Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
File: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft (raw, json)
Hash identifier: a1Bq9MnxuBxCUT+Ul1bI4Oq3FQgB2sBxDEaSTvUGnfc=
Subject key identifier: 63:2A:8B:CF:9E:23:BB:F1:52:52:50:DA:9B:1A:65:39:A0:FC:AA:86
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Certificate issuer: /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial: 29FDCC2106F8D8A62CC0BBE54360E3E97A6BF529
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
Manifest number: 0331
Signing time: Thu 02 Oct 2025 20:44:16 +0000
Manifest this update: Thu 02 Oct 2025 20:39:16 +0000
Manifest next update: Fri 03 Oct 2025 23:09:16 +0000
Files and hashes: 1: 326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (hash: uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=)
2: EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl (hash: nYtyZDScLb8Xwdbl0KQLHq5XX2hkhmHnl6xjV3V+64c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:fd:cc:21:06:f8:d8:a6:2c:c0:bb:e5:43:60:e3:e9:7a:6b:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Validity
Not Before: Oct 2 20:39:16 2025 GMT
Not After : Oct 3 23:09:16 2025 GMT
Subject: CN=632A8BCF9E23BBF1525250DA9B1A6539A0FCAA86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:8a:8b:62:45:05:67:6d:89:49:06:38:86:
14:fa:e8:ba:5d:3e:06:85:bb:74:61:29:8f:5a:26:
de:9d:15:9b:9e:7c:85:f7:9e:55:b0:6d:83:62:6f:
83:9c:96:99:b8:7a:98:13:91:49:38:40:94:95:ff:
2d:d9:71:b2:c0:ed:4d:c5:3e:17:e1:de:44:ad:aa:
ac:ce:55:b2:5e:2d:be:c4:05:21:0c:8b:5e:2d:93:
7e:96:57:ca:51:84:ee:8c:ab:ae:90:b0:3c:24:75:
10:19:2a:aa:48:08:93:af:47:3d:0f:d1:ee:c9:8c:
e8:0d:83:7f:7d:fa:7b:67:61:5e:e5:51:cc:22:72:
c7:de:98:73:49:30:a7:db:54:0f:44:27:3b:50:b4:
a3:39:c4:4e:9f:41:70:6f:95:d0:6a:d5:48:41:21:
5b:d1:28:e9:1e:fa:0b:b6:8d:bc:92:e0:97:1d:83:
5e:7f:ab:5a:c8:7e:1a:fb:1b:63:a8:00:7f:c8:9f:
d0:dd:82:0e:2a:87:49:e6:19:29:1d:6a:90:4a:19:
8c:35:98:16:ec:96:87:db:d5:9e:2a:ac:39:fd:2f:
07:7b:ab:1c:04:de:e6:4b:39:31:a3:c5:a0:01:08:
f0:0c:51:45:ca:5e:42:16:09:29:62:5d:4f:13:93:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:8B:CF:9E:23:BB:F1:52:52:50:DA:9B:1A:65:39:A0:FC:AA:86
X509v3 Authority Key Identifier:
keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3b:02:6b:37:2c:8e:e3:e9:a6:1b:df:50:9c:df:13:e0:65:
2c:4d:31:84:e6:ec:58:ce:6e:8e:ae:91:64:c2:9b:44:5c:a1:
b4:9e:3d:6b:f9:b2:78:9b:86:6b:5d:85:02:41:c9:7c:7c:a5:
5b:48:2a:ec:0d:30:ba:09:aa:b3:a5:9d:4e:b9:0b:b3:c7:93:
0d:f7:d5:2d:2c:0a:ae:d6:67:1d:c8:8c:a6:14:4f:78:d7:b2:
02:04:eb:38:96:ad:a6:1b:51:3d:37:82:18:bd:02:78:1b:4b:
58:13:72:a4:c8:e4:28:82:82:48:21:07:cf:ce:97:d5:df:d9:
f9:7f:02:6b:25:1f:e8:83:9b:fe:19:fc:66:cd:b6:e2:17:17:
4f:26:c3:39:b7:ff:f0:76:cf:0b:33:ab:dd:6f:c3:a7:70:c2:
68:a1:c4:0b:7f:89:ca:c4:eb:ef:dd:c1:33:72:56:60:cf:16:
a6:45:ce:33:a4:c7:6a:08:c2:05:2b:69:33:a0:db:65:59:16:
25:5e:d8:79:ec:d7:4c:25:9d:04:dd:b4:a6:09:3d:c5:a1:94:
fa:30:80:81:64:30:69:af:08:eb:ca:20:cf:a9:0d:25:84:8d:
6b:8f:77:f4:84:c5:1a:a2:e4:74:3c:ea:87:68:d4:f0:52:a1:
71:06:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:53 2025 by rpki-client