
Error: rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Manifest
$ rpki-client -vvvf rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
File: EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft (raw, json)
Hash identifier: XMq6fAMNv8IvDMSdajAjiHpvLRvEFqUmMPKTBXNAP8I=
Subject key identifier: FB:D2:CB:E1:D1:8F:0F:55:67:53:C5:0C:24:96:B0:6F:58:8F:61:B4
Authority key identifier: EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
Certificate issuer: /CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Certificate serial: 39AC97C565B2CAEA2AEBE7F8CEE412986A0CAD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject info access: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
Manifest number: 0436
Signing time: Mon 21 Sep 2026 07:32:29 +0000
Manifest this update: Mon 21 Sep 2026 07:27:29 +0000
Manifest next update: Tue 22 Sep 2026 10:19:29 +0000
Files and hashes: 1: EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl (hash: D7XEQ6xh3MFrLxGNYvsB7eKgO1Qnl2GNjKsGOr3AWwI=)
2: 3135382e3232302e3132392e302f32342d3234203d3e20323132373935.roa (hash: XqvpywOgCqxHtXbUvoK5eARMqaC3+ag0rxsVh/Za5W4=)
3: 3135382e3232302e3133302e302f32342d3234203d3e20323038313632.roa (hash: MKRsuKIv0eEmxhQYxEIMkWcrJBQCwaKDIO1cRYoqRII=)
4: 3135382e3232302e3132382e302f32342d3234203d3e20323132373935.roa (hash: XIE+vldvDOudocScn0fDSTh+9UFm5JKUnhBv1uMpBwc=)
5: 34352e3135352e3132382e302f32342d3234203d3e20323132373935.roa (hash: f5tufVF2y2lPzVMOLW4dUH9kF6gL2JBSGPsZ0IcSN3I=)
Validation: OK
Signature path: rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ac:97:c5:65:b2:ca:ea:2a:eb:e7:f8:ce:e4:12:98:6a:0c:ad:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee092d6ecb52bc99a39fa6677afbee9e41bae0d9
Validity
Not Before: Sep 21 07:27:29 2026 GMT
Not After : Sep 22 10:19:29 2026 GMT
Subject: CN=FBD2CBE1D18F0F556753C50C2496B06F588F61B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:c2:8a:31:ad:97:a2:36:52:52:f7:fc:2a:
54:5c:56:33:91:8f:30:a0:19:59:03:b9:d7:ac:11:
a8:a8:e9:8a:36:a9:e8:5f:63:50:a3:69:5a:75:71:
5f:4e:58:46:e6:77:9f:28:44:37:08:98:99:7b:b4:
56:5a:7b:93:c2:85:e3:92:66:f1:31:6e:de:2f:89:
0b:7f:ee:70:cb:82:4d:54:14:da:3a:7b:26:09:76:
7c:a6:53:93:4d:5c:40:8d:43:b9:b4:d7:7c:cf:cb:
d5:da:c9:e8:c1:4b:eb:7b:7d:b8:83:22:24:01:fc:
e9:45:23:b9:18:c4:b6:41:46:39:44:25:67:4a:fc:
fb:f6:dd:f6:52:3f:53:9c:a8:9d:4d:65:ef:60:a1:
d7:56:1d:14:c7:2b:00:de:c4:64:4c:8d:53:30:b8:
1a:15:38:df:d1:ea:5c:15:c2:61:b5:06:87:5a:f2:
88:b9:13:cc:e5:55:46:1d:79:8a:16:8e:98:32:39:
58:1f:7d:9d:42:2b:1b:ee:30:44:1b:e8:f6:12:2e:
b9:7c:40:30:ea:63:e5:74:94:91:ae:b9:70:41:e9:
49:b9:05:99:80:50:91:de:74:1b:25:93:2b:45:bf:
f7:e1:3e:b7:a3:19:04:68:4c:73:79:ef:63:d1:2f:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:CB:E1:D1:8F:0F:55:67:53:C5:0C:24:96:B0:6F:58:8F:61:B4
X509v3 Authority Key Identifier:
