Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier: z2H717AlUf46a37q2o/phTbg415bxKM4+s5ObCHB3wQ=
Subject key identifier: CC:53:77:35:55:BF:22:70:28:E0:0E:4F:45:97:6D:7F:DC:36:07:F7
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer: /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial: 76FB03F4BABFDA82B8CB83D42FE85D1D81697BEA
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number: A3
Signing time: Mon 03 Nov 2025 13:57:11 +0000
Manifest this update: Mon 03 Nov 2025 13:52:11 +0000
Manifest next update: Tue 04 Nov 2025 17:40:11 +0000
Files and hashes: 1: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=)
2: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: XJajtnTvR9u0U+ZTPl7j2akO2owsHvGZxklQ8at4wXM=)
3: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=)
4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=)
5: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:fb:03:f4:ba:bf:da:82:b8:cb:83:d4:2f:e8:5d:1d:81:69:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Validity
Not Before: Nov 3 13:52:11 2025 GMT
Not After : Nov 4 17:40:11 2025 GMT
Subject: CN=CC53773555BF227028E00E4F45976D7FDC3607F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:ac:2e:22:45:4c:d7:b4:81:cb:25:6c:3a:
59:d9:3a:a0:32:4a:85:6e:13:b7:7c:7e:7f:ec:50:
68:37:80:1b:92:28:65:16:19:d2:26:97:3e:1b:93:
40:72:23:84:ac:68:45:ae:e6:8d:7d:61:ff:9b:9b:
f1:e7:42:39:83:61:f3:8a:de:6d:d3:ee:94:bc:98:
d1:b9:66:59:00:ae:e8:12:7c:0b:57:a9:4e:26:23:
f0:34:dc:90:58:9d:21:9b:26:b1:a2:bb:ab:b1:c5:
3d:65:41:d4:19:56:34:34:0c:b7:81:e2:1e:a3:74:
4a:f7:cf:49:25:99:5c:b7:72:aa:eb:cd:31:32:0a:
fb:1d:36:1a:18:36:85:b4:66:87:aa:a2:2d:dc:ed:
9b:cf:84:d2:77:3b:56:eb:f0:60:32:a1:25:95:36:
48:c6:34:a4:bb:d5:9b:ed:33:85:d6:f3:d8:4f:85:
1b:f2:09:fa:5c:15:8c:6a:c4:90:0c:e4:f3:33:ed:
ea:2d:45:c5:87:77:9c:aa:57:c8:c2:72:0a:ee:b3:
d1:3e:64:f5:90:8c:a9:21:18:d5:6b:60:a5:9a:79:
1e:e8:a5:b1:21:41:58:42:bb:b2:59:4f:43:e1:49:
36:60:fb:67:44:5d:81:97:16:ef:89:d7:b5:ed:a6:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:77:35:55:BF:22:70:28:E0:0E:4F:45:97:6D:7F:DC:36:07:F7
X509v3 Authority Key Identifier:
keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:f2:cd:8b:f6:8f:b6:83:53:fe:5d:e3:1d:63:b2:33:85:
67:94:80:e2:15:19:cd:bf:c1:3f:4e:47:f7:90:92:e9:be:92:
28:ce:06:da:c6:3c:e5:ba:9e:61:f2:ec:11:34:22:ff:b3:31:
97:b8:95:db:03:5f:d5:f6:dc:6c:83:a0:58:f7:01:18:35:38:
bc:d7:8c:ed:3c:a5:4e:54:4c:f6:89:78:32:fd:69:91:e6:33:
62:48:7d:0e:50:17:92:3c:cb:c7:a5:d7:86:61:97:6d:1a:b8:
6d:e2:94:48:fb:d8:ff:35:f0:f9:57:7d:6a:44:0e:5b:0a:8e:
68:f0:5a:86:64:b0:e1:c3:ab:f2:c5:3a:bb:5b:aa:09:2c:17:
ff:98:43:19:30:14:32:4a:ff:d7:a8:e2:e9:ee:45:8b:fe:52:
82:84:85:bb:9a:df:79:75:a3:f1:6e:0c:99:cd:c5:99:6d:1c:
f1:dc:c3:12:2c:df:65:9d:63:5a:ee:a1:7d:e8:04:49:40:92:
8f:a6:b9:d7:82:30:c1:66:ce:30:d9:56:c0:12:41:20:2f:03:
52:1c:53:57:ee:f0:1b:ba:33:b3:47:e7:63:fd:91:1d:c8:4e:
61:09:4a:60:3f:89:df:7e:45:6f:c8:68:49:3b:4c:60:ac:a3:
c1:ff:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:09:57 2025 by rpki-client