Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: Q+MHIxhfVZZPLxG1s0c71BPeYH/AksqfwcT2V9B94H4=
Subject key identifier: F5:81:5F:90:4F:74:A9:5C:C0:1E:58:AD:B7:2A:E2:D4:7C:91:CD:64
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 14A0F6D96BE74A7AF79E653DE5FAADFF254DB2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 055A
Signing time: Fri 17 Apr 2026 16:38:25 +0000
Manifest this update: Fri 17 Apr 2026 16:33:25 +0000
Manifest next update: Sat 18 Apr 2026 19:52:25 +0000
Files and hashes: 1: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: EMV3yBPdxi01L8IYGvv3wugmn4f+42X2zeDK3aRfkO4=)
2: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a0:f6:d9:6b:e7:4a:7a:f7:9e:65:3d:e5:fa:ad:ff:25:4d:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Apr 17 16:33:25 2026 GMT
Not After : Apr 18 19:52:25 2026 GMT
Subject: CN=F5815F904F74A95CC01E58ADB72AE2D47C91CD64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:57:60:ce:04:9b:f1:9d:48:3c:4a:90:a5:
f4:9e:fb:c3:6d:b8:97:a6:46:06:a8:70:32:88:67:
b6:5e:c8:44:b3:1b:15:20:fc:3e:9a:2c:f0:3f:6f:
23:fe:ab:3b:9a:67:ad:b7:e9:2f:48:21:87:b7:aa:
60:ec:3d:c3:d3:41:ac:14:0a:18:fc:e8:30:a4:e1:
75:70:b5:f0:ee:b1:08:05:77:c9:f4:20:a9:42:aa:
e2:0b:a7:1f:a3:51:d4:36:db:c6:63:5a:f6:b6:1c:
4d:bd:da:9b:c3:0a:58:f3:5f:dd:55:d3:af:87:f7:
b0:85:d0:37:eb:0e:be:f3:0b:37:ee:fe:f0:c5:32:
1c:22:7d:49:a3:34:6e:c4:4c:52:ce:3a:a3:b5:e1:
08:b9:e7:cb:e4:ab:a0:3f:18:71:b8:fd:d9:7a:05:
f4:7d:0b:61:93:66:8c:c4:43:cb:cf:72:a6:b4:f6:
1f:01:36:e3:b2:5b:0a:d5:5d:01:5f:7f:ef:af:0b:
58:90:59:a2:9f:f7:d1:54:2e:ae:a2:ec:24:ce:da:
c2:f9:60:b5:ec:23:cb:ba:9d:d0:a0:8f:93:7a:4f:
fb:f0:a4:2f:54:84:47:f3:97:8e:bf:3e:61:e1:b2:
09:11:87:aa:ba:d0:46:9f:bc:f2:a7:58:50:62:0c:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:5F:90:4F:74:A9:5C:C0:1E:58:AD:B7:2A:E2:D4:7C:91:CD:64
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e3:bb:e6:97:6f:a4:51:87:61:f5:e1:d5:19:17:05:8f:02:
ec:41:cf:7d:5e:f0:a1:11:9f:cc:fb:5f:e9:74:1d:e9:ba:d6:
a9:6d:d5:4f:43:3f:3b:92:74:e0:77:09:83:eb:f2:da:14:aa:
7c:b1:e8:8a:ba:27:66:b1:2c:7b:92:ec:e9:9e:5f:db:02:6e:
cc:c0:b8:7d:af:8f:bb:83:05:72:f5:4c:94:fe:a8:07:70:ce:
6b:f1:19:a8:fb:c0:d5:fc:0e:d8:72:c0:94:4a:60:bd:b1:b3:
19:e6:41:ad:72:8e:09:bb:30:db:1d:59:8c:ae:64:2f:b2:a5:
42:c8:f3:d7:41:a5:95:08:8a:4f:46:36:2e:22:30:e0:8c:97:
1d:e3:b6:57:b1:c6:70:c9:d7:f6:71:7d:db:4c:1a:b8:af:f9:
09:6d:17:25:3b:5d:7e:fa:44:c2:a0:e1:b2:a6:9e:5d:ca:67:
17:a4:70:c4:bc:c4:1f:0f:37:08:17:b2:07:4b:a6:46:ba:1f:
39:eb:e0:d0:ce:cc:84:38:3e:bc:ec:eb:5c:42:58:03:46:54:
91:6e:0c:f3:1f:a5:b0:cd:de:1f:83:90:8b:f8:64:a0:30:cc:
72:69:ca:3b:be:01:21:cd:3a:8f:a4:e1:d5:b2:95:a4:c4:ad:
46:7d:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 09:32:57 2026 by rpki-client