Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: Dj/J68mfbs+phorb3DpWtdXhX9hoiOWI8CpCfYdTg8g=
Subject key identifier: 31:DF:60:FE:96:E7:AD:96:CB:6C:45:5E:DF:04:40:5B:42:E3:EC:D8
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 0F92604A0F7FD88A38D08D474F7A218190D25FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: A5
Signing time: Fri 01 Aug 2025 21:52:55 +0000
Manifest this update: Fri 01 Aug 2025 21:47:55 +0000
Manifest next update: Sat 02 Aug 2025 23:08:55 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: 5SNBa50Qhh/vsntgEzxbmCPd2MsKa0Fy1Q/R5i2Zx6w=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:92:60:4a:0f:7f:d8:8a:38:d0:8d:47:4f:7a:21:81:90:d2:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Aug 1 21:47:55 2025 GMT
Not After : Aug 2 23:08:55 2025 GMT
Subject: CN=31DF60FE96E7AD96CB6C455EDF04405B42E3ECD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:15:4c:d7:12:ab:11:55:fd:43:3f:ff:8c:
9d:1f:e5:ad:65:3d:f3:1d:53:2a:54:37:82:1a:02:
2b:6b:12:42:9d:ad:87:63:96:99:f8:4d:73:e6:90:
af:04:ca:27:c3:4c:f6:f4:cb:0d:6b:46:2f:ec:c5:
8c:12:9c:7e:3e:d4:30:2b:1c:d7:46:d1:cb:b9:6e:
af:11:89:84:60:96:3c:4c:b6:52:86:f8:cc:cd:07:
cc:07:94:64:25:92:be:30:c6:ba:d0:87:7a:db:f2:
62:07:c6:dd:50:9b:8c:58:ef:3e:d6:06:0b:e6:87:
fd:e1:90:f9:52:4c:2c:84:5e:42:f9:3d:51:1a:1a:
07:52:51:73:61:4b:15:7f:34:ff:ae:54:6c:27:eb:
00:8c:83:0c:b9:8a:37:7a:36:d4:b0:50:a8:a3:b6:
2a:9a:ca:75:33:12:11:62:0a:86:0f:07:69:61:26:
5d:55:57:6c:a8:72:95:73:40:e0:ac:a2:08:03:d6:
9e:df:83:b8:0b:09:08:8f:1b:f9:05:fe:71:d9:9b:
da:30:d6:d8:db:52:5a:0a:ae:27:37:30:ad:41:ff:
25:5d:5e:57:3f:49:3f:e8:68:e6:ad:cf:d0:bc:53:
92:8e:57:11:d7:39:ad:10:48:51:d4:75:c0:b5:cc:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DF:60:FE:96:E7:AD:96:CB:6C:45:5E:DF:04:40:5B:42:E3:EC:D8
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b1:1d:01:19:39:6b:0f:45:2a:c8:64:11:f4:68:b0:47:3b:
9e:24:68:4e:e6:2d:64:5b:87:c4:97:74:bc:9c:51:24:87:bf:
2f:c9:d2:25:e3:ee:7f:78:a3:ff:0b:e5:45:61:00:c8:ee:b2:
42:28:50:ac:b0:1b:bf:e5:21:ed:d1:28:6a:20:71:bc:1c:2d:
4d:52:52:45:9c:26:a1:fe:2c:3c:ae:92:ef:74:1a:0a:a7:a9:
6f:80:55:35:41:8e:03:c3:41:87:2b:16:54:1b:5b:6e:df:dd:
c2:71:26:d7:41:e5:c6:33:3a:dc:11:f2:c1:8c:e4:67:f0:d2:
6e:6e:b0:4a:79:8c:24:f5:be:37:a5:92:44:b0:0e:79:03:70:
19:23:ea:50:ba:7b:d7:76:da:36:09:6d:0e:37:48:b8:46:91:
f3:18:63:9f:a5:b6:2f:c1:ed:c9:82:ab:03:e5:6e:1b:8c:ed:
6b:bb:59:84:ff:b4:26:df:e5:e0:8d:00:f9:4a:dc:58:aa:c3:
e8:6b:1d:00:e7:96:f7:42:33:87:58:74:71:90:7d:97:77:24:
bc:7a:d1:f7:42:38:c3:d0:13:9a:91:53:5b:af:02:52:c7:92:
5a:e7:40:0c:12:1f:da:c7:b8:ef:47:41:fa:89:72:11:58:fa:
a8:57:b6:3b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUD5JgSg9/2Io40I1HT3ohgZDSX+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjViYjU0MjA1NTM5OGNhYzIxZGIyNDA3ZmQ4ZTdkNzk1
YTEwZjVlZDAeFw0yNTA4MDEyMTQ3NTVaFw0yNTA4MDIyMzA4NTVaMDMxMTAvBgNV
BAMTKDMxREY2MEZFOTZFN0FEOTZDQjZDNDU1RURGMDQ0MDVCNDJFM0VDRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfxVM1xKrEVX9Qz//jJ0f5a1l
PfMdUypUN4IaAitrEkKdrYdjlpn4TXPmkK8EyifDTPb0yw1rRi/sxYwSnH4+1DAr
HNdG0cu5bq8RiYRgljxMtlKG+MzNB8wHlGQlkr4wxrrQh3rb8mIHxt1Qm4xY7z7W
Bgvmh/3hkPlSTCyEXkL5PVEaGgdSUXNhSxV/NP+uVGwn6wCMgwy5ijd6NtSwUKij
tiqaynUzEhFiCoYPB2lhJl1VV2yocpVzQOCsoggD1p7fg7gLCQiPG/kF/nHZm9ow
1tjbUloKric3MK1B/yVdXlc/ST/oaOatz9C8U5KOVxHXOa0QSFHUdcC1zE89AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMd9g/pbnrZbLbEVe3wRAW0Lj7NgwHwYDVR0j
BBgwFoAUJbtUIFU5jKwh2yQH/Y59eVoQ9e0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzEvMjVCQjU0MjA1NTM5OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pidFVJRlU1akt3aDJ5UUhfWTU5ZVZv
UTllMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvMS8yNUJCNTQyMDU1Mzk4Q0FDMjFE
QjI0MDdGRDhFN0Q3OTVBMTBGNUVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLEdARk5aw9FKshkEfRo
sEc7niRoTuYtZFuHxJd0vJxRJIe/L8nSJePuf3ij/wvlRWEAyO6yQihQrLAbv+Uh
7dEoaiBxvBwtTVJSRZwmof4sPK6S73QaCqepb4BVNUGOA8NBhysWVBtbbt/dwnEm
10HlxjM63BHywYzkZ/DSbm6wSnmMJPW+N6WSRLAOeQNwGSPqULp713baNgltDjdI
uEaR8xhjn6W2L8HtyYKrA+VuG4zta7tZhP+0Jt/l4I0A+UrcWKrD6GsdAOeW90Iz
h1h0cZB9l3ckvHrR90I4w9ATmpFTW68CUseSWudADBIf2se470dB+olyEVj6qFe2
Ow==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:35 2025 by rpki-client