Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
File: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft (raw, json)
Hash identifier: qDvDk4kqV9HX1fh0Y0bcJjgXg17l5GZhJBTqsZLln7w=
Subject key identifier: A7:4A:0C:88:C5:CB:06:8B:5F:A2:F1:41:38:D4:30:F9:14:26:EB:4B
Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Certificate issuer: /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Certificate serial: 4D434ADB3A37C2FC171F13F5D088B3FB5AFB1061
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
Manifest number: A5
Signing time: Tue 04 Nov 2025 11:24:10 +0000
Manifest this update: Tue 04 Nov 2025 11:19:10 +0000
Manifest next update: Wed 05 Nov 2025 12:26:10 +0000
Files and hashes: 1: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: 4lliDoKad0QWiI8QFd6IuWpcnQIUMJu5VW5vCep/nzY=)
2: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: SuaWG0h25mSOkF6TUnfvTVFuLybBa5x6nHfCETqFdvg=)
3: D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl (hash: 9zWdvhYfxjfACqeyGru+IU6vy40FLHPxRM1BuJkp+JM=)
4: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: pxkwC1tXh5AA3dY0ImOI+evo8PccYn8siWbTpsnS3+U=)
5: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: Sug13/bOHzR/z7k2MN1/PwM1kjEU9a8FYYmcJgI2acw=)
6: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: Akh6Hk6S0OH2Z77HSUXUpo9sndUP6ZpVYbaZ0C+pMkU=)
7: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: EPhN/IdQdctHEgcI5mRqnnjYfzJlSrsw3WqDekvn86Y=)
8: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: CWOxtutFW8hhUOi9VObNEvn/pGQ0cmbzWj3A/jlfZ7k=)
9: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:43:4a:db:3a:37:c2:fc:17:1f:13:f5:d0:88:b3:fb:5a:fb:10:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Validity
Not Before: Nov 4 11:19:10 2025 GMT
Not After : Nov 5 12:26:10 2025 GMT
Subject: CN=A74A0C88C5CB068B5FA2F14138D430F91426EB4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:33:9c:c2:86:ce:c4:11:5e:9d:66:6d:29:
cf:19:46:62:1d:75:2a:1a:d6:ee:c6:fc:18:df:1a:
8f:d6:5a:34:c0:27:9d:a5:a9:5d:1a:65:5f:6c:f7:
04:fd:27:8b:bb:5f:5c:c9:69:1b:dd:d5:93:69:23:
66:67:1c:7a:cd:b9:90:ba:8d:0b:54:1d:c3:ff:2c:
73:a7:fc:7d:03:e0:4b:dd:a0:d1:8a:8a:b6:82:61:
5a:39:7f:5d:db:a6:85:6d:5d:ab:76:a3:60:63:43:
57:7c:b6:26:f6:f8:aa:ee:4f:95:05:06:17:5f:7e:
3a:77:d6:84:4d:a4:cc:88:24:c3:d6:46:0b:76:7c:
56:29:82:29:a7:1e:eb:c3:5c:f2:0a:48:28:01:9a:
7c:38:4d:c7:a9:1a:5f:20:1e:43:87:a7:5f:aa:90:
e9:5c:ae:25:a2:96:ef:2c:61:08:e4:16:dd:cd:2e:
c4:a4:a3:c7:6f:bb:03:6e:c0:70:59:31:e1:7c:ad:
b4:e6:d0:85:5d:c5:00:cb:be:7d:17:f1:46:85:59:
8a:7b:3a:f6:da:e8:ec:db:37:bb:28:a1:1c:1d:f3:
87:90:80:a4:3e:a5:08:c5:fd:f5:da:3c:c0:16:ae:
9f:50:a1:f7:85:b6:5b:ab:1c:26:79:2a:74:7e:ac:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4A:0C:88:C5:CB:06:8B:5F:A2:F1:41:38:D4:30:F9:14:26:EB:4B
X509v3 Authority Key Identifier:
keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:04:5b:00:0a:f8:07:30:79:e8:5d:54:8c:f9:36:fb:22:
af:3d:f2:c3:ee:52:33:5c:1a:1c:67:c6:16:6a:11:e6:5c:43:
bf:2f:d7:49:85:ee:77:7e:49:58:c4:d0:39:8e:57:ee:e0:ac:
b2:0f:60:4d:ff:e5:72:ba:32:60:56:67:a2:f5:58:ee:38:93:
cf:11:da:d1:a0:39:ee:f0:87:3c:dc:23:a9:7d:52:68:c4:a5:
6b:50:cf:e5:7c:92:b4:16:24:79:a2:0a:8a:c5:36:2a:e5:aa:
44:15:fa:78:7a:2a:e1:84:53:9a:22:5b:40:d9:01:79:ff:e6:
89:79:fe:15:16:42:0b:0a:f7:32:b1:a9:99:ee:88:49:dc:64:
c6:6a:ab:85:06:2e:41:20:ac:e9:4f:6a:1b:cd:2c:74:75:ac:
9b:68:df:48:87:03:6c:66:07:34:bc:ff:e9:e3:b2:fa:29:7c:
c2:11:83:ca:e4:b3:10:13:0d:6b:cc:58:91:fe:33:f3:9e:d8:
4a:8a:96:13:5a:cf:59:c7:1d:34:28:e3:ff:88:82:ba:c5:69:
47:46:9f:94:8e:67:9c:a2:0d:1c:e2:02:0b:b2:bd:fd:93:8b:
af:52:cb:70:a5:e1:71:f9:cd:74:37:09:b1:a9:83:9a:da:e4:
e8:15:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:37:33 2025 by rpki-client