Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: i09hETGeXaqA5tmIcQYttae+DjnOC6oNObwVfuXa09g=
Subject key identifier: B0:35:63:18:BC:61:36:DD:28:40:26:68:84:8B:2D:D2:FE:B3:25:EE
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 39BA780FAC1F36C7AEEF5FF8665447A4085D0934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0200
Signing time: Thu 28 Aug 2025 17:17:40 +0000
Manifest this update: Thu 28 Aug 2025 17:12:40 +0000
Manifest next update: Fri 29 Aug 2025 17:20:40 +0000
Files and hashes: 1: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
2: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: vLqIOWEGvh50yBM5GSLAaEEsC3ltK1/NpeZUkPbQyao=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ba:78:0f:ac:1f:36:c7:ae:ef:5f:f8:66:54:47:a4:08:5d:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Aug 28 17:12:40 2025 GMT
Not After : Aug 29 17:20:40 2025 GMT
Subject: CN=B0356318BC6136DD28402668848B2DD2FEB325EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:77:5a:6b:62:3d:7e:51:53:bc:4b:46:af:
34:2f:15:31:d1:1d:96:68:4a:b7:0f:39:39:21:a5:
5f:bf:a8:ad:8d:b2:87:19:45:b3:c6:72:5e:64:21:
d2:4d:9b:50:ef:c6:ee:b6:36:f8:5f:6b:06:4a:6a:
c4:b5:e4:51:fa:da:ba:2c:68:bc:7e:70:53:d5:20:
a1:af:39:35:a5:be:ea:31:03:fd:52:17:b8:01:c3:
27:06:07:c5:21:ae:69:2b:a5:c2:ef:dc:be:a6:14:
85:4f:48:7d:08:59:79:6e:a9:f5:23:d5:cc:6f:83:
51:c3:5b:be:b1:50:33:11:3c:34:f7:c6:82:0f:54:
cd:9a:d5:1a:78:64:dd:82:90:76:94:95:8c:bb:b2:
37:56:f5:fe:11:2e:d2:a7:9a:ea:dc:68:3b:1c:0e:
55:8a:c2:ea:c1:91:ef:42:39:12:a4:62:5a:9e:3a:
19:f2:58:2b:3f:9c:cc:c3:e9:3b:04:5c:af:eb:a0:
93:ba:3d:50:67:ce:3d:c6:64:bd:ec:e2:de:26:84:
21:34:92:f4:06:7d:28:f4:1c:9d:fb:6b:85:fa:f0:
e8:15:af:d1:c2:92:7f:71:ad:87:1a:f7:b8:1c:70:
4c:0a:41:c5:7d:2d:d9:51:f8:1d:64:3a:36:08:ee:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:35:63:18:BC:61:36:DD:28:40:26:68:84:8B:2D:D2:FE:B3:25:EE
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:34:46:d0:c8:27:bb:dc:2f:7c:9f:bc:db:e2:39:53:e0:
6e:44:9f:8a:1b:59:72:ee:bc:22:e8:56:d4:65:ea:21:df:9e:
e2:2b:58:0a:8e:bb:36:61:f4:3b:19:43:cb:e8:d5:a4:49:6f:
72:e4:6a:65:dd:51:d9:10:92:22:8e:dc:9b:da:d4:9e:99:7a:
8f:45:be:58:ed:8d:89:4d:35:0c:9c:09:8c:ab:87:ae:41:0e:
81:36:3f:9c:8c:6d:ce:cc:df:2e:2b:71:b9:38:fe:62:31:aa:
4f:2d:f7:c9:5c:60:ce:25:16:96:0e:e4:b1:b4:84:52:fb:b6:
ba:d9:92:f3:6c:3a:cd:51:f5:08:9a:f4:8f:ab:20:fb:26:d4:
44:2e:64:db:64:37:fe:59:f7:42:16:fd:ba:71:fa:be:ae:0c:
f0:ca:2d:c8:8f:ed:97:5b:3b:8d:94:ed:5e:08:e5:66:89:2f:
91:9e:92:a2:e5:0d:ea:7a:af:fb:0d:4a:c5:1f:62:89:5a:23:
c3:13:be:f8:cd:d8:d2:84:7c:5b:0a:42:38:26:55:ac:16:95:
9f:06:a9:80:26:4f:a5:35:70:ed:11:60:03:87:ec:32:c2:6c:
c6:a5:74:cd:78:ac:a0:c7:93:53:42:59:85:b1:9a:c9:8c:76:
28:41:4e:cc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUObp4D6wfNseu71/4ZlRHpAhdCTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGNkYjMyZDYyNTNmYmFmZTA3Mzc4YTFhMzA5NDZhNzNh
ZWM3ZTNkNDAeFw0yNTA4MjgxNzEyNDBaFw0yNTA4MjkxNzIwNDBaMDMxMTAvBgNV
BAMTKEIwMzU2MzE4QkM2MTM2REQyODQwMjY2ODg0OEIyREQyRkVCMzI1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Z3daa2I9flFTvEtGrzQvFTHR
HZZoSrcPOTkhpV+/qK2NsocZRbPGcl5kIdJNm1Dvxu62NvhfawZKasS15FH62ros
aLx+cFPVIKGvOTWlvuoxA/1SF7gBwycGB8UhrmkrpcLv3L6mFIVPSH0IWXluqfUj
1cxvg1HDW76xUDMRPDT3xoIPVM2a1Rp4ZN2CkHaUlYy7sjdW9f4RLtKnmurcaDsc
DlWKwurBke9CORKkYlqeOhnyWCs/nMzD6TsEXK/roJO6PVBnzj3GZL3s4t4mhCE0
kvQGfSj0HJ37a4X68OgVr9HCkn9xrYca97gccEwKQcV9LdlR+B1kOjYI7rkfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsDVjGLxhNt0oQCZohIst0v6zJe4wHwYDVR0j
BBgwFoAUDNsy1iU/uv4HN4oaMJRqc67H49QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzAvMENEQjMyRDYyNTNGQkFGRTA3Mzc4QTFBMzA5NDZBNzNBRUM3RTNENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ROc3kxaVVfdXY0SE40b2FNSlJxYzY3
SDQ5US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01
ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMC8wQ0RCMzJENjI1M0ZCQUZFMDcz
NzhBMUEzMDk0NkE3M0FFQzdFM0Q0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIA0RtDIJ7vcL3yfvNvi
OVPgbkSfihtZcu68IuhW1GXqId+e4itYCo67NmH0OxlDy+jVpElvcuRqZd1R2RCS
Io7cm9rUnpl6j0W+WO2NiU01DJwJjKuHrkEOgTY/nIxtzszfLitxuTj+YjGqTy33
yVxgziUWlg7ksbSEUvu2utmS82w6zVH1CJr0j6sg+ybURC5k22Q3/ln3Qhb9unH6
vq4M8MotyI/tl1s7jZTtXgjlZokvkZ6SouUN6nqv+w1KxR9iiVojwxO++M3Y0oR8
WwpCOCZVrBaVnwapgCZPpTVw7RFgA4fsMsJsxqV0zXisoMeTU0JZhbGayYx2KEFO
zA==
-----END CERTIFICATE-----
Generated at Thu Sep 18 05:40:22 2025 by rpki-client