Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
File: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft (raw, json)
Hash identifier: BAEvnUvYop6U/Wr59bh+rdqVeW4ZqPAYU1rHSOGpTPM=
Subject key identifier: 6D:98:AD:AB:50:05:DD:EB:C0:6C:3A:D0:1E:3C:61:8F:5B:8B:73:E1
Authority key identifier: 2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
Certificate issuer: /CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Certificate serial: 6E1ABAC9BDF85D277816A6EF1FAEEF9A8C8FDE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
Manifest number: 5B
Signing time: Sat 17 May 2025 11:01:08 +0000
Manifest this update: Sat 17 May 2025 10:56:08 +0000
Manifest next update: Sun 18 May 2025 13:11:08 +0000
Files and hashes: 1: AS214757.asa (hash: l0Y+CPb9AOgowGXfzD29IiYtbowgVgdv2PTL+8Uiexk=)
2: 2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl (hash: q2b0Pc3SXc2SBW+bMmN53jXJHtIePDHkDd73oqqvkK8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:1a:ba:c9:bd:f8:5d:27:78:16:a6:ef:1f:ae:ef:9a:8c:8f:de:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Validity
Not Before: May 17 10:56:08 2025 GMT
Not After : May 18 13:11:08 2025 GMT
Subject: CN=6D98ADAB5005DDEBC06C3AD01E3C618F5B8B73E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:f8:07:31:4b:d7:87:63:51:78:a1:3c:6b:
0c:d5:6f:ee:c1:c8:4c:31:01:5f:4e:1f:ca:e4:e7:
a3:4d:09:0b:71:7f:7c:0e:e8:9e:df:9f:03:63:b5:
02:f8:74:a2:aa:c1:e9:c2:92:85:9b:d1:4e:4b:70:
e7:36:bf:7a:ce:16:a3:63:2a:d3:f7:a2:0b:33:7f:
11:30:83:55:77:40:1c:52:0b:d8:af:81:00:20:59:
cc:2d:8e:68:2c:75:1c:8e:1e:24:16:1a:3a:57:06:
9e:98:82:ed:69:37:c1:b4:5f:e0:a2:3c:d7:3b:6c:
91:5e:67:e5:59:6c:7a:23:32:36:04:84:82:9b:9b:
83:19:c2:15:17:7b:ea:2d:f1:1a:97:96:f1:ec:c3:
d8:e0:fb:6b:e2:53:c7:8d:3c:3a:86:35:68:e0:06:
aa:70:84:dd:1f:ea:d0:24:39:28:db:ba:8d:13:89:
91:f9:94:62:22:e3:77:e8:e1:8c:e1:f2:35:1e:2d:
8c:75:3d:55:aa:77:9b:b8:95:d6:0b:b9:93:ff:52:
db:fe:bf:82:82:81:d6:ac:63:4b:b8:93:c2:3d:44:
4c:45:95:eb:21:68:12:26:4b:67:0e:29:ba:ea:88:
75:eb:18:16:53:2a:da:ba:c5:12:67:4a:82:ef:23:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:AD:AB:50:05:DD:EB:C0:6C:3A:D0:1E:3C:61:8F:5B:8B:73:E1
X509v3 Authority Key Identifier:
keyid:2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:60:f5:72:55:36:2a:f0:a0:5a:8d:94:e3:5d:e3:c9:ca:fe:
f4:9e:06:5f:82:46:c6:5d:67:2c:9e:c3:8c:6e:c1:60:38:54:
05:cf:8d:c9:d0:8d:75:76:7f:18:2d:29:ca:79:5d:37:39:27:
bf:51:3f:69:27:67:f9:83:a7:b7:61:73:59:fe:5a:39:c2:e4:
04:dd:7d:2a:b5:b4:b9:ec:62:86:8b:45:4e:f9:99:33:56:c0:
6d:05:61:ba:da:1a:88:c5:7a:1a:bd:2e:b3:e5:70:90:e0:ca:
92:41:b3:aa:3a:6e:4a:11:3a:86:9a:d7:21:a9:ef:13:9d:6a:
7b:d0:54:b8:79:fe:88:55:c6:f8:b9:b5:69:d9:10:d3:24:b7:
e4:5d:9c:ff:cd:ce:10:ad:f6:af:55:c6:7e:6a:29:c4:77:bc:
57:1b:bd:9f:0c:be:f8:cc:a0:14:65:84:e0:03:a0:35:8e:18:
28:6d:8c:d6:b2:8f:78:a9:82:48:25:7b:55:eb:aa:4b:c0:5d:
27:41:69:83:59:37:2e:4b:22:bb:e0:87:05:cf:bc:ee:9f:26:
5d:4a:86:41:bc:44:c7:06:ae:81:9b:60:1c:83:9d:80:d1:8d:
07:5d:74:b0:e6:85:3e:e1:2b:6e:ec:4e:e2:d4:82:f0:6c:79:
b3:21:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:16 2025 by rpki-client