Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/FD6368054FB0AAA91220A19F78778FE8C871D9BC.mft
File: FD6368054FB0AAA91220A19F78778FE8C871D9BC.mft (raw, json)
Hash identifier: /w7dTlS916K8BxSiTn4CFo6paedIu7sfvnrxUOCBe2A=
Subject key identifier: 06:2C:90:F7:3F:E6:68:27:27:14:21:FB:C4:77:0D:34:85:73:0A:65
Authority key identifier: FD:63:68:05:4F:B0:AA:A9:12:20:A1:9F:78:77:8F:E8:C8:71:D9:BC
Certificate issuer: /CN=fd6368054fb0aaa91220a19f78778fe8c871d9bc
Certificate serial: 68D90ADB0BA6E38882351EF12362EABC8BE0658C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNoBU-wqqkSIKGfeHeP6Mhx2bw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/FD6368054FB0AAA91220A19F78778FE8C871D9BC.mft
Manifest number: 04
Signing time: Fri 28 Mar 2025 07:26:23 +0000
Manifest this update: Fri 28 Mar 2025 07:21:23 +0000
Manifest next update: Sat 29 Mar 2025 09:44:23 +0000
Files and hashes: 1: FD6368054FB0AAA91220A19F78778FE8C871D9BC.crl (hash: Q2Tz5+XExOmDtmPp98pUSZ2fDShZGoPh2aW5EdPA2sI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d9:0a:db:0b:a6:e3:88:82:35:1e:f1:23:62:ea:bc:8b:e0:65:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6368054fb0aaa91220a19f78778fe8c871d9bc
Validity
Not Before: Mar 28 07:21:23 2025 GMT
Not After : Mar 29 09:44:23 2025 GMT
Subject: CN=062C90F73FE66827271421FBC4770D3485730A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:38:f9:7e:bd:74:27:eb:c4:83:b9:f7:26:
77:ce:8f:d5:66:fc:44:ef:ba:3a:c0:fb:bd:9a:45:
03:87:cd:a8:a9:88:37:8a:9b:84:b3:25:60:a1:f5:
ee:a2:5f:75:e2:1d:83:42:61:9a:01:5f:f2:9c:e7:
fd:02:e2:b0:0f:ee:19:99:e1:5e:46:95:7f:85:4a:
3b:7c:20:fc:c9:1f:09:8c:ba:bf:61:4c:7c:f1:35:
53:10:48:13:2c:0b:22:31:02:4f:9a:43:82:d8:a7:
ea:9d:71:bb:e5:8e:82:03:f2:d2:c2:5c:17:c9:e8:
47:08:4c:74:58:91:1a:a4:16:ce:42:93:19:25:c5:
da:8c:ca:57:cb:f9:82:87:44:23:0f:4f:45:b0:eb:
ef:26:49:9c:ce:0a:01:4d:5f:e1:38:57:f4:e4:00:
37:65:b3:30:aa:49:34:ac:3d:af:03:46:09:8e:6c:
07:42:94:85:f1:f9:12:60:bc:d5:69:fb:de:48:4f:
e3:f5:0c:d2:87:15:a0:81:2c:ec:ed:ea:34:ef:6f:
10:6d:23:73:22:65:ef:0f:48:26:34:41:0f:ac:33:
ae:06:77:12:3b:8e:1b:d8:20:fc:df:b7:f7:89:e2:
46:25:82:bf:93:af:07:5b:3c:85:0b:0d:01:25:3c:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:90:F7:3F:E6:68:27:27:14:21:FB:C4:77:0D:34:85:73:0A:65
X509v3 Authority Key Identifier:
keyid:FD:63:68:05:4F:B0:AA:A9:12:20:A1:9F:78:77:8F:E8:C8:71:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/FD6368054FB0AAA91220A19F78778FE8C871D9BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNoBU-wqqkSIKGfeHeP6Mhx2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/FD6368054FB0AAA91220A19F78778FE8C871D9BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:86:e3:da:9e:19:25:04:1b:e5:6e:06:56:cd:44:97:e8:a6:
2e:16:89:63:51:c8:92:ee:0a:d5:71:35:dd:c1:fc:9b:a9:0c:
b2:7e:82:65:f7:49:24:6c:f1:29:e8:83:90:c0:43:eb:f8:14:
d3:d5:fe:d7:d6:5e:36:58:52:de:29:d2:f7:c5:34:7c:08:45:
7b:59:94:9b:4e:5d:38:60:60:c0:52:44:ba:b8:36:3d:48:41:
e3:26:aa:7e:8d:9e:5e:16:63:a2:bb:59:8f:f5:6f:b0:78:49:
68:b8:74:5c:fd:d5:2b:5d:cd:61:91:98:34:d3:64:ed:b0:2b:
23:5d:7a:b2:32:1b:ce:47:d2:7c:cc:bb:e3:e5:33:77:5b:b1:
01:5a:e4:6a:52:87:f7:49:b5:3e:f1:e4:6c:c4:b8:6c:c0:5d:
fa:54:59:cd:c6:e9:df:cd:a8:98:24:2d:b5:34:5c:7a:5b:36:
6b:aa:0d:66:7f:2f:8a:38:ae:db:27:df:bf:d9:13:ef:b0:ba:
7b:c4:6d:8a:ab:27:3e:41:2e:2e:c5:f3:80:d3:09:a4:42:e8:
93:5b:58:2d:4e:55:d3:45:84:ea:7a:da:9f:4c:e1:8f:1f:21:
c4:f6:69:08:f0:71:d2:4a:78:57:69:fa:8d:28:f2:f3:74:d8:
b7:7d:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:39 2025 by rpki-client