Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json)
Hash identifier: Drxq8oouUiG2sZMNsKSKs4ZPIN3cLdBOvZijxRiyhec=
Subject key identifier: 83:47:2C:8C:9D:07:8E:61:B0:50:13:8B:7F:DE:3D:9F:23:E9:1D:F4
Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Certificate serial: 29024BAD93BBCE453ACE684CCF438A799CF96535
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
Manifest number: 0203
Signing time: Tue 26 Aug 2025 20:32:24 +0000
Manifest this update: Tue 26 Aug 2025 20:27:24 +0000
Manifest next update: Wed 27 Aug 2025 23:44:24 +0000
Files and hashes: 1: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: gLECawEMv8Qc0owG9J6ozTWvWTg8wyWnK36sgt5BU0M=)
2: 326131333a393634343a343061653a3a2f34382d3438203d3e20323034323931.roa (hash: 0Augomo0JPTrdfBB/3ITj/ZgfSBftNdAdE/vOPCbcS0=)
3: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: 1o4m8PJbpPTt/WwCt8wMPBTEbmCl+8vcVtrKZbTYjFM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:4b:ad:93:bb:ce:45:3a:ce:68:4c:cf:43:8a:79:9c:f9:65:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Validity
Not Before: Aug 26 20:27:24 2025 GMT
Not After : Aug 27 23:44:24 2025 GMT
Subject: CN=83472C8C9D078E61B050138B7FDE3D9F23E91DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:2e:b0:65:92:f4:06:ad:d3:d9:a5:1f:70:
1b:56:37:58:68:3e:01:ab:40:a3:aa:f3:7d:25:97:
2f:28:5e:4f:a1:ed:79:17:7c:be:47:b6:9c:4b:37:
35:bb:a5:38:7e:ba:34:a6:54:60:53:7f:16:c0:81:
3b:51:26:d2:79:7c:dc:8b:1c:71:9b:84:c9:d9:ea:
43:01:55:fd:6b:49:a7:47:fd:f6:9d:86:93:a5:f3:
d0:1e:43:2e:4e:53:9b:5d:81:eb:be:c4:cf:90:a2:
a7:87:78:ec:a1:01:e5:7d:5f:5f:dd:63:21:22:ce:
39:1f:b7:80:f4:f6:88:ed:6f:f4:7a:59:29:b0:54:
9c:36:db:79:1d:6b:62:d0:a7:ea:dd:07:35:43:db:
7e:ab:56:e9:f5:49:97:ca:84:30:fb:1a:e3:70:4e:
5d:5a:53:d8:fd:33:f2:e1:09:e1:a8:90:6a:64:f5:
5e:b2:5d:a3:14:6b:7c:6d:ed:89:a3:3b:46:f5:50:
41:44:51:e3:24:3f:c0:c1:03:08:e9:55:b1:5c:e2:
c0:73:03:c8:03:61:f7:f5:fb:1a:e3:6b:7a:ef:55:
74:35:ce:24:d8:90:1e:ce:b6:56:6d:a8:12:ff:5b:
5c:3f:c6:4e:ab:fe:ee:02:d1:1c:e7:b9:2f:cb:72:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:2C:8C:9D:07:8E:61:B0:50:13:8B:7F:DE:3D:9F:23:E9:1D:F4
X509v3 Authority Key Identifier:
keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b2:29:57:d5:4a:4c:4e:4e:11:5e:54:de:ae:1d:6a:d0:f6:
15:da:3f:a8:d1:6f:e3:85:90:e5:7b:ff:29:b9:1b:72:43:2d:
b2:89:ec:47:4f:bb:e8:ff:1e:c2:5b:1a:44:48:f7:37:93:ab:
1b:cd:bd:ff:ef:af:5c:09:fb:5a:0e:2c:46:e1:1c:d7:b3:d8:
ac:ca:73:33:76:a0:f6:cf:d4:b9:50:ed:70:9e:eb:ad:14:2b:
cb:69:76:69:3e:07:36:d1:e5:72:21:e4:b6:f3:13:ab:9b:2f:
db:3f:d2:85:07:51:4a:5e:0c:f8:f0:a9:e1:60:d3:74:e8:14:
62:12:cf:92:31:38:71:a5:58:89:fe:44:32:12:e8:eb:98:fd:
8f:bd:fe:53:08:43:3b:f6:53:4b:63:40:7c:13:f1:78:2a:b3:
3f:70:03:89:0d:05:61:1b:5e:64:4d:4b:16:5f:4c:14:dd:66:
7c:f0:c6:a2:00:87:7c:41:1b:04:23:32:cb:b2:88:c6:35:7f:
5b:6d:09:85:fc:25:34:39:f3:a7:fa:6a:9c:af:7c:08:00:2d:
25:e5:a6:56:e6:db:2f:38:ae:da:ef:bb:ca:85:93:3f:c8:0e:
c2:27:27:b0:07:4b:f1:04:c5:ed:9b:52:78:c3:f8:c9:0d:5c:
81:61:1f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:17:11 2025 by rpki-client