Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier: sm+elT3q3m8e/pMzb4xGD4dF0YoSFfuyKDoTcqSBY/E=
Subject key identifier: C5:0A:ED:62:9A:58:D3:2F:0D:BE:A4:F5:FE:4D:45:48:5C:15:C9:0D
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer: /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial: 0E5A896989142CF9070DA966F3A2C30C64AEB008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number: 020A
Signing time: Tue 26 Aug 2025 21:42:38 +0000
Manifest this update: Tue 26 Aug 2025 21:37:38 +0000
Manifest next update: Thu 28 Aug 2025 01:40:38 +0000
Files and hashes: 1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: EtN/dnaXgUbWYBAE8vjAOQPW/375SxH3isu4yC1oo0w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:5a:89:69:89:14:2c:f9:07:0d:a9:66:f3:a2:c3:0c:64:ae:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Validity
Not Before: Aug 26 21:37:38 2025 GMT
Not After : Aug 28 01:40:38 2025 GMT
Subject: CN=C50AED629A58D32F0DBEA4F5FE4D45485C15C90D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:f3:8d:3e:81:de:da:93:37:55:11:03:31:
43:ce:e5:8a:b7:b9:af:85:52:e6:0a:74:40:d4:8f:
a9:bf:4c:64:3c:2c:c5:79:34:e7:b8:a0:c3:3d:e7:
6b:69:3e:01:76:b6:7a:80:52:00:fc:d9:8c:e5:7c:
31:60:7d:a4:16:87:bc:46:5b:b7:d2:e3:da:82:3a:
ba:83:59:50:fa:68:9b:f0:b4:9d:93:22:c5:a4:39:
21:cd:d7:d4:18:bb:e8:57:44:51:9a:2c:dd:aa:47:
c4:33:a1:ac:01:94:c5:63:e2:c7:b7:e6:bf:ad:ea:
89:4c:77:c4:b1:60:2a:44:f0:6f:f3:24:74:c4:89:
e6:81:70:d2:93:51:62:b3:66:9d:d6:c6:2b:fa:75:
6f:cf:69:73:40:da:4a:92:48:74:cc:f4:23:e8:9e:
00:0b:9a:c6:a4:5e:d5:ef:b5:bc:a9:78:28:ea:3e:
4f:80:d2:a4:1b:c4:49:8a:f2:f1:7e:82:40:77:c9:
3f:42:d7:fb:cb:95:08:93:9d:6f:7d:27:d9:9d:fe:
70:c2:51:ce:f7:bf:3e:32:c9:41:84:b6:f2:ac:4a:
e6:ea:42:4a:38:d5:62:34:0d:84:b1:ac:90:0c:01:
ac:3f:4b:e8:19:e2:82:11:2f:d9:79:9e:3f:20:c8:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:ED:62:9A:58:D3:2F:0D:BE:A4:F5:FE:4D:45:48:5C:15:C9:0D
X509v3 Authority Key Identifier:
keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:da:c1:09:e9:2f:f1:33:b9:29:c4:23:e3:fb:aa:ba:aa:d2:
de:6e:2f:40:b1:c6:f6:68:f1:a8:b3:15:14:51:71:1e:d0:4d:
0f:74:93:6b:e9:fe:cd:63:6a:6e:06:30:3d:97:bb:45:a3:c4:
75:d4:3b:a1:36:5e:a1:b0:f1:ff:7a:8f:f6:80:e3:ba:17:00:
f8:03:66:26:e9:d4:1f:ec:e3:71:fb:63:ec:44:bf:51:68:6b:
05:b1:4b:d5:97:dc:91:a8:af:ce:0d:fd:71:35:ba:71:31:1d:
fe:e0:33:6c:90:59:40:64:c5:b9:a7:8e:9c:20:28:1b:75:04:
de:bf:79:33:7f:ba:68:ad:13:3a:fe:f0:c7:af:c2:0b:ac:98:
23:e4:57:f6:11:d5:9d:82:4f:61:25:fc:d2:57:9a:6a:eb:59:
58:43:7e:1a:67:53:98:6c:61:aa:9c:26:82:6e:f2:7f:3c:1e:
e4:0b:46:96:fb:6c:87:e8:a8:d6:05:99:a1:f3:69:60:d2:ff:
9c:6f:89:e3:c5:45:33:6b:85:99:0c:13:aa:da:e3:cf:c0:b8:
a3:52:c2:0c:94:94:4e:8a:79:6d:a7:b0:4f:21:89:fb:05:0e:
d5:70:2e:a2:bc:ae:15:b0:f7:2f:c5:84:db:8e:a6:87:37:e3:
70:58:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:48 2025 by rpki-client