
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json)
Hash identifier: +B/To8+Vi+fKBn0Gxd+NZ9mXfn34JwHnrF6gngoW/EI=
Subject key identifier: B8:B8:6F:B5:07:1E:3D:60:DD:5A:40:6F:E8:AE:70:13:C3:C4:8D:C0
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial: 3D46B82115699EAC9F21E18E37F656357CB37AD1
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
Manifest number: 02BB
Signing time: Fri 16 May 2025 16:39:34 +0000
Manifest this update: Fri 16 May 2025 16:34:34 +0000
Manifest next update: Sat 17 May 2025 17:53:34 +0000
Files and hashes: 1: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: zuDbNZyv767Osf8qslzISWKlh0Hrae8DUUrjcnDNdwE=)
2: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: pLh45pB1svAQHP5Xv38naFs3vwEc4Ksu1QAkru4X3nA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:46:b8:21:15:69:9e:ac:9f:21:e1:8e:37:f6:56:35:7c:b3:7a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Validity
Not Before: May 16 16:34:34 2025 GMT
Not After : May 17 17:53:34 2025 GMT
Subject: CN=B8B86FB5071E3D60DD5A406FE8AE7013C3C48DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:de:b3:ff:78:9b:29:1e:e7:b4:0a:a2:56:
16:76:34:0d:7e:ba:d2:0f:5f:c0:ad:ee:34:f1:8b:
80:af:60:f5:2d:e5:c0:70:12:e5:72:9a:a6:7c:f6:
22:57:46:da:10:68:0e:da:9a:67:94:73:8b:06:be:
98:fc:44:49:d7:90:56:de:44:00:b3:a8:31:09:cc:
08:7c:9c:4b:88:a2:4e:69:ba:54:a0:36:f2:b1:3c:
75:72:f8:f3:0b:03:92:13:15:e3:04:e6:48:9f:23:
d5:9d:ee:15:62:7c:eb:c0:e2:54:ed:1b:ab:7c:8a:
52:8c:1d:61:2e:50:61:a7:57:70:c3:2c:d3:6c:b2:
2a:60:08:01:4b:c3:f0:d9:6a:40:6b:5a:c4:f8:65:
ee:22:41:26:a5:24:f0:e2:a3:1d:76:8f:ee:6f:d1:
45:04:30:41:d8:11:ea:7a:ea:1b:46:e1:5f:51:1d:
0f:13:e5:c2:65:52:14:e0:f1:91:47:0c:9a:f6:a8:
84:13:3f:5a:12:33:48:c6:56:51:ed:63:14:ca:9a:
98:e7:5f:04:9b:ee:63:b9:0e:fe:f8:b9:d4:26:3c:
f1:57:1b:0c:cb:9e:82:74:44:20:d4:44:49:c4:29:
2b:53:b6:02:7f:0d:5f:86:fa:9b:93:c3:64:cf:3b:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:6F:B5:07:1E:3D:60:DD:5A:40:6F:E8:AE:70:13:C3:C4:8D:C0
X509v3 Authority Key Identifier:
keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1a:78:56:47:de:9f:00:99:ae:f5:86:b9:37:75:a9:f2:ff:
b3:75:8d:dd:3c:8a:58:02:8b:ae:ab:e0:e7:48:77:93:0c:0e:
38:38:e0:81:4d:88:57:d2:50:a6:5d:8a:35:39:86:a6:01:b8:
6d:1d:44:be:49:72:f6:d9:3b:0b:c8:dd:e7:a1:fa:07:94:7f:
07:96:42:c9:3a:d5:e3:6a:44:f3:3d:bf:68:a9:10:82:aa:cf:
7f:f9:25:e6:d8:c5:49:90:4d:22:0f:0b:ca:85:e1:28:9e:dc:
4a:b1:74:9e:03:51:32:3e:96:ad:87:08:25:c3:ee:08:86:55:
54:56:74:80:97:bd:81:57:bb:72:fe:1c:6a:c9:43:c0:79:83:
76:7a:76:ac:46:a4:03:b1:46:ee:a3:57:2b:1f:b3:ef:33:58:
b3:18:05:bf:bc:89:4e:ec:e0:75:9e:94:9c:19:1e:6d:04:cf:
a6:20:c6:c9:50:76:e0:50:d5:bf:17:7d:81:42:46:0c:e5:eb:
f1:bf:3d:9a:c4:78:25:34:32:0b:a9:1d:ed:a5:01:56:77:34:
46:92:47:a0:41:9f:c1:1f:ae:30:9a:c2:1a:03:17:dd:1f:e4:
83:73:09:59:37:c8:06:4b:48:54:6d:e9:08:cf:d2:44:bd:84:
29:da:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:58:36 2025 by rpki-client