keyid:EE:09:2D:6E:CB:52:BC:99:A3:9F:A6:67:7A:FB:EE:9E:41:BA:E0:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gktbstSvJmjn6ZnevvunkG64Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/EE092D6ECB52BC99A39FA6677AFBEE9E41BAE0D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:eb:c9:ec:5c:02:fd:1b:c2:69:da:94:8c:f3:16:fa:25:
7e:e3:64:11:45:8a:70:2f:fc:bd:a2:a3:5f:94:01:f8:79:5e:
cf:89:4d:c1:3d:5a:2a:eb:53:d0:41:6b:22:d1:3b:39:c5:9b:
b9:f5:56:03:90:0d:10:19:57:db:90:d8:ae:d8:e7:01:83:a1:
e0:05:83:dc:ef:b8:3f:fa:58:0b:0e:cc:13:77:57:25:c1:ec:
5f:28:5c:93:1c:17:df:39:d1:5b:d7:d6:2b:af:a2:e8:0e:09:
47:12:4e:17:ae:37:39:06:8e:bb:b9:74:73:14:38:0a:07:88:
1b:32:33:a2:41:0b:48:b1:dd:7a:90:e7:80:f4:3d:b5:2e:79:
7d:b8:ec:79:c9:93:47:da:26:fa:45:2d:39:a2:56:a4:eb:ab:
5e:73:d5:60:5e:aa:d9:62:86:d7:95:eb:13:ea:ef:2f:62:06:
ee:ea:2c:4c:8c:37:41:aa:24:24:96:cd:44:60:37:d8:d4:b4:
ca:18:e5:2a:c9:6d:c5:12:0c:03:23:35:78:74:e8:b6:27:9c:
94:0a:1a:ab:d0:2d:c1:f1:9d:f6:2a:95:de:64:4f:e5:78:83:
c4:6d:49:1c:f1:36:92:61:aa:31:47:28:93:d4:f2:a3:00:f2:
12:45:ce:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUOayXxWWyyuoq6+f4zuQSmGoMrZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWUwOTJkNmVjYjUyYmM5OWEzOWZhNjY3N2FmYmVlOWU0
MWJhZTBkOTAeFw0yNjA5MjEwNzI3MjlaFw0yNjA5MjIxMDE5MjlaMDMxMTAvBgNV
BAMTKEZCRDJDQkUxRDE4RjBGNTU2NzUzQzUwQzI0OTZCMDZGNTg4RjYxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTfsKKMa2XojZSUvf8KlRcVjOR
jzCgGVkDudesEaio6Yo2qehfY1CjaVp1cV9OWEbmd58oRDcImJl7tFZae5PCheOS
ZvExbt4viQt/7nDLgk1UFNo6eyYJdnymU5NNXECNQ7m013zPy9XayejBS+t7fbiD
IiQB/OlFI7kYxLZBRjlEJWdK/Pv23fZSP1OcqJ1NZe9goddWHRTHKwDexGRMjVMw
uBoVON/R6lwVwmG1Boda8oi5E8zlVUYdeYoWjpgyOVgffZ1CKxvuMEQb6PYSLrl8
QDDqY+V0lJGuuXBB6Um5BZmAUJHedBslkytFv/fhPrejGQRoTHN572PRL3I5AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU+9LL4dGPD1VnU8UMJJawb1iPYbQwHwYDVR0j
BBgwFoAU7gktbstSvJmjn6ZnevvunkG64NkwDgYDVR0PAQH/BAQDAgeAMHYGA1Ud
HwRvMG0wa6BpoGeGZXJzeW5jOi8vcnBraS5hdGhlbmUtY2VudGVyLm5ldC9yZXBv
L3Jwa2ktYXRoZW5lLWNlbnRlci8wL0VFMDkyRDZFQ0I1MkJDOTlBMzlGQTY2NzdB
RkJFRTlFNDFCQUUwRDkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZI
cnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Z2t0YnN0
U3ZKbWpuNlpuZXZ2dW5rRzY0TmsuY2VyMIGBBggrBgEFBQcBCwR1MHMwcQYIKwYB
BQUHMAuGZXJzeW5jOi8vcnBraS5hdGhlbmUtY2VudGVyLm5ldC9yZXBvL3Jwa2kt
YXRoZW5lLWNlbnRlci8wL0VFMDkyRDZFQ0I1MkJDOTlBMzlGQTY2NzdBRkJFRTlF
NDFCQUUwRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBys+vJ7FwC/RvCadqUjPMW+iV+42QRRYpwL/y9
oqNflAH4eV7PiU3BPVoq61PQQWsi0Ts5xZu59VYDkA0QGVfbkNiu2OcBg6HgBYPc
77g/+lgLDswTd1clwexfKFyTHBffOdFb19Yrr6LoDglHEk4Xrjc5Bo67uXRzFDgK
B4gbMjOiQQtIsd16kOeA9D21Lnl9uOx5yZNH2ib6RS05olak66tec9VgXqrZYobX
lesT6u8vYgbu6ixMjDdBqiQkls1EYDfY1LTKGOUqyW3FEgwDIzV4dOi2J5yUChqr
0C3B8Z32KpXeZE/leIPEbUkc8TaSYaoxRyiT1PKjAPISRc6H
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:55:46 2026 by rpki-client