Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier: 4TtkoMO83ucKmLGsrcrPxLGmPVi4VO0luYt7clzsvqo=
Subject key identifier: A5:D3:11:5D:A2:67:8F:17:D2:71:0E:16:ED:DD:F0:FF:51:22:0E:52
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer: /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial: 21EF44C055DEE9C0CE39325E0C1E9D094624F16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number: 021F
Signing time: Tue 19 Aug 2025 21:47:52 +0000
Manifest this update: Tue 19 Aug 2025 21:42:49 +0000
Manifest next update: Wed 20 Aug 2025 23:49:49 +0000
Files and hashes: 1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: 7e9MRje7y+EUYoIvdZKTKcmskxun+1Ky3y7e07rEjyg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ef:44:c0:55:de:e9:c0:ce:39:32:5e:0c:1e:9d:09:46:24:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Validity
Not Before: Aug 19 21:42:49 2025 GMT
Not After : Aug 20 23:49:49 2025 GMT
Subject: CN=A5D3115DA2678F17D2710E16EDDDF0FF51220E52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:e1:a3:3e:cd:96:80:fd:df:58:15:dc:92:
45:1f:d7:30:3c:01:50:13:31:99:d7:33:49:22:d9:
49:a7:7a:93:d5:8a:67:3d:66:d7:06:79:cc:ca:3a:
2f:52:3e:a7:25:86:60:ea:ed:b4:03:b1:7c:69:dc:
90:2c:32:d3:82:d8:72:eb:1f:e2:67:4e:a6:6b:95:
0c:21:d9:f9:d5:08:97:bb:9e:58:36:7d:87:9d:8c:
e5:94:96:ac:4d:99:06:5e:53:58:47:99:81:e9:24:
80:21:d7:59:76:46:61:67:9e:35:46:f6:85:c3:23:
da:e1:25:dd:02:ab:be:87:fb:c5:e4:a5:e2:30:d5:
9e:1b:da:b8:45:21:aa:bf:fa:7f:8e:74:aa:db:e5:
df:95:02:10:d1:60:f7:78:4d:75:73:96:bb:fa:7e:
20:3d:77:03:06:57:70:2d:32:26:05:c8:1a:4c:f5:
95:7c:34:d6:b6:01:45:8c:5b:64:e0:b9:44:77:53:
10:60:2f:f2:c5:a0:2c:0f:89:8e:09:68:c8:15:df:
41:64:b5:f7:77:6c:17:7b:26:aa:8e:65:f9:62:b4:
ba:4f:f0:eb:5f:06:43:87:43:26:b0:a1:7c:59:19:
63:1c:e5:27:19:3c:3f:0b:a4:c5:39:d8:86:cc:e1:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:11:5D:A2:67:8F:17:D2:71:0E:16:ED:DD:F0:FF:51:22:0E:52
X509v3 Authority Key Identifier:
keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cc:69:41:3a:16:91:5e:f8:fd:85:93:7b:e0:5b:d3:b8:5d:
4e:94:c8:58:35:be:a4:09:45:ea:30:09:c6:44:30:3a:49:7d:
32:8f:cd:29:c8:77:fc:88:24:48:6e:63:ae:34:8c:17:70:c3:
d3:a4:a5:0a:7f:cc:5c:1b:b0:80:d9:09:1d:f0:db:92:df:89:
e3:d9:91:83:a2:96:c3:28:f3:03:ed:de:55:51:f6:8c:f2:c0:
61:6e:58:b1:7d:2e:35:cb:05:7c:d9:29:10:ff:51:3c:9a:51:
f7:fc:97:12:8d:dc:4e:5c:cc:a3:85:fe:d3:7b:91:cc:96:92:
96:2c:ab:20:bc:7c:82:82:02:54:29:08:3d:eb:44:d7:e7:ce:
64:1e:a7:c5:ed:59:c8:f0:23:42:74:ba:03:bc:f4:ad:62:57:
dd:a9:ab:a6:ce:c7:49:fa:ee:2b:f1:47:ea:fb:7c:c9:01:d1:
2d:26:1f:56:41:b5:5f:94:f0:93:05:00:b7:ec:30:d4:0d:0b:
a7:fa:8b:ad:67:16:98:e4:d8:4f:f3:54:96:49:38:ce:99:f4:
7a:e2:f0:f6:1c:95:49:72:6f:0b:47:a6:3e:a9:e0:73:b5:3a:
23:e8:38:57:16:0f:c8:b5:0f:e1:85:79:04:c7:d5:f7:4f:fb:
88:19:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:39 2025 by rpki-client