
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json)
Hash identifier: isbMsd8bPoJkJkque1TqJRUBNvdiq+t+bqXqwA2fGFw=
Subject key identifier: CE:74:2A:9A:81:5E:63:B2:ED:6C:86:54:54:4C:64:70:2F:41:FB:61
Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6
Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
Certificate serial: 2545E27D3C8F059E069C8D401AEB8855691C791F
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
Manifest number: 07
Signing time: Sat 26 Jul 2025 05:56:06 +0000
Manifest this update: Sat 26 Jul 2025 05:51:06 +0000
Manifest next update: Sun 27 Jul 2025 06:15:06 +0000
Files and hashes: 1: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=)
2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=)
3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=)
4: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: vlIiStNCM5sr9btp4cqrZX7m9XxPLMjyRt0JKN3NU5M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:45:e2:7d:3c:8f:05:9e:06:9c:8d:40:1a:eb:88:55:69:1c:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
Validity
Not Before: Jul 26 05:51:06 2025 GMT
Not After : Jul 27 06:15:06 2025 GMT
Subject: CN=CE742A9A815E63B2ED6C8654544C64702F41FB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:87:8c:8e:7a:58:a2:57:55:a4:a0:1c:d9:
2b:b0:e5:07:b0:70:8f:0d:4f:3c:d0:81:f6:64:f1:
20:1b:8f:36:d6:5e:b7:08:aa:ca:d8:1f:ef:5a:a6:
1b:9d:5e:0a:db:ca:b6:f9:86:a5:35:5f:90:f8:b3:
69:a2:d4:66:b6:97:ff:7e:30:da:fd:9c:7f:6a:d6:
df:be:13:b5:20:15:05:71:26:ed:39:db:55:d5:d8:
d8:f0:7b:18:02:43:9b:35:16:9a:b5:7c:f1:33:05:
1f:d3:f0:4c:8b:26:38:d4:3d:a8:9d:58:38:5f:f7:
96:f6:c1:ea:49:a0:3b:18:70:84:f6:a7:2f:ee:45:
a9:eb:a2:4e:7c:5e:f3:87:e9:67:c2:1c:9f:69:39:
36:1e:9c:fb:4e:52:82:fe:82:ac:7a:2d:02:0c:44:
1d:03:7d:63:02:3f:e2:6e:c4:5e:b7:e3:f2:b1:6c:
60:63:22:73:83:45:ed:8c:a3:04:8b:d9:16:7e:3b:
18:64:5c:4f:29:6e:ca:1d:3a:c0:be:9d:0d:e9:1e:
72:1c:45:2d:21:ba:04:78:11:40:7d:21:57:d3:cd:
f7:39:05:28:30:10:08:75:40:89:c5:17:0e:15:de:
74:13:bb:6a:4e:fa:49:2e:5d:6e:3b:49:5a:e1:3c:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:2A:9A:81:5E:63:B2:ED:6C:86:54:54:4C:64:70:2F:41:FB:61
X509v3 Authority Key Identifier:
keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:00:2e:f9:e6:f3:44:8d:c0:62:a1:61:4f:e0:28:f6:4c:
16:68:65:73:a5:2a:ae:6c:bd:33:c6:fc:0d:c8:7b:96:8c:68:
11:5e:c6:ed:be:92:55:a3:ef:78:8c:8a:75:68:c0:9a:7c:57:
2a:e7:96:ce:dd:38:35:48:32:13:b4:9e:e6:b3:3b:40:77:f5:
42:cf:56:ca:8f:0b:42:fb:71:97:c0:c3:6a:3f:66:1f:d8:ed:
27:2e:b4:ce:e6:23:21:1f:a4:48:8b:57:0d:26:50:e5:11:51:
81:1e:a2:62:e8:50:13:a5:33:59:fe:57:b8:50:c4:79:b0:2f:
12:fc:57:0c:b7:a9:dc:43:a1:69:96:ff:19:4e:b3:f2:d3:19:
ba:4a:01:f9:df:ee:c4:4f:11:25:11:f7:b9:87:5c:1d:9a:05:
17:01:69:b9:90:30:56:6d:c7:fa:40:59:25:0e:09:39:cf:76:
1f:79:d0:b0:bc:17:cc:ac:4a:4b:70:8a:c2:f3:cf:71:1f:54:
bd:a5:50:5f:c9:e3:85:e5:ae:7f:c5:6d:c6:c8:a3:ec:7e:da:
36:7c:1b:fc:3d:44:e3:bd:ac:5b:bb:59:6a:73:8a:7c:fe:ce:
b9:63:8e:86:ca:14:df:0b:63:79:e5:ec:94:a5:b7:2c:8a:14:
e7:07:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:46 2025 by rpki-client