Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
File: 35ACA6262E13FCF885902051522BBE65379AE61D.mft (raw, json)
Hash identifier: d6HI5NCHMSM5c2d3gTWB4UlgCudEfeSQdCOQZzYl42E=
Subject key identifier: 36:F4:1D:95:37:91:63:14:C6:4E:95:70:FE:5E:E1:FA:0B:49:FC:CB
Authority key identifier: 35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
Certificate issuer: /CN=35aca6262e13fcf885902051522bbe65379ae61d
Certificate serial: 237C0F981DD8562A387666F22CFFDED98B0E2C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
Manifest number: 94
Signing time: Fri 01 Aug 2025 01:56:37 +0000
Manifest this update: Fri 01 Aug 2025 01:51:37 +0000
Manifest next update: Sat 02 Aug 2025 05:28:37 +0000
Files and hashes: 1: 35ACA6262E13FCF885902051522BBE65379AE61D.crl (hash: DzqXWz4KuZDn2dklYBGD1Wmofa9ciA5YPOpkB8RGtlg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7c:0f:98:1d:d8:56:2a:38:76:66:f2:2c:ff:de:d9:8b:0e:2c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35aca6262e13fcf885902051522bbe65379ae61d
Validity
Not Before: Aug 1 01:51:37 2025 GMT
Not After : Aug 2 05:28:37 2025 GMT
Subject: CN=36F41D9537916314C64E9570FE5EE1FA0B49FCCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:1c:5f:01:72:86:9f:8e:94:2f:89:c3:31:
76:0c:9f:91:6b:12:a2:87:76:1e:cb:81:9a:94:22:
c1:1f:76:1e:39:c5:da:52:3f:15:14:f6:f8:54:4e:
fa:f4:39:bd:a5:87:05:b0:9e:33:1a:36:f2:07:11:
a0:52:a1:ec:f0:c5:3a:b2:58:d2:e4:66:6e:f7:d9:
c0:c4:3c:6d:2e:70:04:96:96:af:38:4a:2e:ed:c8:
40:19:53:e3:8f:b6:05:61:a9:5b:6c:73:b7:bd:9a:
7b:5b:d4:4b:a1:3b:1b:9a:15:b0:aa:96:e6:64:ab:
76:67:d7:49:ef:46:ca:16:09:a1:90:ae:e1:3a:fd:
bb:3a:32:46:4e:8d:2e:f3:69:96:23:e8:39:c9:da:
4d:52:89:0e:05:a1:c7:c8:af:3e:ff:00:80:54:70:
b2:87:0e:b5:cb:d4:cc:10:fe:29:55:1d:e1:27:2b:
30:c5:4a:e3:62:4a:05:c2:34:b8:da:f2:59:1e:9d:
50:23:44:c0:e2:bd:4c:40:06:eb:9d:16:ed:72:27:
9d:f7:d4:e7:56:dd:be:0d:86:73:27:1e:44:ff:3e:
43:26:39:6f:13:41:4b:5d:7f:a2:bc:34:f7:9d:ea:
23:25:42:a0:60:17:40:55:33:e6:ab:8c:e2:f1:dd:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:1D:95:37:91:63:14:C6:4E:95:70:FE:5E:E1:FA:0B:49:FC:CB
X509v3 Authority Key Identifier:
keyid:35:AC:A6:26:2E:13:FC:F8:85:90:20:51:52:2B:BE:65:37:9A:E6:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaymJi4T_PiFkCBRUiu-ZTea5h0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/0/35ACA6262E13FCF885902051522BBE65379AE61D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:67:df:8e:86:9b:cd:a4:c7:8d:e0:5c:cb:42:bb:d5:a0:6c:
07:fd:d9:0b:c9:6f:f7:4a:1f:d7:7e:d8:0c:35:ae:65:47:0d:
a2:8a:9e:4b:ab:09:7f:41:e4:ff:db:72:d3:76:31:f5:77:fe:
ff:21:18:62:5d:de:9b:54:88:37:db:09:32:ed:7e:f8:34:6f:
97:d1:ef:7e:ae:fd:90:b2:c3:08:73:44:83:46:fb:34:af:99:
05:51:57:55:38:55:f7:aa:4a:7e:ce:fa:75:9c:f2:a3:d0:e8:
96:e9:dc:97:36:96:68:74:d6:64:f1:42:a5:f4:53:72:50:42:
db:7f:4a:9a:e2:ec:25:11:83:11:4e:52:b6:4f:30:02:cf:63:
d4:8b:a8:ed:c0:98:fd:00:13:38:93:7e:74:d1:f2:1c:4b:e7:
ba:6a:6f:a8:73:6d:6b:56:dd:f2:0b:97:3a:e2:9c:18:0e:dc:
20:a4:e5:7d:d6:f8:ff:90:49:85:2b:b0:1c:ee:ee:c8:b5:c1:
6d:c8:51:cb:2f:af:3f:ad:78:4c:46:e3:91:5c:3e:df:d7:c7:
0c:af:a6:dc:8f:bc:7b:f0:c5:8a:6f:fb:53:24:f3:7d:5e:ef:
26:38:6e:35:c1:c1:cb:9b:e1:85:15:14:9a:2e:5b:9d:18:96:
89:63:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:44 2025 by rpki-client