb:
04:f9:47:38:b8:8e:dd:65:9a:30:01:dd:c8:da:84:
a1:b1:99:c9:d5:2d:cc:6f:59:13:19:8b:42:0e:b8:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:BA:7C:B7:F0:C7:4F:EE:2B:B1:A7:E4:80:E5:A2:46:95:E9:5E
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b5:0d:c4:3d:0d:45:ee:3d:39:06:9c:95:21:00:bf:cd:c2:
6c:10:5f:05:f6:36:04:af:c4:4f:78:37:d2:ef:0f:4c:29:21:
c2:96:a8:80:2a:06:7d:35:74:6d:05:5d:ad:ba:2e:a0:88:3a:
ef:80:db:6f:30:fc:34:ed:e8:84:bb:3d:71:e9:92:30:cd:02:
7b:66:ba:29:48:e7:49:25:4b:bd:cb:49:15:d1:ef:ee:1a:c8:
e3:78:d2:31:cb:0d:8d:3c:db:eb:cf:0e:33:02:3f:6b:7a:a0:
45:3d:8f:f5:8a:0f:02:d6:62:b0:e2:95:c0:ee:e5:35:66:1c:
ee:d7:ad:78:a5:84:cc:df:f4:e7:f4:68:83:87:74:df:87:0a:
0a:4d:9a:48:4c:c2:74:6d:fb:e7:29:bd:0f:1d:cf:02:8d:a9:
0a:05:05:93:62:50:87:51:c3:cc:fb:c8:f2:e3:03:40:11:0e:
c6:be:0c:82:3d:4c:10:c6:1d:bf:94:7a:f1:31:1c:9e:ce:cf:
44:af:ff:54:56:ca:b2:71:1c:7b:20:e0:a2:a9:7f:f5:53:db:
29:3d:2e:56:29:13:de:91:86:0a:85:ea:1a:2b:9a:2c:29:57:
ee:b7:04:86:12:bb:15:f1:88:49:3c:56:90:1f:83:dc:74:7d:
cd:4f:19:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:13:08 2025 by rpki-client