Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
File: F69066348CBBD67E19E5C1CFED53765401498B26.mft (raw, json)
Hash identifier: 9PPvdCGLUFUMVXr4j63z01tA8Bdi3/z+BJ7kNvqVSV8=
Subject key identifier: 02:C6:7E:88:AF:8A:AF:13:59:CF:09:20:B4:41:25:69:40:EE:E4:0E
Authority key identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
Certificate issuer: /CN=f69066348cbbd67e19e5c1cfed53765401498b26
Certificate serial: 443A05091CD12A5C3F21F72809F05E8319E66774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
Manifest number: D6
Signing time: Sat 25 Oct 2025 20:22:07 +0000
Manifest this update: Sat 25 Oct 2025 20:17:07 +0000
Manifest next update: Sun 26 Oct 2025 23:56:07 +0000
Files and hashes: 1: F69066348CBBD67E19E5C1CFED53765401498B26.crl (hash: jLaiFR00RLL89dLwJNs4YUIrr23paDn2AAhJdIxUWes=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3a:05:09:1c:d1:2a:5c:3f:21:f7:28:09:f0:5e:83:19:e6:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69066348cbbd67e19e5c1cfed53765401498b26
Validity
Not Before: Oct 25 20:17:07 2025 GMT
Not After : Oct 26 23:56:07 2025 GMT
Subject: CN=02C67E88AF8AAF1359CF0920B441256940EEE40E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:4c:5d:83:eb:c1:dc:49:d5:bd:ed:44:4a:
75:eb:4b:28:e9:f0:9a:fe:c3:39:24:c1:ec:03:60:
28:4d:24:f2:64:9c:51:2c:d0:29:d2:70:5d:b0:e9:
35:fc:4b:33:f5:b9:3a:03:44:85:4f:cd:36:66:51:
19:da:39:aa:cf:92:be:60:a5:b8:c5:12:ae:46:34:
78:36:a2:27:f3:49:8d:58:3d:49:c6:3b:e2:f7:ea:
c9:aa:b6:c4:68:38:c7:7b:ba:6f:d0:b7:62:16:ae:
06:bb:73:16:43:52:ae:e5:c6:18:f6:2c:0e:11:06:
36:73:df:6c:06:d4:d9:1e:4c:07:36:eb:c2:06:19:
50:61:9f:f5:9f:e9:81:5f:cd:1d:1a:23:f4:74:d7:
b5:99:83:47:1f:2b:58:ad:10:1f:c3:95:cc:6d:1b:
7b:a3:ea:99:eb:36:58:07:8a:ef:a2:c2:be:3e:43:
1a:ce:be:b2:1b:9c:26:31:9d:85:88:5f:a7:13:6c:
54:9b:ac:1b:1f:ef:12:c4:ca:63:15:3f:7b:a6:41:
4a:4a:1a:20:22:31:7e:b3:e7:d8:00:fe:dc:ff:53:
04:ab:83:dc:f8:88:31:a5:1f:38:36:27:6d:7e:b2:
be:f1:94:87:44:9c:74:b7:a0:24:5c:49:e4:8f:4d:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:7E:88:AF:8A:AF:13:59:CF:09:20:B4:41:25:69:40:EE:E4:0E
X509v3 Authority Key Identifier:
keyid:F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0e:e3:76:48:2b:42:4a:47:66:6c:32:38:47:ab:dd:18:04:
a7:1c:f5:89:af:9e:e5:6f:cb:90:c1:8c:f9:fd:21:61:5c:4a:
3f:f0:b3:6d:47:9c:ba:a2:5b:af:0b:03:2f:c7:9d:97:4d:40:
