Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier: eEPXqReTyWby7+ynbUSKvlGL1RzPSkmRjpwWi2+8dLo=
Subject key identifier: 2A:A5:B9:73:1C:12:F6:37:0B:B0:79:42:40:A2:72:CB:73:E3:40:C4
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer: /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial: 10654FDED3E2C09D0B1BB7FB7450CF0B661AF768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number: 025A
Signing time: Tue 30 Sep 2025 08:55:38 +0000
Manifest this update: Tue 30 Sep 2025 08:50:38 +0000
Manifest next update: Wed 01 Oct 2025 09:41:38 +0000
Files and hashes: 1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: pwuVH94fi9JRARrwxZ1xU3I19qAJwnWbpPgjen6uOjw=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:65:4f:de:d3:e2:c0:9d:0b:1b:b7:fb:74:50:cf:0b:66:1a:f7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
Validity
Not Before: Sep 30 08:50:38 2025 GMT
Not After : Oct 1 09:41:38 2025 GMT
Subject: CN=2AA5B9731C12F6370BB0794240A272CB73E340C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:32:a4:8e:ff:c5:9d:18:a1:c8:16:07:92:
49:b4:0f:a9:52:b1:1c:f5:69:c8:7c:8d:87:cf:39:
f1:65:a3:aa:5c:38:4d:71:c8:78:14:e2:8a:ad:cc:
70:d4:3b:e1:e8:9d:a2:02:7e:ec:df:5e:c2:d0:9d:
b9:5d:74:f4:92:58:b8:8c:bb:1c:a6:61:70:bc:c2:
e3:7b:f5:4e:f1:64:b2:bb:dc:fb:69:75:51:3a:c8:
c6:d9:4d:84:c3:c1:88:c5:35:2a:67:44:5f:b7:5c:
77:a2:11:b0:2a:d8:b5:30:5b:2f:0c:be:b1:93:6c:
50:17:4e:b9:79:f0:cf:f4:16:2a:ac:e6:53:cd:3c:
bf:4f:1d:b3:04:27:75:98:2c:3a:db:39:84:b7:84:
d5:3d:e7:52:84:fb:1d:c0:70:6d:81:41:ff:23:79:
44:58:db:48:4d:eb:69:11:0a:31:ab:4d:9b:58:9b:
c8:ea:85:7e:06:b0:a9:5e:c0:b6:b8:45:76:94:2d:
fc:6b:e7:2b:61:25:89:e3:72:0f:05:ed:62:bc:44:
d3:3e:e2:7c:25:ed:a3:ca:86:56:f0:19:2d:30:dc:
01:18:b6:dc:7d:0b:ca:50:d5:49:2d:c5:7e:0f:c5:
74:20:ef:cc:c7:de:ac:c3:1a:01:1b:9e:40:93:5b:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:B9:73:1C:12:F6:37:0B:B0:79:42:40:A2:72:CB:73:E3:40:C4
X509v3 Authority Key Identifier:
keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c7:ed:e8:89:04:6f:49:fa:ae:ca:7b:ad:ad:c2:69:d3:b1:
99:2d:63:55:9e:db:1c:41:44:6d:e4:16:7b:e4:42:03:0c:89:
fa:77:f4:46:b2:df:90:01:c4:c0:6f:a2:27:ec:ce:7a:b3:ad:
a4:28:8a:cd:6a:b7:3c:11:d8:09:38:6d:b0:bc:0e:e6:42:2d:
e6:0a:00:f4:21:a3:95:f9:40:e0:83:1e:a7:3d:d2:93:e9:44:
18:d4:43:87:13:0e:2b:9c:74:4f:3d:33:53:7b:8f:c5:8b:55:
88:cc:22:57:c7:82:72:66:ac:bd:d8:2d:f0:a0:5e:b8:7e:cc:
29:14:c2:5b:70:a5:d6:40:09:60:e9:e8:8e:a7:0e:fe:74:c0:
10:56:fd:76:e3:2c:cd:98:21:3b:46:da:cf:07:31:21:35:32:
90:b0:19:7e:cc:b9:e3:c9:40:ed:02:1f:54:d6:f0:0c:4f:31:
39:e8:37:70:83:df:2b:b4:52:dc:16:6e:29:3d:0c:9b:eb:c7:
ce:a9:f7:7a:18:db:a7:06:a4:af:45:5d:23:78:42:46:b3:41:
f2:7a:fd:73:ec:0a:8b:74:c8:d6:a9:af:4b:4b:50:fd:e4:79:
d8:26:6a:fe:2d:7e:c4:5d:f0:7b:0e:41:f8:5b:61:2e:6a:e8:
20:cf:8a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:44 2025 by rpki-client