
Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File: B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier: XVdfzBtYJzK2mOBxKWZa/CmMmK2C91CIybFKmiRxWUc=
Subject key identifier: 02:60:F5:DA:94:FF:39:3D:6B:6D:04:1B:D2:9A:66:D4:D2:46:04:31
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer: /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial: 3BC0B4EF9B9073E18DD4FE75F5031B6DF226F7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number: 0222
Signing time: Tue 19 Aug 2025 23:18:42 +0000
Manifest this update: Tue 19 Aug 2025 23:13:39 +0000
Manifest next update: Thu 21 Aug 2025 00:13:39 +0000
Files and hashes: 1: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (hash: W5LOE2UccwfvH+iw7FgcRMdLyrWt/Q18gyV5smhnXpM=)
2: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: JYE5gmjqYLWkPjo/FTgJV+JihCP29CuEwEkRha0ZWfw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c0:b4:ef:9b:90:73:e1:8d:d4:fe:75:f5:03:1b:6d:f2:26:f7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
Validity
Not Before: Aug 19 23:13:39 2025 GMT
Not After : Aug 21 00:13:39 2025 GMT
Subject: CN=0260F5DA94FF393D6B6D041BD29A66D4D2460431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:a7:09:97:8b:e5:4c:53:b1:1f:d0:dd:65:
da:6d:4d:c9:38:90:20:6a:02:f6:a7:3f:b4:48:3e:
01:3a:2e:d7:11:04:6e:79:0b:3a:7b:bf:70:53:a3:
cd:b7:98:48:67:a0:a2:f5:c7:75:5f:5e:df:cd:2f:
ec:71:37:6d:53:ca:be:cb:19:09:9b:c5:23:ec:cb:
65:0e:93:1e:f7:c8:31:aa:d8:17:39:e4:cf:5b:75:
25:da:bf:5e:9b:3d:dd:9a:41:25:8b:f1:da:c8:64:
3c:d6:5d:16:b4:07:88:89:1c:d5:b1:18:db:5f:c9:
1a:3e:8c:ef:6e:fd:c7:5b:4e:37:78:6c:03:f1:fa:
41:3e:4a:01:3c:06:e7:08:47:a3:49:2f:b8:e2:68:
b2:8a:35:a4:4d:c9:26:2a:fd:9c:56:fd:27:8a:e0:
93:eb:cf:a4:71:6e:72:2b:01:81:66:b4:d2:b4:68:
b5:59:0a:26:75:95:93:72:86:fe:7f:59:be:f0:66:
74:c2:5d:1a:8a:9e:60:57:42:61:f4:7e:63:d0:92:
3f:a8:4e:94:34:ac:b7:b9:9c:83:6a:57:80:f4:c8:
6c:e6:12:f3:fa:e0:e1:34:a7:70:b3:4b:7c:e1:3d:
b7:5f:b2:68:d2:f1:90:24:90:e3:b3:4d:da:58:4d:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:F5:DA:94:FF:39:3D:6B:6D:04:1B:D2:9A:66:D4:D2:46:04:31
X509v3 Authority Key Identifier:
keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c8:19:4d:b9:ce:ad:89:d2:40:f9:37:16:29:6f:43:48:30:
42:e1:41:30:74:31:33:67:00:43:58:57:b3:15:4b:d0:ff:f5:
93:15:fb:4c:7c:83:b0:6a:54:b2:e6:63:8a:f7:39:1a:00:c3:
6e:8d:1d:d3:aa:5c:06:6b:8e:c2:07:4f:c4:df:9f:90:f6:1b:
21:e1:08:54:23:5a:d6:22:78:22:46:1c:32:f0:fd:2e:dc:82:
b3:84:c5:de:a8:cf:d1:56:a4:a5:fd:50:0f:9e:30:14:f8:c4:
77:09:a1:a7:54:3c:b2:27:b2:af:d7:64:63:f7:d5:62:75:dc:
08:ee:7a:be:55:05:e8:a0:6b:63:61:f8:15:33:98:7c:f9:46:
6a:66:e9:4d:00:85:1c:2a:bd:ec:cb:45:38:ce:72:42:d7:1e:
22:ca:22:6b:0d:e6:d5:0c:5d:f0:6f:58:cf:a1:be:6c:27:f4:
e2:1a:80:0e:c7:d4:e3:a5:4b:5a:71:1c:9f:49:7b:6f:ba:53:
cf:1e:b6:fc:22:d0:20:05:a0:c7:bb:ee:f6:f6:05:c8:b0:b1:
87:c6:f6:70:68:57:01:b1:ac:a3:9a:28:a9:02:a7:9f:0c:cf:
59:8a:9d:af:49:9f:3e:78:bc:0f:81:32:19:7c:bc:cb:45:bf:
04:74:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:34 2025 by rpki-client