Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: XXhrdrp08hJ8kXXDrKkIZKnycVydJaxf9k/cUYw0Rb0=
Subject key identifier: 85:8D:3E:B7:54:88:26:FC:ED:AB:62:13:58:6A:D6:DB:B4:38:33:D0
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 36E35E2C3F579ED060B86BE2164571EFD6D9C845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: E5
Signing time: Sun 28 Sep 2025 15:40:22 +0000
Manifest this update: Sun 28 Sep 2025 15:35:22 +0000
Manifest next update: Mon 29 Sep 2025 16:40:22 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: tYDTj4tQc8J6QLLLb+1kE00WtAHfZD36phhaWnKPiXw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e3:5e:2c:3f:57:9e:d0:60:b8:6b:e2:16:45:71:ef:d6:d9:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Sep 28 15:35:22 2025 GMT
Not After : Sep 29 16:40:22 2025 GMT
Subject: CN=858D3EB7548826FCEDAB6213586AD6DBB43833D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:99:f8:c0:f5:6e:60:b2:da:0a:6a:37:a6:
9d:b5:34:e4:fd:de:a4:28:02:59:13:fc:c2:25:66:
bf:d9:a6:1c:8c:b3:62:97:f6:bf:e6:41:09:64:68:
c7:3c:2a:43:b1:4c:f0:38:93:ae:35:52:61:7a:bc:
b5:ac:7d:cf:35:a8:38:a4:62:0f:63:45:bf:6c:5a:
4d:af:c4:ac:ef:c8:22:c6:36:d0:f5:6f:d6:72:14:
05:78:20:e9:3c:bc:46:3d:cf:44:8b:f9:7e:ae:b0:
7c:56:83:15:cb:d7:0c:0b:9e:0b:1e:d9:5e:6a:e9:
dd:5e:c2:3b:a1:91:2f:10:4f:a3:57:41:dd:ff:3f:
6a:60:83:f6:6d:0c:ba:12:c0:7b:99:58:34:e4:ad:
7b:bb:27:75:b1:58:7d:3d:2b:20:d2:99:12:6e:25:
4f:ee:8a:36:32:82:1e:aa:5e:75:15:ea:77:d3:23:
ce:48:0d:1c:5d:e9:ea:0f:74:73:a4:c9:7e:6e:5c:
9f:3f:c7:08:a5:64:9a:b3:76:21:59:27:34:1b:70:
66:9b:0c:5a:96:d2:68:15:12:68:c8:da:ee:ad:2c:
f7:62:c1:0c:79:d7:09:81:f5:06:eb:b7:35:f7:47:
40:bc:9d:79:f9:5f:67:39:ea:82:0c:ad:97:c9:ce:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8D:3E:B7:54:88:26:FC:ED:AB:62:13:58:6A:D6:DB:B4:38:33:D0
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a6:d0:77:f7:f3:bb:88:46:ab:69:b8:32:0c:e2:e9:ca:6c:
bf:10:82:c9:11:c6:ac:15:ff:12:c0:c5:bf:0a:3c:f6:8c:05:
a7:b8:53:44:bf:78:35:7c:22:f5:ad:d7:d8:b2:73:54:b4:85:
a5:77:1f:50:60:c3:7e:8a:16:84:46:70:6d:79:6d:88:da:3d:
b5:08:cf:b9:0d:fe:06:9b:38:ca:30:21:96:4d:dd:35:68:c9:
66:39:0a:f7:32:da:98:0f:da:04:4f:2c:19:75:79:28:d7:d8:
19:d5:e6:cf:9e:62:fe:36:9c:61:e8:73:76:94:93:24:ef:0d:
70:4e:3a:3e:52:cd:67:4e:94:39:f3:03:f9:7a:64:f3:e6:b7:
93:bb:18:ea:6a:bd:b1:91:f2:7d:98:2d:f7:92:f8:33:66:a3:
f6:f8:3c:94:8b:5c:f1:34:1f:eb:03:e8:82:55:2f:fe:a0:fc:
16:3f:41:64:66:79:88:22:9b:ee:6e:fe:8b:ef:5b:26:20:0f:
e0:04:b6:ef:bc:a8:27:12:83:e4:44:a8:5d:95:61:55:6e:72:
51:6c:7a:92:d1:c6:a3:5e:3b:64:da:1f:b6:67:22:e5:00:6b:
67:c8:9c:e5:2b:c4:d6:70:d6:4b:7b:b1:21:b3:1c:96:88:6b:
96:98:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:12 2025 by rpki-client