Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier: pwee1kU+JGgJlnex0HH/+y9pnM5annj02dGaBTvmCks=
Subject key identifier: D8:7E:21:DE:46:86:60:B9:56:B0:80:40:C3:17:25:21:EF:67:52:96
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer: /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial: 7159B613B2622E3B12B729BCCBE6118103B05DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number: 01FB
Signing time: Thu 24 Jul 2025 06:28:27 +0000
Manifest this update: Thu 24 Jul 2025 06:23:27 +0000
Manifest next update: Fri 25 Jul 2025 08:14:27 +0000
Files and hashes: 1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: vTXFi4OOuAXNX/wqqcKPEXcrBKdlbQN7JLI1IqBuEHY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:59:b6:13:b2:62:2e:3b:12:b7:29:bc:cb:e6:11:81:03:b0:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Validity
Not Before: Jul 24 06:23:27 2025 GMT
Not After : Jul 25 08:14:27 2025 GMT
Subject: CN=D87E21DE468660B956B08040C3172521EF675296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:31:82:5d:34:7f:5f:00:9a:e4:03:4b:69:
e2:b0:bf:fd:3c:07:d0:d6:fd:11:13:8b:eb:2b:61:
a8:82:74:f4:e2:0f:0f:2e:28:93:ee:a3:c1:ef:b4:
b1:d1:a5:ef:37:d1:84:77:ae:0c:0d:6d:c0:94:af:
26:ea:3d:7b:8f:d4:b4:d4:d1:7d:75:8c:9a:ef:75:
fb:69:67:49:aa:64:00:57:1c:a1:61:f2:22:f8:0b:
44:26:98:59:f5:3e:05:6e:b8:93:26:28:56:bb:a6:
b5:cc:c1:0c:9b:d0:f6:e7:5b:38:a3:c2:b3:0b:82:
a0:7b:0f:12:c7:c9:49:39:1c:70:28:d6:e4:20:5a:
1b:14:39:20:ad:b2:79:ca:ee:06:80:0b:83:57:4b:
dd:a4:62:b0:46:de:c1:1e:9c:4c:2b:e9:fa:fa:3f:
c1:3a:b4:6e:8a:68:ef:a2:a2:9f:c6:46:ca:5d:65:
d6:91:5c:55:a9:50:5e:97:6e:9b:c8:5a:cb:e8:4c:
20:4c:ff:70:0e:2f:a6:ec:cc:2f:be:aa:f4:ca:26:
a1:a5:61:d6:50:79:9d:c3:d5:6c:14:5a:c2:54:16:
b5:33:f8:fd:fc:a5:dd:e9:b2:cc:b0:1e:76:01:ee:
f5:65:41:1a:64:0e:77:dc:97:a3:b1:d7:3a:85:1f:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:21:DE:46:86:60:B9:56:B0:80:40:C3:17:25:21:EF:67:52:96
X509v3 Authority Key Identifier:
keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:05:03:bd:68:9e:f7:a8:50:9f:50:52:f4:66:34:7a:2c:
b5:bb:49:31:6e:5a:e0:34:d0:66:18:49:01:44:22:c0:d3:51:
9d:28:06:94:c1:c2:6b:54:68:ad:97:20:a8:af:30:37:5b:ee:
e1:d1:f4:ea:ca:bf:96:ad:a0:5b:4f:a4:0b:17:67:df:9e:14:
ff:18:86:6c:e0:6a:e6:51:de:ec:35:f0:bd:d0:7f:30:8d:40:
52:a6:c8:50:b3:77:bc:c0:d3:20:b7:7a:ae:72:0d:48:c8:d8:
eb:8c:1a:4d:48:73:d5:f1:6c:ef:31:e6:8e:86:3a:75:64:55:
2d:d8:54:ae:4e:c5:75:44:ab:4e:37:62:90:3a:39:2a:91:68:
97:11:99:c8:67:6f:50:e8:d8:9c:e2:f9:f3:8d:68:f9:99:7b:
3b:f4:a7:86:56:f9:0f:4e:3d:9d:d0:a4:df:27:25:7f:43:40:
ba:42:2a:a3:01:23:29:78:2a:13:6b:fe:13:2d:87:e2:b2:9d:
41:94:a3:d9:e4:32:c1:a0:0c:60:b8:ef:f1:34:30:ca:c2:56:
d2:5f:14:f6:b0:81:2e:6e:01:e6:d1:8c:37:c0:d2:42:a2:ea:
29:ce:74:22:e9:52:0c:9c:ab:5b:e9:9e:4d:5e:9d:60:87:17:
70:2a:c3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:31 2025 by rpki-client