Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier: j4my6LsPcAWODgJ6DKRz1flle40myasov9y2VJyr0Y4=
Subject key identifier: 8A:6E:E3:44:39:80:1D:DB:12:BF:FE:47:0D:29:1C:C3:BB:6B:A8:55
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial: 545C74426112F04A49CFCD4222B87E76A48F6D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number: 0254
Signing time: Thu 02 Oct 2025 18:39:08 +0000
Manifest this update: Thu 02 Oct 2025 18:34:08 +0000
Manifest next update: Fri 03 Oct 2025 22:36:08 +0000
Files and hashes: 1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: wO1qHdevMPh1kzw8rs/M5KpOSHbREuZyoZdQ3TuT5oY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5c:74:42:61:12:f0:4a:49:cf:cd:42:22:b8:7e:76:a4:8f:6d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Validity
Not Before: Oct 2 18:34:08 2025 GMT
Not After : Oct 3 22:36:08 2025 GMT
Subject: CN=8A6EE34439801DDB12BFFE470D291CC3BB6BA855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:a2:35:24:74:0c:1e:01:16:ab:e5:0b:73:
a7:ec:0b:7d:87:11:ad:5c:49:24:43:91:66:35:9f:
4a:b6:5b:aa:f6:ad:b3:c1:c1:1a:8a:65:8c:85:9c:
20:27:39:29:d6:6a:0a:94:6b:92:ab:bd:07:51:ee:
1a:45:f3:c3:c8:1b:f5:b2:e4:a0:42:50:db:b8:b2:
f8:69:e9:fb:9f:2c:fb:ea:05:cd:97:ec:a1:f0:c2:
be:a7:ae:5e:de:bf:d3:a8:ed:14:23:4e:d5:fa:79:
71:f2:56:26:69:97:7d:67:2b:ac:a7:1e:aa:d1:07:
ec:c7:19:7b:69:b6:6b:29:d1:11:4c:bb:8e:9f:fe:
75:b9:9d:c3:56:4a:0b:62:51:9b:c5:34:26:53:37:
10:7b:2a:01:c3:56:ae:0b:ae:a0:91:b1:e0:3f:36:
d2:89:43:f9:65:b8:f6:76:08:82:91:09:89:27:42:
78:2a:ea:5a:f3:6d:5d:42:04:59:41:d6:87:55:64:
62:60:70:90:98:b1:28:24:63:c4:bb:a7:06:8a:b5:
9a:8c:64:28:9d:f4:62:3e:be:bf:a4:44:a2:da:b5:
ef:04:67:b7:72:88:cf:82:93:7f:ef:b7:40:25:f1:
29:11:a0:25:96:9d:3c:fe:e0:f2:de:81:3e:81:01:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6E:E3:44:39:80:1D:DB:12:BF:FE:47:0D:29:1C:C3:BB:6B:A8:55
X509v3 Authority Key Identifier:
keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:ad:99:ea:04:5c:0d:d7:ac:29:ea:14:83:dd:41:3e:5e:
10:19:2d:df:5b:b8:01:9c:fc:82:54:fd:c7:85:a5:18:b1:d4:
3f:39:54:6a:e9:2d:f1:af:ec:b6:79:de:25:75:72:06:86:63:
71:07:60:89:19:87:0f:44:05:c5:60:ba:f7:a6:c0:df:7d:ca:
83:65:78:7f:b9:c6:f3:aa:19:7d:90:dc:a3:de:6a:a7:d5:ac:
56:0a:0d:8f:25:b2:23:b7:ec:5a:12:a8:8a:e1:10:59:19:a7:
c3:3e:ca:3a:51:47:48:23:7f:37:47:31:64:fe:4b:6c:35:79:
fe:54:45:f1:2a:c6:43:13:89:a2:f0:9b:17:93:3e:0e:29:3d:
06:30:ad:43:bd:18:f9:0d:92:5c:ca:c5:00:f5:57:f6:35:44:
c4:f5:c5:d5:30:3f:1b:f7:30:62:cf:87:2a:dc:1c:49:12:14:
7e:af:77:c8:5a:0f:10:8c:5d:da:e0:23:f0:bd:96:8f:2d:b7:
ae:78:05:17:9f:5d:b6:0c:3e:21:87:08:0d:d6:3a:36:35:3c:
d2:bb:4d:4d:32:1a:e8:01:8a:6b:d0:b6:d2:b7:64:41:58:bf:
3c:1b:6b:42:94:a9:cd:59:3c:7c:e5:a7:77:7d:cd:14:8e:dc:
2d:94:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:02 2025 by rpki-client