Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft
File: 1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft (raw, json)
Hash identifier: 9M66xSs0UAA6RHekeCvq71T3+7m8lB1cSE3oAch79e4=
Subject key identifier: BA:4B:F0:9D:C1:69:37:9E:8F:A8:7B:5B:C0:82:6B:1E:C6:09:C5:95
Authority key identifier: 1E:A8:D2:35:74:79:5B:2B:5C:AB:05:EE:44:BA:34:B5:D2:FA:5E:63
Certificate issuer: /CN=1ea8d23574795b2b5cab05ee44ba34b5d2fa5e63
Certificate serial: 2D8BA0F7B4841E2C53C2D2E17513FC9C41212AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqjSNXR5WytcqwXuRLo0tdL6XmM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft
Manifest number: 73
Signing time: Fri 04 Apr 2025 05:41:52 +0000
Manifest this update: Fri 04 Apr 2025 05:36:52 +0000
Manifest next update: Sat 05 Apr 2025 09:25:52 +0000
Files and hashes: 1: 1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.crl (hash: 5AI4RmXNdn4HWdGPOS8UkonGLbY2r6I9s+EFJXpPsDA=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8b:a0:f7:b4:84:1e:2c:53:c2:d2:e1:75:13:fc:9c:41:21:2a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea8d23574795b2b5cab05ee44ba34b5d2fa5e63
Validity
Not Before: Apr 4 05:36:52 2025 GMT
Not After : Apr 5 09:25:52 2025 GMT
Subject: CN=BA4BF09DC169379E8FA87B5BC0826B1EC609C595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:80:21:44:60:91:94:8c:1e:31:4a:b7:80:
85:b7:6e:c8:a7:f3:99:a0:c0:34:77:c7:69:a2:1f:
d6:20:3d:7e:ca:09:b9:c2:ba:13:06:8d:5b:7e:89:
2a:35:04:dd:9c:6e:7d:5e:8e:69:d7:83:a3:6f:8a:
bc:99:c2:f8:7d:6c:03:00:d9:e6:12:e2:4d:a8:5a:
12:cc:45:9f:02:7b:1a:4c:8f:48:e4:55:91:d0:79:
9a:86:95:81:3f:30:f9:05:84:eb:76:d5:ee:bc:50:
9e:cb:02:29:b8:e0:55:8c:89:8d:fa:bb:8d:09:92:
b2:88:2f:1d:a2:0a:6b:7f:a8:5c:3e:e4:b5:ea:1d:
76:e5:9b:d8:af:a7:81:f4:bb:fc:f3:b2:c5:30:de:
99:98:94:61:1d:ce:08:59:60:05:e6:ef:d6:ea:fc:
55:25:ae:6e:cd:d7:88:1f:ea:e4:58:87:bf:1f:a9:
db:f9:7d:f6:f6:c8:2f:ef:1d:91:08:ac:36:cf:40:
f2:55:0a:d7:f5:40:43:f7:04:35:c7:88:78:19:7c:
99:88:f9:17:cf:f4:61:c3:8c:f7:4a:51:84:53:27:
a7:2a:25:16:d2:e2:bd:16:cc:4d:da:ab:1e:ad:a3:
42:ef:21:86:9b:7b:27:19:b2:b0:57:bb:9d:19:23:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:F0:9D:C1:69:37:9E:8F:A8:7B:5B:C0:82:6B:1E:C6:09:C5:95
X509v3 Authority Key Identifier:
keyid:1E:A8:D2:35:74:79:5B:2B:5C:AB:05:EE:44:BA:34:B5:D2:FA:5E:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqjSNXR5WytcqwXuRLo0tdL6XmM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e92ebc83-d76c-4ae2-84eb-e6bff3d342b1/0/1EA8D23574795B2B5CAB05EE44BA34B5D2FA5E63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9a:39:0f:37:28:58:bb:d5:d5:5e:49:d2:2b:ca:40:73:e0:
91:e8:ea:21:39:55:f7:e0:b5:80:66:06:45:40:0f:70:a5:7b:
ab:40:d1:76:6a:d7:cd:c4:eb:76:5c:93:bc:5d:60:ea:61:1d:
ba:54:83:a7:a8:ff:41:d9:e8:91:90:01:00:c8:b1:b6:1f:ba:
df:d6:09:cc:35:ee:38:dc:61:99:b6:71:95:e8:3b:20:2b:ec:
f6:70:2f:7a:73:3a:c2:30:59:66:f4:87:89:cc:fa:d2:0e:49:
6c:36:6f:8a:e6:9f:3a:2d:df:45:42:b7:93:ac:76:59:7b:88:
98:ba:d0:1f:14:10:01:63:72:62:4e:8b:9b:07:72:2b:5c:18:
de:ca:0d:3f:01:01:2f:05:8e:42:3e:5c:f7:c1:f6:f2:3a:89:
b4:b8:89:16:46:68:38:d4:40:6f:84:53:47:79:84:35:01:2d:
12:df:e4:bf:db:e8:2d:00:c5:27:f9:f2:22:7c:c1:f5:09:b9:
ac:a9:cf:c8:b8:91:23:1b:b7:02:1a:36:ac:38:5e:4e:bb:a5:
c2:ec:d8:51:42:7d:8e:5b:49:a6:87:bc:09:95:76:ea:b4:9a:
56:20:bf:ec:5e:98:fb:73:87:f0:75:6e:a8:ee:85:d8:2f:eb:
6a:ba:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:23 2025 by rpki-client