ce:09:89:05:41:45:38:d2:6e:39:65:41:c9:6f:58:b1:cd:23:
eb:28:bf:69:41:73:72:72:e8:12:68:d3:c7:ff:99:ef:1b:27:
45:04:5d:72:ad:94:1c:9b:fb:f3:61:23:6a:60:c4:c9:1a:23:
ec:2e:52:91:bf:f8:fc:55:40:2a:fa:da:6a:dc:0e:80:f7:84:
6f:57:8f:9b:43:50:36:02:7f:4b:66:c8:c9:92:fa:b6:28:5b:
00:23:ad:39:6d:c8:61:42:70:3f:6c:77:a2:aa:10:27:b2:39:
c2:20:e9:22:16:86:2c:74:f2:9c:1d:79:c5:8e:c9:f7:c4:33:
4a:10:9d:41:b8:80:f0:8c:95:7f:71:15:ce:98:0f:b6:f8:af:
36:69:fa:66:b6:50:1a:e8:21:c6:d5:f0:50:b5:55:5d:2c:7a:
d4:80:75:c4:5c:a9:9f:55:68:62:c0:f4:e3:3d:55:3e:4c:46:
c8:f9:38:4f:a6:d6:a7:d8:25:da:82:f8:fe:d2:4f:d3:3e:d1:
2b:77:3f:ca
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURDoFCRzRKlw/IfcoCfBegxnmZ3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjY5MDY2MzQ4Y2JiZDY3ZTE5ZTVjMWNmZWQ1Mzc2NTQw
MTQ5OGIyNjAeFw0yNTEwMjUyMDE3MDdaFw0yNTEwMjYyMzU2MDdaMDMxMTAvBgNV
BAMTKDAyQzY3RTg4QUY4QUFGMTM1OUNGMDkyMEI0NDEyNTY5NDBFRUU0MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vExdg+vB3EnVve1ESnXrSyjp
8Jr+wzkkwewDYChNJPJknFEs0CnScF2w6TX8SzP1uToDRIVPzTZmURnaOarPkr5g
pbjFEq5GNHg2oifzSY1YPUnGO+L36smqtsRoOMd7um/Qt2IWrga7cxZDUq7lxhj2
LA4RBjZz32wG1NkeTAc268IGGVBhn/Wf6YFfzR0aI/R017WZg0cfK1itEB/Dlcxt
G3uj6pnrNlgHiu+iwr4+QxrOvrIbnCYxnYWIX6cTbFSbrBsf7xLEymMVP3umQUpK
GiAiMX6z59gA/tz/UwSrg9z4iDGlHzg2J21+sr7xlIdEnHS3oCRcSeSPTU+JAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAsZ+iK+KrxNZzwkgtEElaUDu5A4wHwYDVR0j
BBgwFoAU9pBmNIy71n4Z5cHP7VN2VAFJiyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2Y4MWUyMzUtODE1OC00MDdlLWJjZmYtZjA5NjM0ODM1
N2EyLzAvRjY5MDY2MzQ4Q0JCRDY3RTE5RTVDMUNGRUQ1Mzc2NTQwMTQ5OEIyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlwQm1OSXk3MW40WjVjSFA3Vk4yVkFG
Sml5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZjgxZTIzNS04
MTU4LTQwN2UtYmNmZi1mMDk2MzQ4MzU3YTIvMC9GNjkwNjYzNDhDQkJENjdFMTlF
NUMxQ0ZFRDUzNzY1NDAxNDk4QjI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQ7jdkgrQkpHZmwyOEer
3RgEpxz1ia+e5W/LkMGM+f0hYVxKP/CzbUecuqJbrwsDL8edl01AzgmJBUFFONJu
OWVByW9Ysc0j6yi/aUFzcnLoEmjTx/+Z7xsnRQRdcq2UHJv782EjamDEyRoj7C5S
kb/4/FVAKvraatwOgPeEb1ePm0NQNgJ/S2bIyZL6tihbACOtOW3IYUJwP2x3oqoQ
J7I5wiDpIhaGLHTynB15xY7J98QzShCdQbiA8IyVf3EVzpgPtvivNmn6ZrZQGugh
xtXwULVVXSx61IB1xFypn1VoYsD04z1VPkxGyPk4T6bWp9gl2oL4/tJP0z7RK3c/
yg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:29 2025 by rpki-client