
Error: rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier: 7EFx31A2Gc/V02xZm1QueookIK54F0ROla2F8F7SIbw=
Subject key identifier: D1:5A:06:43:4C:30:BC:1A:9D:30:A5:0B:A2:14:29:3E:DA:D1:95:57
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 54B4A3AC13AB4C8E0E87211BFDC098517B5ADD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number: 0580
Signing time: Fri 18 Sep 2026 01:19:02 +0000
Manifest this update: Fri 18 Sep 2026 01:14:02 +0000
Manifest next update: Sat 19 Sep 2026 04:30:02 +0000
Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 5uJAsA5gZrCxfS6SHffw/gJM3pmDatk+PfNB8WueNlU=)
2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: b6Yfbp7lTBDGPk9jmhYrtWwx0Keh61hgl0fuJiHvhDc=)
3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: +aYnErtc+EVB5Hf8hgiUTnglnPe1EayxJzqPbVrfrk4=)
4: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: Kkh2FKEVI+G2J0/cp+KAwBSS16YhTW0qvn6MGOR55DE=)
5: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=)
6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: TQFuEIAaoBVFcCSHt3ZrDmtzumTXcpz1se3n4gNHOR4=)
7: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: vby6MB07Kbqpn9WqCLB6FToN3WnLwsB57t1NcvXDHJQ=)
8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b4:a3:ac:13:ab:4c:8e:0e:87:21:1b:fd:c0:98:51:7b:5a:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: Sep 18 01:14:02 2026 GMT
Not After : Sep 19 04:30:02 2026 GMT
Subject: CN=D15A06434C30BC1A9D30A50BA214293EDAD19557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:85:d7:b1:1e:b1:3a:66:b9:4d:59:f0:a8:
0a:d3:51:b6:52:e4:6e:88:1a:40:28:3a:c9:74:78:
23:be:7f:c3:99:80:7d:bb:65:a1:1f:f5:dd:88:73:
fc:45:d9:42:b5:4a:bc:07:ea:14:db:04:ed:6f:91:
cb:6f:76:f2:05:c4:aa:d5:bb:5f:0b:34:15:3b:3f:
b5:60:09:d1:5b:3d:45:89:ee:f8:5a:e0:fa:30:0f:
17:7a:ec:ca:db:63:fb:59:b5:0e:5a:a2:6d:6c:0c:
a9:27:c7:3b:43:59:c5:fa:3c:21:5c:30:45:4e:f9:
4c:83:bc:fc:83:da:1b:53:26:69:79:e9:92:6e:8c:
8d:dd:a6:d3:02:11:ac:40:54:60:1c:23:d2:85:27:
7e:44:cb:46:e2:0c:37:3c:70:ce:a2:31:f0:ce:80:
0e:a8:4f:99:34:cf:3c:61:79:06:b1:34:aa:69:68:
5b:4b:b7:9e:ea:37:68:1a:5f:8e:85:05:e4:95:12:
54:15:3c:25:69:a4:52:2a:58:2c:4b:9a:cc:6f:3b:
46:e7:72:0e:49:9c:51:ea:e7:63:a0:04:4e:90:c4:
a7:6e:5f:f1:59:79:8d:d5:83:0c:f0:bb:fc:9f:4f:
65:fd:1e:15:22:93:51:cc:2c:b0:4f:24:e2:7e:ab:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:06:43:4C:30:BC:1A:9D:30:A5:0B:A2:14:29:3E:DA:D1:95:57
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b7:c9:cb:ab:c4:32:74:55:b5:3b:1d:e5:c0:4f:90:cf:53:
bc:c4:08:51:32:6e:06:18:e8:bc:c3:48:63:03:0e:cb:6f:f6:
4c:a2:4e:94:6e:73:f2:5f:24:ea:71:78:04:55:85:9f:aa:e4:
51:21:dc:9d:6c:da:9b:45:83:28:87:99:5a:38:5e:f2:71:34:
8c:37:a7:5a:bd:ec:31:64:f1:db:df:18:14:4f:82:e3:86:f7:
54:4e:47:6d:dc:dc:2e:5d:04:a6:fa:4e:2f:6a:40:31:bc:ba:
b8:4a:34:df:af:2d:ac:fe:44:01:1e:5e:da:8b:c7:c2:82:d1:
74:56:42:85:5e:28:9c:ea:7c:6e:d1:f4:f7:d4:80:1b:dd:33:
68:0d:7f:cb:41:c6:82:60:89:b7:ca:f6:cd:74:3e:45:82:8c:
e2:f9:fc:23:c9:fa:fa:4a:06:0c:c2:2b:57:2b:65:25:d3:02:
be:d3:dd:bf:b1:f8:b9:ef:ec:9a:6a:e1:c9:03:ea:95:a8:bc:
fe:f3:c7:74:1c:a8:6b:e4:bd:aa:16:4c:5c:4f:5f:6f:a5:d6:
f0:ce:6f:e0:ca:87:60:86:89:41:3b:4f:72:79:88:ed:c6:a9:
bf:60:d0:47:4a:91:64:ba:40:8e:83:bf:a4:e5:77:75:e9:e0:
66:07:83:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:39:53 2026 by rpki-client