Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
File: FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft (raw, json)
Hash identifier: HcvP4Gbzo7yIsjpxeH62/agviLmEYc5OlDZg9m2ePuA=
Subject key identifier: E7:0F:36:26:17:01:A9:58:90:35:21:D9:C9:D1:49:45:1F:7E:5A:37
Authority key identifier: FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
Certificate issuer: /CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Certificate serial: 545B22C5A22C2F7C1020696328C8FF5B2F7E459D
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
Manifest number: 03
Signing time: Mon 26 May 2025 01:37:47 +0000
Manifest this update: Mon 26 May 2025 01:32:47 +0000
Manifest next update: Tue 27 May 2025 03:02:47 +0000
Files and hashes: 1: 326130613a363034343a626336363a3a2f34382d3634203d3e20313939373633.roa (hash: a/78n91+DY7jAyd+Ajw1PEOkFA3mBhqcmL02KyOP9qE=)
2: FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl (hash: Lzq64yIv1y+3Vr2wRSOQ/mCndMA+oHq0hYZY7i/4DN8=)
3: 326130613a363034343a626366663a3a2f34382d3634203d3e20313939373633.roa (hash: 5ff9So6R+4JwgBaznVT50fWcxXl/IM1ZqlDezEJNdUI=)
4: 326130613a363034343a626336383a3a2f34382d3634203d3e20313939373633.roa (hash: eTFrY7xqIUaJE3xy0dLYyXkZTEmWIDmEdlG91gFSl1g=)
5: 326130613a363034343a626330313a3a2f34382d3634203d3e20313939373633.roa (hash: Z+cJH8xenDt3NANTGcMN89CIkYPcp1Jitr3GDCmS4n4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5b:22:c5:a2:2c:2f:7c:10:20:69:63:28:c8:ff:5b:2f:7e:45:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBB1A565920DA754D7062D7A1B5CAE8FF5D93266
Validity
Not Before: May 26 01:32:47 2025 GMT
Not After : May 27 03:02:47 2025 GMT
Subject: CN=E70F36261701A958903521D9C9D149451F7E5A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:57:41:ce:f7:b9:fa:8f:3b:1f:e1:35:2b:
91:ff:4a:50:84:4f:02:bb:78:cd:95:b0:14:b7:16:
c1:dc:a5:c0:e7:56:52:1c:8b:05:ed:f3:0f:bd:9b:
e6:3f:57:fe:02:5b:57:c9:7e:7f:02:31:ac:a4:a8:
ba:6e:6e:f5:ab:12:c9:8b:de:b2:e0:a5:3c:6b:9e:
95:e3:0d:1e:b3:ad:cf:e9:aa:bf:c1:1f:1f:3d:48:
66:fc:5f:3d:78:3b:72:bf:f4:a5:05:4c:86:a2:ef:
72:a2:00:3a:44:dc:e8:8e:e7:e8:9a:2c:bf:aa:92:
94:3f:9d:ed:02:d4:c1:81:df:05:ce:8a:24:b5:97:
84:4f:52:a9:03:4a:e9:fa:58:0b:53:86:a7:78:3a:
59:d0:30:6a:db:6a:73:19:d0:b9:78:7d:25:76:f7:
2c:0c:60:91:12:7b:fc:de:d0:d0:6f:1f:9b:41:6f:
f2:9b:13:03:3d:1c:a3:ac:5d:62:d0:4e:50:a7:a0:
a3:39:8a:18:fb:15:df:d3:ea:a2:f9:8d:aa:24:1e:
7c:8d:c9:53:d2:d5:35:a7:c3:8b:92:22:30:1e:c3:
bc:61:17:58:a8:7c:f8:73:cd:5c:2f:ca:83:f9:3a:
51:6b:ba:47:44:dc:f8:4f:dc:35:0e:05:3d:3e:8d:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0F:36:26:17:01:A9:58:90:35:21:D9:C9:D1:49:45:1F:7E:5A:37
X509v3 Authority Key Identifier:
keyid:FB:B1:A5:65:92:0D:A7:54:D7:06:2D:7A:1B:5C:AE:8F:F5:D9:32:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bba960ff-5f2f-404e-8726-7b4fac89df65/1/FBB1A565920DA754D7062D7A1B5CAE8FF5D93266.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:79:aa:41:3a:c6:a9:25:0c:95:88:72:b2:be:7d:a6:b0:70:
7f:d1:52:f5:63:b5:b9:27:b8:01:cf:fe:34:f1:25:2b:33:ad:
26:c8:2a:9c:cc:f8:39:4e:98:0e:18:f8:3d:73:31:c5:39:fa:
49:3a:0b:35:93:03:f2:07:e5:12:e1:b8:af:4d:11:c9:4a:49:
a6:e4:96:a8:15:cc:54:6f:bb:20:84:b4:69:f6:4b:d1:18:03:
f5:33:42:a1:f3:d7:e2:37:77:7b:d5:85:72:e8:d8:9c:50:cd:
42:39:15:82:35:e6:4a:71:06:56:38:c1:43:6e:b8:ed:35:2a:
83:91:a4:55:a5:6a:30:34:31:d6:c0:b8:50:7f:4d:96:36:17:
fe:3b:11:9d:7e:d2:36:dd:08:77:fe:a5:37:c7:57:fd:47:8f:
06:1a:4c:49:a8:86:2a:9a:41:66:f6:a5:91:6a:00:1c:d5:42:
d6:b4:0f:c6:c0:47:54:69:f1:08:96:66:a5:9d:a5:df:38:6c:
74:76:0f:f1:e4:8d:f9:c5:f9:f1:48:fb:ab:26:0d:43:66:b5:
1a:37:7d:15:46:4d:00:72:6a:67:c0:2b:b3:9d:aa:85:08:fa:
7b:fa:01:e5:91:d4:77:dc:9a:a5:23:5e:7a:bf:89:f5:1c:58:
a8:4b:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:42:12 2025 by rpki-client