Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier: ej7EV2LGRMO9Frh/KI3vHVTyqQcD3QEspZ4qHjOXMBE=
Subject key identifier: 1C:17:CF:53:12:60:1D:E9:DE:51:14:CA:56:89:79:44:2D:D9:4A:78
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer: /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial: 4CEF10BEE81EAC38AD9E54CEB3CB5B1EBEF5894F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number: 011B
Signing time: Sat 26 Jul 2025 00:06:06 +0000
Manifest this update: Sat 26 Jul 2025 00:01:06 +0000
Manifest next update: Sun 27 Jul 2025 03:22:06 +0000
Files and hashes: 1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: tni3PNYaduKYDwEc6WiHFQvRvZqt6adHZe9QEORlIGI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ef:10:be:e8:1e:ac:38:ad:9e:54:ce:b3:cb:5b:1e:be:f5:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Validity
Not Before: Jul 26 00:01:06 2025 GMT
Not After : Jul 27 03:22:06 2025 GMT
Subject: CN=1C17CF5312601DE9DE5114CA568979442DD94A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:b3:d0:a4:3c:25:f5:c5:e5:6f:3a:5a:01:
65:a4:79:9a:ed:f2:06:69:00:a9:c3:42:b2:48:34:
fd:f0:a0:f9:92:40:9a:cd:f1:81:d1:ac:e5:4b:0d:
57:16:fd:92:a2:f3:94:c3:2e:61:9c:d9:cb:e8:f1:
7c:9f:2c:92:75:cf:92:33:f9:99:5c:bf:93:e0:01:
2b:d8:e5:68:97:cc:cf:a5:77:48:f3:ab:77:1b:c7:
6c:b4:49:76:0e:b0:c6:2e:08:0d:79:a8:2d:c5:ee:
b6:7b:ee:c7:eb:c8:e6:ab:5f:82:47:6b:29:99:31:
da:ac:6c:d2:15:39:60:66:73:e1:17:01:47:be:f4:
e7:52:61:ae:d8:44:0e:a1:7c:f9:f7:df:37:6d:26:
95:4e:6a:76:4f:1d:8f:52:7f:84:c4:fc:bf:d4:00:
45:e7:8f:5a:dc:17:07:14:e8:e3:91:71:bf:41:a8:
21:00:d4:d2:cf:33:aa:0c:64:56:bc:4b:3e:e9:c8:
52:60:36:32:b8:3b:e7:f4:aa:72:80:b2:9d:40:f4:
1a:0c:81:94:f1:ec:66:3d:63:66:d7:99:b9:6f:b5:
bd:09:08:a7:79:1d:19:c6:1e:fb:37:19:cb:05:2c:
b8:f8:21:96:c1:10:83:ce:05:fd:54:28:34:ae:5b:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:CF:53:12:60:1D:E9:DE:51:14:CA:56:89:79:44:2D:D9:4A:78
X509v3 Authority Key Identifier:
keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:07:e7:a0:a5:3a:93:65:cd:eb:c0:23:d0:5b:29:51:8c:7d:
03:01:08:78:25:6a:a0:88:e8:07:c4:dc:5c:16:31:aa:aa:30:
24:30:d1:33:60:44:65:8d:de:d2:ad:b5:d1:62:7d:62:ad:95:
0f:fc:fc:69:b0:77:58:1f:65:38:81:54:70:94:b7:bc:0a:d8:
99:2c:41:18:0a:f0:6b:82:e9:38:c5:76:7d:1d:61:cd:0e:ff:
5d:6a:59:df:87:ec:c3:e6:40:51:fb:e7:67:b7:32:64:3e:09:
50:30:d8:28:c5:de:5e:a9:4c:71:00:c8:6e:29:dc:2a:0f:ee:
bf:2c:12:91:21:55:13:29:e3:10:98:63:ac:f1:d0:31:e2:cc:
33:fa:cb:51:1d:6b:15:ea:79:34:29:6b:1e:99:9a:5e:b7:3d:
4e:e6:69:dc:5d:eb:b6:16:8f:27:21:20:6b:21:bf:65:54:d4:
bc:52:8e:13:11:d8:5a:88:e7:c8:03:b5:99:71:b7:59:9d:e2:
14:21:7d:72:a2:9f:ea:a2:d7:42:df:dd:10:0d:0c:d6:c4:d8:
69:1a:9d:3a:12:fc:ca:2e:b0:27:d2:00:04:49:ad:0d:f7:0c:
e2:45:ad:0b:e0:8f:88:9a:fe:e9:c5:53:a9:29:b5:ac:81:e6:
61:46:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:32 2025 by rpki-client