Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier: xO/+CsyaKUCiL6tvb+Q7tck+hcrN86aJO8uOKAc0ngU=
Subject key identifier: 19:06:B6:5A:7F:F5:CB:C6:CD:5C:4F:57:16:0B:B9:71:BE:29:8B:DC
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial: 6B8B5562D1DD61EFFC5488F09D928F4F7A8ED88C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number: 19
Signing time: Sat 02 Aug 2025 04:00:52 +0000
Manifest this update: Sat 02 Aug 2025 03:55:52 +0000
Manifest next update: Sun 03 Aug 2025 04:30:52 +0000
Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: I2XxBd03gpmhLHQRsxD7rCXXytDmzKJ5RB8cDIlU8FU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:8b:55:62:d1:dd:61:ef:fc:54:88:f0:9d:92:8f:4f:7a:8e:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Validity
Not Before: Aug 2 03:55:52 2025 GMT
Not After : Aug 3 04:30:52 2025 GMT
Subject: CN=1906B65A7FF5CBC6CD5C4F57160BB971BE298BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:3d:be:27:91:d4:21:d9:ac:2c:ea:c6:57:
86:8c:61:9e:81:20:1e:c5:95:fc:fe:31:5c:98:b1:
80:6a:66:1a:73:ad:2f:2c:c4:43:f4:3e:12:ea:de:
ee:9b:73:8c:3d:46:48:a3:11:34:d0:12:83:4d:b0:
4e:e8:22:1d:0b:0d:b3:20:1b:49:eb:47:92:46:86:
20:f7:7c:a7:55:c9:d9:3c:c3:f6:59:95:f5:68:6e:
73:73:87:f8:aa:a6:19:41:ea:c2:6c:3f:8f:ef:e9:
53:e1:de:1f:0a:a3:dc:3f:6e:44:00:e9:68:58:f6:
fa:c7:00:34:c2:c6:b8:8c:c8:74:58:70:d4:bc:dd:
ec:16:05:b0:36:a2:86:d5:45:52:05:c4:50:a2:44:
0b:c3:27:3f:b5:b7:3b:66:6a:9b:71:08:91:75:d2:
4f:ea:14:6d:73:8c:d2:49:e6:e5:f8:d1:ee:fc:f8:
9f:1c:24:12:3d:64:7f:bb:fc:a0:c0:a7:09:89:7b:
60:66:94:8c:fa:9d:58:9d:7c:9b:de:d7:3f:ff:c4:
9d:ee:2a:b6:91:c6:c4:d7:58:cf:89:03:34:08:ed:
e2:b9:1d:2e:7e:47:b0:83:d7:88:04:c3:6e:2a:44:
9d:e0:5d:06:b4:04:45:70:18:56:a6:e1:eb:69:75:
af:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:06:B6:5A:7F:F5:CB:C6:CD:5C:4F:57:16:0B:B9:71:BE:29:8B:DC
X509v3 Authority Key Identifier:
keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f0:c8:e1:73:67:f3:0a:db:4a:ef:e1:b5:e3:bb:ba:90:f3:
ab:42:8e:96:03:ad:f6:1e:21:0a:b4:0e:a0:5e:3d:ca:ea:47:
bf:9b:0f:b9:ba:f7:b8:28:93:af:0b:fe:f0:24:8b:e1:73:be:
e4:4d:1b:1e:d3:c3:cd:9a:1b:ee:73:35:34:39:1a:0a:bb:a9:
45:65:fa:0b:5b:4c:14:bd:84:0e:42:11:ee:7a:ee:43:81:bd:
3d:ab:39:72:3a:34:e8:59:9b:a6:d0:47:a7:0a:75:c0:ed:67:
0a:b5:43:0c:8c:b7:21:19:0a:8e:d1:f1:1e:a7:de:19:da:51:
f7:f0:c6:bd:70:cc:95:3e:38:36:84:25:e1:41:05:c4:5e:ab:
5f:11:17:c3:36:90:b2:15:be:6d:90:28:48:f1:05:1b:4b:b8:
70:33:a8:e4:ac:67:5c:35:29:e3:ee:95:fc:22:4b:fc:dd:d1:
d8:de:df:cb:79:ad:bf:c8:f2:ba:16:e3:7d:3a:45:13:6f:63:
02:e7:7b:57:ef:44:c3:ce:35:60:d4:f2:fe:a1:63:be:58:0b:
b8:39:20:5c:5b:dc:7c:df:99:30:5d:e0:4a:e1:b5:57:23:80:
49:7c:30:68:af:75:27:50:49:a8:c9:c9:5a:06:d4:a9:b5:9b:
86:f5:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:28:14 2025 by rpki-client