Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
File: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft (raw, json)
Hash identifier: G24vgxfHGRqnh/0GgxqIfzYST5jvBg4woDI8SCvsj5s=
Subject key identifier: 90:B2:EE:E6:1D:9B:10:A5:8E:A1:94:24:2B:BC:57:19:A5:78:6A:E8
Authority key identifier: C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
Certificate issuer: /CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Certificate serial: 4F8031CB7797DF8A977F67D8CB1C2B2DA7C7839C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
Manifest number: 37
Signing time: Wed 23 Jul 2025 21:30:40 +0000
Manifest this update: Wed 23 Jul 2025 21:25:40 +0000
Manifest next update: Fri 25 Jul 2025 00:48:40 +0000
Files and hashes: 1: C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl (hash: zlx8Llet99B9kfDdZd0/qW4esq1FgNX7oaMxG8lDXTg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:80:31:cb:77:97:df:8a:97:7f:67:d8:cb:1c:2b:2d:a7:c7:83:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c445f6c1c3a7ca8b30f85e7db856309cabe68a08
Validity
Not Before: Jul 23 21:25:40 2025 GMT
Not After : Jul 25 00:48:40 2025 GMT
Subject: CN=90B2EEE61D9B10A58EA194242BBC5719A5786AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:04:fc:0d:16:69:36:dd:62:b6:c0:3b:8c:
5a:c5:af:9a:c9:6e:f2:8e:e4:c3:ed:1f:bc:0d:8a:
e8:fd:1c:c9:47:50:1b:e0:cd:d7:d2:86:c5:e2:5b:
be:68:72:af:64:79:67:e4:d6:c0:a4:c1:56:21:7e:
a8:d6:d7:7a:e4:4a:f6:7a:d3:a8:19:84:7e:38:16:
e9:c1:52:ca:e9:d3:1d:35:ca:3b:eb:66:67:41:11:
71:f2:bb:f7:16:2b:ce:3c:81:e5:1b:9e:d2:17:78:
8b:50:81:85:6f:43:03:0f:14:d0:4b:cd:81:18:38:
c3:bc:c6:40:8c:0e:54:5c:3f:56:17:3d:d5:3d:8b:
ef:e7:03:fa:e0:42:86:01:b0:b0:11:89:9e:24:07:
04:0e:f3:10:e7:2c:3f:82:aa:76:84:70:f5:b6:de:
10:42:7e:ce:a0:2c:5b:b8:1b:b1:03:6d:25:b2:a3:
e9:1a:98:92:cc:77:43:2e:79:af:b3:54:9c:25:23:
d8:cf:c0:c9:22:a3:41:e9:33:77:2c:e7:89:8c:90:
a3:a8:cb:1b:11:22:14:76:5c:75:24:cf:c6:1d:61:
c4:4d:b0:90:ce:8c:87:38:52:00:50:51:02:88:62:
18:18:17:c4:7b:43:19:17:4a:d3:46:3c:3b:73:de:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B2:EE:E6:1D:9B:10:A5:8E:A1:94:24:2B:BC:57:19:A5:78:6A:E8
X509v3 Authority Key Identifier:
keyid:C4:45:F6:C1:C3:A7:CA:8B:30:F8:5E:7D:B8:56:30:9C:AB:E6:8A:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEX2wcOnyosw-F59uFYwnKvmigg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/2/C445F6C1C3A7CA8B30F85E7DB856309CABE68A08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:9f:42:f1:7f:4f:fe:76:51:1b:67:d8:b0:46:4b:c5:e2:
c6:7a:6d:91:85:da:2c:b8:87:7a:8c:e5:9a:34:5e:8c:ce:fa:
84:03:dc:52:7d:da:89:17:4a:f6:a9:74:6f:2b:71:31:fc:8c:
14:b2:28:c8:f2:7a:66:b0:fa:86:39:46:43:35:7f:21:10:07:
93:ac:02:25:24:82:34:3d:b0:9e:bc:91:c3:34:6f:54:6f:5e:
9f:50:11:91:5e:e9:b4:71:36:2d:5a:05:6e:56:d4:20:31:c2:
c4:f5:39:fc:34:4b:b5:a9:ab:23:45:e0:b6:56:06:34:d7:45:
be:07:ba:68:25:f4:9e:8e:b0:b0:4f:e2:86:aa:c7:05:6e:23:
76:25:99:2d:c1:8b:02:24:55:e9:2e:44:4f:69:38:a5:7a:2e:
59:c4:6d:6b:ba:50:b3:e0:68:86:c3:35:0a:76:d4:69:0b:18:
b2:aa:dd:e7:9b:1a:40:6f:41:56:52:74:81:08:9c:70:25:31:
88:8e:f0:54:a9:1e:4f:54:ae:da:cc:9a:d2:b2:d8:d1:73:51:
14:2f:ed:46:3f:18:9a:7d:d2:c2:18:b6:27:95:cf:aa:22:6e:
a2:e0:9e:e4:5f:be:f1:2e:10:88:d4:d9:08:73:b3:7c:c0:fe:
45:7d:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:58 2025 by rpki-client