Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.mft
File: DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.mft (raw, json)
Hash identifier: eYOIVEP1+zyVm0lRBVgJft08NbKilazYEW8JTj5KuF0=
Subject key identifier: 04:17:0B:6C:32:35:DB:6B:23:29:D5:48:37:6C:67:A2:F7:9C:11:73
Authority key identifier: DD:1D:36:C2:D1:9C:93:C3:90:5B:19:BE:BB:F8:84:22:B6:0A:0F:E8
Certificate issuer: /CN=dd1d36c2d19c93c3905b19bebbf88422b60a0fe8
Certificate serial: 22AF08DF2903D963F75CEE7F93548D94280C5505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R02wtGck8OQWxm-u_iEIrYKD-g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.mft
Manifest number: 03
Signing time: Mon 26 May 2025 00:57:47 +0000
Manifest this update: Mon 26 May 2025 00:52:47 +0000
Manifest next update: Tue 27 May 2025 03:18:47 +0000
Files and hashes: 1: DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.crl (hash: pxAzSk8bs89yhcSYM/jS+LT2zAcPLMpULW3Nan2HSpo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:af:08:df:29:03:d9:63:f7:5c:ee:7f:93:54:8d:94:28:0c:55:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1d36c2d19c93c3905b19bebbf88422b60a0fe8
Validity
Not Before: May 26 00:52:47 2025 GMT
Not After : May 27 03:18:47 2025 GMT
Subject: CN=04170B6C3235DB6B2329D548376C67A2F79C1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:7e:1f:95:c8:c0:ca:3b:76:24:c8:a1:47:
d6:db:c2:02:85:d6:6b:80:89:ed:63:e5:72:2d:2a:
fa:ee:fd:62:2c:a7:a0:7b:cd:8e:33:ad:46:8b:81:
9a:4d:77:5f:98:13:db:91:3f:bf:27:fe:86:ee:95:
33:40:a3:6f:ab:22:63:e8:f5:19:02:3a:59:ff:1b:
33:c0:e0:3a:03:c5:fd:54:43:d4:fc:ce:c1:3e:12:
80:99:5c:f4:b8:02:d9:f7:0a:c6:b0:c6:ea:27:71:
12:1e:5f:0c:ee:03:e5:9a:16:04:2c:50:7b:8e:9c:
fa:b8:69:63:af:8b:35:77:f3:42:32:4d:b0:6c:a5:
0f:fc:ed:de:69:b0:99:87:aa:9c:f1:70:89:1f:a0:
a7:0a:5d:63:94:5c:58:4e:a2:1d:4d:3a:40:d1:0c:
0f:bd:64:2e:68:89:ba:d5:45:e2:85:d7:0d:bb:2c:
90:05:5d:1d:35:06:71:67:c2:ef:03:bb:ec:25:12:
a3:5d:72:63:37:fc:d4:97:61:2b:79:11:37:cb:06:
f8:01:4a:79:2d:a3:13:c7:59:13:47:0b:84:22:8a:
0b:80:5c:36:2d:fd:4b:0f:b2:7d:99:4b:bb:66:47:
3e:a4:47:3e:38:04:d5:09:d1:11:65:bc:e6:fc:ab:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:0B:6C:32:35:DB:6B:23:29:D5:48:37:6C:67:A2:F7:9C:11:73
X509v3 Authority Key Identifier:
keyid:DD:1D:36:C2:D1:9C:93:C3:90:5B:19:BE:BB:F8:84:22:B6:0A:0F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R02wtGck8OQWxm-u_iEIrYKD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/0/DD1D36C2D19C93C3905B19BEBBF88422B60A0FE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:94:c6:86:12:f0:76:42:aa:49:e7:f4:28:c9:9a:40:ab:
49:dc:d7:e7:aa:e2:b3:81:e0:aa:30:ae:d7:9a:ce:d5:f8:09:
e6:39:99:fa:41:33:4a:b4:86:5c:70:a5:04:44:3f:49:8c:50:
01:e3:e9:f5:a8:ed:9a:b0:ce:44:36:52:9e:f1:96:05:c2:b8:
91:7e:9b:3b:28:81:23:b9:3c:90:67:f1:71:bd:44:18:45:af:
49:aa:d2:5f:98:a8:26:3c:c1:7f:51:97:2a:dd:74:dc:23:b5:
09:c7:3a:2e:d2:26:a5:5a:4d:e3:59:7e:c9:28:ac:c0:29:f4:
55:7d:84:52:5c:2b:39:91:0a:f6:4b:89:8d:fd:3b:f9:d8:60:
ff:c2:af:63:fe:c8:c9:4d:d6:ac:61:dd:0a:e5:43:47:e9:ba:
82:d8:92:d1:e8:d4:d6:62:f0:da:0e:9c:43:83:9f:ea:36:55:
bf:ac:a1:8b:45:31:63:99:90:76:7f:1a:3c:e2:a3:99:90:b7:
36:7b:69:cf:59:be:88:a0:da:b0:f3:75:b8:d5:52:bd:7f:50:
37:05:2e:c5:4a:99:8b:26:4c:75:3c:9b:6c:c5:d1:95:b0:d0:
53:59:38:53:0d:eb:65:8b:97:9b:50:4d:9b:26:f1:62:40:f7:
ab:ae:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:32:17 2025 by rpki-client