Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier: H1aRu5hgljkFrFcLvBLvdPP/0GrYQIe+5wCliuoFitU=
Subject key identifier: 66:BF:69:4F:18:92:D7:67:D0:10:8A:3F:0E:67:F5:7F:4D:B7:E3:2A
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer: /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial: 445DAB27014FB9136B9BE56F97AFAE7D4F95CDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number: 0235
Signing time: Thu 23 Oct 2025 23:26:23 +0000
Manifest this update: Thu 23 Oct 2025 23:21:23 +0000
Manifest next update: Sat 25 Oct 2025 02:11:23 +0000
Files and hashes: 1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: atigQg3cF6axtuKpY5a1RhPuEZoQBdnSb/DPaWtQwqs=)
2: AS215084.asa (hash: VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5d:ab:27:01:4f:b9:13:6b:9b:e5:6f:97:af:ae:7d:4f:95:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Validity
Not Before: Oct 23 23:21:23 2025 GMT
Not After : Oct 25 02:11:23 2025 GMT
Subject: CN=66BF694F1892D767D0108A3F0E67F57F4DB7E32A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:53:b2:58:27:0f:ae:b7:c8:19:a8:ff:00:
90:a9:34:94:72:73:98:db:50:63:a1:08:f5:f0:98:
32:a2:79:b7:f7:a5:f6:20:43:fa:fe:a3:5c:6a:87:
0e:7a:e7:e0:df:c4:b3:e7:3d:42:8c:41:40:59:0f:
9e:0d:88:d6:c2:7d:33:f0:fb:dc:62:0f:5e:f2:f0:
e4:7b:09:39:4b:1d:97:3a:d2:50:8e:50:dd:41:7f:
64:f8:75:d4:9f:52:63:9c:b4:5b:b4:54:b6:37:79:
9f:ca:d7:c5:e5:5d:22:ff:b9:3c:36:73:85:7e:cc:
59:bc:aa:45:e0:90:81:c2:ed:3c:05:80:f5:31:b8:
23:2e:f9:cb:5b:63:e8:6e:ed:df:3e:a2:4f:06:97:
9b:b5:6e:29:fa:d7:42:59:90:03:cd:98:bb:6e:2c:
d1:f7:60:06:82:d3:4b:1d:c1:87:4b:53:87:a2:92:
ed:5c:a1:a2:ab:52:f1:32:d3:49:ce:83:3d:3e:0b:
26:e0:d6:4a:00:b0:f3:dd:ff:0f:15:aa:73:96:61:
01:1a:ac:a3:f8:f5:4e:e2:e3:08:0f:e9:53:ad:cc:
fa:7b:c5:fa:88:b8:5d:47:f5:f6:65:85:73:93:f4:
88:92:5c:18:8a:c6:ef:55:06:91:e5:05:a3:00:1c:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:69:4F:18:92:D7:67:D0:10:8A:3F:0E:67:F5:7F:4D:B7:E3:2A
X509v3 Authority Key Identifier:
keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c2:ed:76:20:a0:ee:30:8b:a6:4c:34:de:34:ab:df:c6:c1:
12:87:b8:ff:ed:54:f2:9c:d6:c4:bf:8e:83:f2:0c:01:20:80:
f9:25:d8:72:38:e4:7d:67:42:4d:c5:c7:4c:59:a3:dc:9f:ee:
51:b9:8d:ba:51:7b:fe:e2:67:93:a3:5f:93:20:50:8a:49:8c:
38:25:31:3d:44:2d:b0:79:59:bf:9c:2a:f4:33:cc:96:c6:84:
ed:43:63:d3:31:ef:b5:23:47:f1:bb:e3:e5:b8:cb:36:50:f6:
34:ea:26:45:bc:3e:64:f8:cd:c6:15:3d:30:8c:0f:7e:08:ee:
03:2b:f8:01:56:79:65:22:81:9c:68:74:eb:5e:76:58:9a:42:
cb:6f:e9:78:ab:4c:5d:28:89:0c:10:86:ca:b7:93:11:9c:e4:
a4:04:b0:de:8a:f3:1d:bb:e9:f6:8d:c8:92:17:87:b1:02:c8:
49:dd:99:99:b7:24:d7:66:86:02:b4:39:6d:c1:0b:fa:5c:0a:
fd:85:9a:6c:3c:d4:6d:70:9c:e5:f6:b7:ba:66:e9:b9:50:a5:
30:de:9f:7e:7c:e9:d3:d4:87:28:f7:d1:13:32:f8:2e:98:14:
0f:50:19:26:b7:76:e1:33:be:43:d6:66:c3:30:46:fc:cb:5d:
b3:d4:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:03 2025 by rpki-client