Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: ZtKej+51QU/cEvmI7pbdflb2Jod2OhwKZnEVB1LwHG8=
Subject key identifier: 0B:F3:38:DF:CF:A8:3F:F6:D4:4E:7D:AA:35:00:C8:68:5D:0D:3A:A8
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 6CE4C7A6DF86121D95AC1C944D265EF335F60493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 045C
Signing time: Thu 06 Nov 2025 00:05:24 +0000
Manifest this update: Thu 06 Nov 2025 00:00:24 +0000
Manifest next update: Fri 07 Nov 2025 01:20:24 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: DcijumI5QsAMIOlDE+zAif5ma28BCOeWI1r0EDO6zZM=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e4:c7:a6:df:86:12:1d:95:ac:1c:94:4d:26:5e:f3:35:f6:04:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Nov 6 00:00:24 2025 GMT
Not After : Nov 7 01:20:24 2025 GMT
Subject: CN=0BF338DFCFA83FF6D44E7DAA3500C8685D0D3AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:48:4b:f0:33:24:fd:22:90:de:8d:58:47:
b8:31:25:52:2d:c1:15:67:ff:f4:23:bd:35:a4:5c:
33:34:3d:b0:be:5b:e7:ee:66:9a:a6:fd:94:ec:ba:
72:d2:05:68:b7:29:2d:75:12:f6:1e:1b:98:05:66:
6b:8e:04:e9:b0:d8:72:d3:02:84:4f:60:8d:11:64:
bc:9d:ce:22:e2:41:74:1e:60:76:20:b4:52:a2:f8:
0c:4b:45:3d:b6:ec:d4:8e:c4:9e:4f:ab:71:5e:43:
a2:fb:ea:b2:f5:4f:43:63:bc:5b:02:65:6a:f1:ef:
29:a5:35:14:14:c2:3c:56:49:08:1e:c1:88:94:c6:
9d:ce:c8:bb:09:f9:1a:33:87:df:de:fb:cf:75:21:
f1:8b:ce:ec:0e:94:1b:32:67:3e:ba:4e:f7:a9:3d:
ca:f8:fb:19:c4:fd:e2:0b:90:c0:d3:2f:5f:f5:f1:
23:6f:95:96:17:54:6c:c9:c8:e7:2d:b8:6d:43:0f:
11:f0:15:67:15:94:16:e1:98:00:a1:48:a4:a3:e6:
92:08:9f:93:cf:f1:f7:61:14:e6:c1:d0:08:1e:aa:
95:b8:2b:af:d8:56:cd:56:dc:54:e3:46:4d:8d:59:
70:fc:8a:f6:47:42:ae:cf:b1:96:97:a6:ad:db:6d:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:38:DF:CF:A8:3F:F6:D4:4E:7D:AA:35:00:C8:68:5D:0D:3A:A8
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:00:28:19:ab:0b:24:6d:62:65:02:d2:33:2a:6d:0e:d2:
a9:b7:cb:3b:e8:67:73:bc:c4:f3:26:85:85:a8:94:7b:b1:e6:
f9:c3:33:86:3c:6e:83:70:58:a7:5e:93:33:a9:a5:15:f5:17:
e3:a4:cd:b2:7d:b5:9c:49:5d:47:0b:50:04:bd:7c:04:40:a8:
15:23:8e:3c:6c:ae:41:ec:ea:d3:ad:df:6a:0e:76:bd:a8:97:
4b:7d:88:ee:13:e9:fd:60:84:d1:e4:57:a8:6b:3f:58:68:55:
4a:cf:8c:38:f0:f7:40:73:c6:51:e4:bb:98:90:b6:34:e9:69:
35:5c:e5:0e:49:b9:41:ca:5c:5c:71:df:6b:89:19:8d:1d:17:
e8:7d:84:c7:c1:c5:34:f4:f5:a2:07:e6:88:4b:21:9c:b6:18:
ab:1b:cc:5c:c3:ea:e6:e0:80:fc:ec:53:23:38:2e:75:c5:a1:
9d:12:53:dc:ce:fa:68:e7:09:39:98:6d:26:9d:ba:dd:02:5f:
76:ee:3c:b2:9d:95:50:de:03:93:c3:1b:c2:40:54:4a:59:dd:
5d:1c:1e:19:71:17:88:43:08:5c:59:00:97:37:16:c5:44:39:
61:5e:d5:84:71:8d:08:8a:96:1a:f7:4e:f4:60:46:80:3c:21:
2b:84:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:49 2025 by rpki-client