![](/console.gif)
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft
File: 9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft (raw, json)
Hash identifier: 38KC/wBosP3axHNyuUFWu915oEDkdjolIPxsutTOVGk=
Subject key identifier: CB:53:6A:38:B3:19:1A:5F:8A:47:5C:F7:8A:94:B9:58:44:58:B1:F5
Authority key identifier: 9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
Certificate issuer: /CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Certificate serial: 5AAE494D3D2FAD9605A2A4C9B2EA61369909C628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft
Manifest number: B0
Signing time: Thu 25 Apr 2024 16:15:47 +0000
Manifest this update: Thu 25 Apr 2024 16:10:46 +0000
Manifest next update: Fri 26 Apr 2024 18:01:46 +0000
Files and hashes: 1: 9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl (hash: Jjyzo7j5r/MbPNWq1BMFv9PvkoL9g2Ac9ljhtETGBDU=)
2: 326131333a656534303a3430303a3a2f34302d3438203d3e20313939313038.roa (hash: HUtB1GUiy0M5xUc0pDXuCra+E8/ieAS+dZF4+T7DUhk=)
3: 326131333a656534303a3130303a3a2f34302d3438203d3e20323136303037.roa (hash: oh+p3W3YpU4RUCuGkGVrCUA5QTP+GLih+aqtMoJ8WF8=)
4: 326131333a656534303a3330303a3a2f34302d3438203d3e20323135393335.roa (hash: 24vmDVjQfWtJF+fpx3aVHzMW7ti/LNVda8qWaKhasNI=)
5: 326131333a656534303a3230303a3a2f34302d3438203d3e20323136303036.roa (hash: YOkj/OJsiATTxZ4AtWUBXqkH+HVaLvt1M+Z1ZWZ6U+8=)
6: 326131333a656534373a3a2f33322d3332203d3e20323132383137.roa (hash: meeqL7FJn6dEvD3ppA0nPdjflGG9EU5SJcFNC+BgG1c=)
7: 326131333a656534363a3a2f33322d3332203d3e203537353635.roa (hash: a+/Ru8grEdS4sqWE1uuVv37ol5ge6JOIJW2FiUegGBY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ae:49:4d:3d:2f:ad:96:05:a2:a4:c9:b2:ea:61:36:99:09:c6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da23cc2cf88ae4585cf8aaf9a714a9ad2e6f198
Validity
Not Before: Apr 25 16:10:46 2024 GMT
Not After : Apr 26 18:01:46 2024 GMT
Subject: CN=CB536A38B3191A5F8A475CF78A94B9584458B1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:a2:6e:d6:3b:4e:ce:10:b4:55:08:8d:4b:
ca:ae:2c:ec:ee:22:61:a0:e4:8e:15:48:48:cb:e3:
43:41:d7:a5:3f:5f:56:e5:75:35:18:76:1e:39:cd:
52:df:53:a7:f1:db:d5:35:a0:ae:bc:8e:47:22:ba:
c2:a7:92:b1:2a:06:25:c8:98:12:a7:2c:ef:64:f6:
21:7b:20:22:a4:7b:7a:86:14:05:15:22:ba:6c:81:
c0:e9:20:15:40:0b:37:d5:cc:82:64:58:bb:d9:61:
61:7a:24:61:d4:e2:5d:4f:4b:08:3c:08:f0:eb:9d:
fb:57:c9:83:80:66:9b:be:6e:1e:2d:17:c8:e5:f8:
a4:cd:c6:30:35:99:02:65:04:95:c0:53:1d:04:c7:
9c:62:1c:85:68:3a:d7:e4:55:b2:ff:ff:9e:05:28:
c4:5c:0c:09:5b:62:cd:27:e2:31:53:cd:9e:00:ca:
74:ec:db:2b:12:07:e5:47:ea:19:e8:87:e3:af:e0:
bf:de:b9:a5:1e:00:70:de:4f:1f:59:99:44:e8:d4:
70:3d:10:b7:0e:0b:f7:d2:a7:0c:52:02:1f:f6:2e:
80:4d:f7:5f:c8:5d:e1:7f:d6:f8:1f:e9:60:ec:66:
42:2b:e5:15:01:b4:5e:34:9e:ba:8f:04:4f:ee:62:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:53:6A:38:B3:19:1A:5F:8A:47:5C:F7:8A:94:B9:58:44:58:B1:F5
X509v3 Authority Key Identifier:
keyid:9D:A2:3C:C2:CF:88:AE:45:85:CF:8A:AF:9A:71:4A:9A:D2:E6:F1:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naI8ws-IrkWFz4qvmnFKmtLm8Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a4c6bdc5-eb4e-4b6e-95f6-62790e57f3be/0/9DA23CC2CF88AE4585CF8AAF9A714A9AD2E6F198.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d0:e6:cb:8c:f3:bb:cd:78:9f:6f:40:86:b5:97:ed:29:37:
4a:ae:3a:60:c8:35:7c:14:86:e3:f5:47:7e:12:a4:14:00:28:
0a:85:d0:57:36:d0:f0:a0:ee:ad:77:ee:87:4f:52:0b:6a:9b:
e4:4b:57:68:6d:37:e7:fd:6a:7d:32:ea:d7:a2:cd:71:1a:44:
1c:7b:c9:eb:14:32:ae:5b:c5:85:58:63:ca:88:c3:5a:28:a4:
ba:96:9f:91:c2:6e:ff:80:32:91:c4:f0:61:37:61:83:e8:c8:
56:f4:0e:f3:69:69:54:9d:46:1e:a0:12:2e:e0:df:6f:7c:fd:
02:24:8e:67:62:02:ad:00:af:6c:ea:75:ac:3b:ec:91:76:31:
6b:be:79:3c:eb:0b:36:a7:a3:3b:a9:a7:ff:fb:c9:68:15:e4:
9a:66:5d:e4:79:03:f7:3b:71:72:80:ce:5b:74:c2:f1:1f:09:
45:b4:05:70:ea:b4:81:24:4a:4c:b1:ee:26:4f:de:d5:ef:ed:
10:22:03:c4:91:6f:ef:13:0b:d2:54:fd:17:c4:50:ed:f7:65:
09:87:ed:57:c3:8c:78:5b:07:92:2b:ee:09:4d:78:11:34:c2:
7f:73:49:9e:ab:7e:12:8a:d8:ad:b5:8e:9c:5b:ea:83:6c:4d:
c4:bc:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:08 2025 by rpki-client