Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier: odyxKT3LkdAnpdrQZtpBFRe2Ib9A7VDbrfvnonAhEq0=
Subject key identifier: 70:5D:42:D5:A3:70:76:79:B2:93:15:A2:F9:3C:79:5D:29:1D:0C:D4
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial: 295AECE6E04F90292652005DA33322B61A67A9F1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number: 0201
Signing time: Thu 28 Aug 2025 21:02:40 +0000
Manifest this update: Thu 28 Aug 2025 20:57:40 +0000
Manifest next update: Sat 30 Aug 2025 00:53:40 +0000
Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: fybVFkXf2oUzo4AZ8DliwDcOW2oF9cGFKQVDAukObsc=)
2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=)
3: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=)
4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=)
5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:5a:ec:e6:e0:4f:90:29:26:52:00:5d:a3:33:22:b6:1a:67:a9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Validity
Not Before: Aug 28 20:57:40 2025 GMT
Not After : Aug 30 00:53:40 2025 GMT
Subject: CN=705D42D5A3707679B29315A2F93C795D291D0CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:ef:e6:fd:05:b2:83:9c:2b:eb:c9:4c:14:
f8:a8:04:65:c8:c3:91:0e:3a:57:51:bd:11:b8:fd:
51:4e:9d:70:28:26:19:b4:ea:cb:a8:95:27:b9:d2:
06:66:22:3a:31:84:f1:16:9e:b7:ec:9b:7f:bd:01:
78:5d:3f:5b:80:ca:ce:fe:9f:7d:77:53:f6:a0:01:
07:6a:b4:00:0e:4c:6d:af:72:1e:c3:15:89:44:dd:
d6:2e:8e:28:99:8c:c2:e0:00:d0:8a:e8:50:26:09:
51:64:b4:31:fe:f8:30:e1:0b:9a:14:4f:db:51:49:
ad:40:d3:e8:ef:68:36:46:f3:75:0d:6b:34:d4:0f:
25:ad:24:b7:05:6b:27:4d:25:91:ff:ba:49:35:97:
bb:04:f2:c8:30:56:cd:b4:00:14:5e:36:9a:5d:1e:
dc:d1:dc:72:70:ca:17:17:41:d2:f7:ba:ac:8f:f3:
a7:63:8a:0d:01:26:af:94:96:63:7a:8c:5f:84:1b:
fc:02:bb:e5:07:ca:59:5a:83:a2:c9:51:b2:d7:4f:
cf:83:34:b9:8f:7d:90:38:7e:2c:bd:fa:b1:d6:1f:
3b:d4:66:46:33:ea:da:ae:f0:6d:b0:65:f9:87:76:
eb:87:2f:ac:2c:3e:33:21:29:65:76:d1:43:63:95:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5D:42:D5:A3:70:76:79:B2:93:15:A2:F9:3C:79:5D:29:1D:0C:D4
X509v3 Authority Key Identifier:
keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:88:96:26:96:0a:4b:35:1b:58:72:9b:c5:a8:72:7c:45:
a9:09:2a:e6:22:c0:87:03:68:b3:d9:1b:5f:a5:34:7d:de:8e:
2d:1d:aa:da:14:5b:20:c4:d5:57:99:3b:1d:a4:a9:9e:18:04:
f0:5f:ab:aa:98:fc:d0:5e:8a:5c:16:e6:55:cf:e8:5f:ed:7e:
3b:72:72:8b:b4:8e:0c:ce:5d:85:3c:3b:70:27:ef:1f:a7:81:
53:ab:cf:77:9e:60:cc:70:6e:ca:86:39:f8:36:9b:6f:3b:ce:
ee:f3:44:c5:65:a3:c2:ab:18:5d:7b:4b:28:01:c1:a4:b9:b9:
b9:0b:24:ff:8e:b3:07:cc:bf:9a:31:dd:98:17:14:24:1a:2d:
3c:88:79:fd:1d:bb:16:58:1b:ad:e9:7f:ef:0d:5b:c4:cf:00:
d3:53:16:fd:d5:fd:20:d7:05:94:50:1e:2f:53:1e:40:e1:7f:
77:ea:be:cd:a1:e5:28:83:b6:44:43:7a:b5:2a:5d:24:37:e1:
21:ef:66:e9:70:d0:f2:9c:2c:8b:8d:37:c7:0e:ac:23:c1:16:
b0:35:14:10:f3:b4:13:59:85:f6:72:e0:fa:f3:08:cc:f4:08:
be:ef:8e:ff:36:5d:64:bb:01:77:e0:7f:85:20:dd:87:e7:1d:
e7:71:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 23:28:41 2025 by rpki-client