Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier: C02geL+pf4Dcgnde04ckEqUsCBkD2821H/REPIezzgk=
Subject key identifier: 71:64:C6:E2:1E:70:73:6E:9F:2E:82:8D:91:BD:86:9F:3F:A0:A4:47
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer: /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial: 08013408DF999186F29820A67C67EA08F5BA0CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number: DA
Signing time: Sat 13 Sep 2025 23:20:53 +0000
Manifest this update: Sat 13 Sep 2025 23:15:53 +0000
Manifest next update: Mon 15 Sep 2025 02:54:53 +0000
Files and hashes: 1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: xJL9wCRwctHNS2mD6nu5VxzMC7cw+dE5XhRjZxzOH4c=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:01:34:08:df:99:91:86:f2:98:20:a6:7c:67:ea:08:f5:ba:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Validity
Not Before: Sep 13 23:15:53 2025 GMT
Not After : Sep 15 02:54:53 2025 GMT
Subject: CN=7164C6E21E70736E9F2E828D91BD869F3FA0A447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:3a:75:d0:a6:1d:7a:d6:cd:f9:35:1e:26:
f5:4f:c1:cf:a2:b5:cf:f0:ad:60:cd:d0:c0:85:dc:
37:53:9c:b7:f3:02:cb:98:08:88:3f:2e:81:97:30:
99:ed:ac:0b:9c:6e:27:a2:ca:ed:98:7b:31:73:e6:
5c:7b:a1:ce:15:c8:ee:67:79:09:bb:db:1a:c5:8d:
78:74:0e:e5:03:d0:b7:cb:d2:88:bc:41:fa:33:7a:
39:10:52:7d:71:e9:ae:1c:47:8c:6e:ab:9f:54:f0:
1b:13:1c:db:54:52:0d:83:ed:91:a8:83:b5:8e:5b:
dc:b0:71:c5:d2:d6:89:55:86:98:52:4b:14:2f:de:
46:e4:a5:67:48:91:05:4d:a5:6e:23:79:a3:12:ed:
27:e8:a4:82:a9:6f:bf:f7:7a:d4:1f:b8:22:c7:80:
8f:31:35:1c:76:bb:17:65:9e:f7:e8:3d:1b:ca:0d:
eb:06:69:4b:06:2c:8d:a5:1c:3c:ea:d9:06:1d:5b:
27:bb:62:f1:9f:a3:39:06:2e:63:73:87:92:90:a3:
6a:eb:6c:7c:c7:98:e2:3a:b8:95:d6:fc:48:f3:5c:
30:e8:8b:84:fb:d9:48:3b:be:af:11:7d:85:e5:6c:
0d:e6:1f:4a:a8:45:9a:48:ca:43:78:04:6a:e8:82:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:C6:E2:1E:70:73:6E:9F:2E:82:8D:91:BD:86:9F:3F:A0:A4:47
X509v3 Authority Key Identifier:
keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:a1:52:38:c4:81:e3:13:e5:8f:b9:b7:ca:6b:cd:96:3e:
5c:5f:a5:bc:31:68:48:c4:e2:95:78:ba:ef:b2:63:