
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/6/5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4.mft
File: 5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4.mft (raw, json)
Hash identifier: KoRVCpdPa6qJj2TOEqhbfY4E4f8TidDvk3pJsSaBo4w=
Subject key identifier: 55:8D:60:CB:53:DA:39:EB:61:E3:DD:E2:4B:EC:B9:91:4E:F9:6A:ED
Authority key identifier: 5C:44:9C:F3:CC:3D:DC:70:B2:24:53:7B:8D:CE:EC:1E:35:63:AC:E4
Certificate issuer: /CN=A91650860000/serialNumber=5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4
Certificate serial: 3DDF23EF17DA8E4E69445BC4F8B0E1956B190F0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XESc88w93HCyJFN7jc7sHjVjrOQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/6/5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4.mft
Manifest number: 01
Signing time: Thu 03 Jul 2025 03:59:59 +0000
Manifest this update: Thu 03 Jul 2025 03:54:59 +0000
Manifest next update: Fri 04 Jul 2025 04:33:59 +0000
Files and hashes: 1: 5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4.crl (hash: qYQrT/dIw/Mbqwlw2jGsq6A9lnoFRMn30gi9qJAOtaM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:df:23:ef:17:da:8e:4e:69:44:5b:c4:f8:b0:e1:95:6b:19:0f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4
Validity
Not Before: Jul 3 03:54:59 2025 GMT
Not After : Jul 4 04:33:59 2025 GMT
Subject: CN=558D60CB53DA39EB61E3DDE24BECB9914EF96AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:82:55:f1:9c:f4:91:d4:26:a8:ac:1e:70:
6d:8b:b2:ff:aa:87:2e:c5:a6:15:ed:1e:74:3f:dc:
f8:c7:b6:30:fe:1a:69:1c:65:87:51:1d:58:85:84:
ea:a4:1b:16:2c:68:6d:c2:fb:8c:82:b0:a0:e7:ab:
3b:15:ea:e7:15:59:f9:f3:12:f6:67:2a:32:7f:97:
db:2d:e1:57:54:67:3b:5d:21:db:0c:f6:35:df:39:
69:42:55:ec:41:3f:a9:cf:cb:80:ec:f1:bf:ce:74:
9d:b3:7d:12:b8:c5:f7:26:25:5c:fc:ad:3d:1e:c7:
29:e1:39:2f:8d:ae:fc:9d:3c:67:66:08:c3:22:61:
67:c9:73:17:5e:39:d7:5c:6a:0a:5a:50:f3:a5:19:
a7:17:3f:80:78:a1:11:c5:63:a7:c3:32:3e:ef:5a:
63:e2:59:87:ba:9d:8f:a4:a7:a8:92:da:5f:48:20:
cb:35:fe:e6:84:04:44:21:38:4b:5a:96:55:24:03:
79:f3:3b:07:fb:55:d0:67:b9:4c:ae:b1:2d:52:2d:
23:fb:0b:ae:0a:76:cc:35:56:da:25:4c:af:81:22:
cf:c6:92:36:91:36:d6:d1:38:5e:69:cc:62:b1:9d:
aa:3a:1f:0a:bd:77:70:8f:6b:57:77:4d:93:5b:ba:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:60:CB:53:DA:39:EB:61:E3:DD:E2:4B:EC:B9:91:4E:F9:6A:ED
X509v3 Authority Key Identifier:
keyid:5C:44:9C:F3:CC:3D:DC:70:B2:24:53:7B:8D:CE:EC:1E:35:63:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/6/5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XESc88w93HCyJFN7jc7sHjVjrOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5632dc04-68db-4791-87de-0683e3c28646/6/5C449CF3CC3DDC70B224537B8DCEEC1E3563ACE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6e:46:05:00:76:2f:16:a6:d7:81:b7:03:34:0d:6b:80:34:
c3:22:0a:a3:94:cf:76:5a:f1:2f:5b:1f:5d:89:6c:55:75:5d:
6b:63:88:73:dd:43:c2:cc:3e:9f:05:a0:a2:76:a1:6f:eb:70:
8b:72:c2:ce:1b:16:c5:af:ce:23:6d:d2:66:bd:50:c6:ea:73:
d4:45:5e:74:fc:ed:d3:85:7a:03:2f:33:1f:6a:67:16:c9:94:
58:e2:2b:c3:4f:33:3f:28:7b:c1:ee:e0:d6:04:bd:70:df:f8:
37:fa:3d:4d:a8:ef:e5:e9:40:1e:74:05:56:e5:0a:21:60:71:
9f:47:6a:da:e1:b8:f8:ec:11:92:f8:42:05:fc:dd:2c:63:28:
29:7a:cb:26:d9:61:e5:a8:da:27:b5:6d:6a:7f:c7:e5:c2:0d:
13:db:77:82:0d:9e:c1:f7:68:97:dd:9f:7d:40:54:7c:50:42:
1e:dd:c1:a9:a6:5f:87:37:14:64:e8:03:e9:d8:ec:2c:f9:b7:
ec:1e:55:7e:98:20:70:1f:56:55:66:02:ee:bd:03:ba:73:25:
33:93:02:7e:8e:a2:4a:8f:43:2f:28:c4:ba:01:cc:5e:5e:9a:
50:8e:ce:9c:4e:5a:19:4d:9e:67:ed:9b:02:fe:55:6b:d9:d0:
c8:e8:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 07:43:56 2025 by rpki-client