Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier: BcUBE7nyEF9pcuTEO6KDGu9rT9WvOdcRX832bTuQQ6k=
Subject key identifier: 18:28:8A:5C:39:BA:B0:8B:78:DF:27:DD:6F:09:28:10:C1:11:F1:74
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer: /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial: 410E55130651AF8B6850A9964DB56EC4729C81F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number: 05F3
Signing time: Mon 20 Jul 2026 03:26:24 +0000
Manifest this update: Mon 20 Jul 2026 03:21:24 +0000
Manifest next update: Tue 21 Jul 2026 05:40:24 +0000
Files and hashes: 1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: kQigKmI/a7ovAsOS0tEY4Y90qlFXHv44cRih1LgaBmQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0e:55:13:06:51:af:8b:68:50:a9:96:4d:b5:6e:c4:72:9c:81:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Validity
Not Before: Jul 20 03:21:24 2026 GMT
Not After : Jul 21 05:40:24 2026 GMT
Subject: CN=18288A5C39BAB08B78DF27DD6F092810C111F174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:78:8f:4b:dd:15:a3:87:f8:66:4d:18:e9:
6c:9a:f3:6c:49:61:ef:80:fe:a2:09:4c:0d:fd:11:
b4:31:0a:cc:2e:67:7d:1e:26:fe:78:c2:37:07:b7:
33:60:71:af:16:4b:f2:e8:52:3a:23:6d:f5:68:6e:
29:94:b2:68:16:2b:29:48:57:53:c0:f6:95:e5:6f:
88:3e:8a:78:3f:22:d6:e0:f8:ce:0f:c5:1a:b6:bc:
f3:f2:62:b4:32:df:93:40:8b:d2:47:09:ed:d5:57:
ca:91:ad:f4:35:98:d3:23:04:2c:35:ea:e2:47:9c:
20:07:b0:91:11:54:f8:91:9e:f0:22:60:c6:2b:4d:
d2:eb:42:f4:2a:88:46:5d:d9:60:1a:06:02:99:09:
9b:bd:b6:60:6f:69:00:05:71:b2:2e:8c:a1:b1:6e:
12:6a:99:f6:0e:a5:c4:af:60:3b:b7:f0:10:ad:43:
f0:db:5d:a2:18:22:ae:d0:ea:99:ed:5d:78:4d:7f:
0b:d5:b0:c0:7a:0f:39:55:31:31:c0:e2:cc:d2:fd:
47:1e:79:88:e7:16:32:d4:97:4e:8f:8c:e1:06:7e:
17:bd:77:d9:71:a0:ed:6b:24:72:cd:81:00:94:ac:
93:03:b9:b5:75:73:23:73:9b:2d:3b:59:bf:3e:8a:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:28:8A:5C:39:BA:B0:8B:78:DF:27:DD:6F:09:28:10:C1:11:F1:74
X509v3 Authority Key Identifier:
keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b2:bc:a0:8f:cc:e8:78:86:27:0e:8a:05:e4:8b:e4:c2:39:
83:01:25:91:0c:91:5b:33:b7:57:ef:ad:9a:f5:33:7f:15:a1:
4b:6f:ae:47:b1:3e:a8:a4:26:dd:ed:fd:40:4e:f0:97:39:e2:
fc:98:c4:dd:2d:f1:0b:c2:5c:ff:91:1c:33:e6:e2:48:bc:35:
04:11:c7:00:ef:db:03:a2:d7:5a:4f:e1:33:e0:0b:28:38:e1:
f6:d8:81:5b:88:e2:e6:cc:5f:72:ef:37:d4:38:12:22:1a:62:
40:5a:0f:e1:45:f4:8b:3b:57:15:f3:27:6e:b7:dc:10:2d:dc:
95:57:cf:86:67:be:18:ae:9b:6b:4a:c8:05:5d:fa:0e:19:03:
e1:c6:e2:da:67:15:73:95:3a:d5:62:e9:ac:e6:48:90:7a:a9:
77:03:81:48:8a:73:2b:7c:57:97:e0:41:55:2b:bf:de:73:10:
50:fd:01:22:e6:41:5c:01:53:78:de:77:5a:57:9c:fb:92:f4:
3a:c7:1f:3b:a4:02:bc:6e:0f:63:1a:29:ba:c9:9f:a9:41:e7:
fb:8f:b5:29:e9:4b:3e:c1:bc:7f:1d:6a:da:b3:eb:8c:4e:c4:
7b:ac:67:7b:b7:f2:e1:f6:db:c7:15:c5:56:d5:78:22:04:d2:
bd:d0:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:12 2026 by rpki-client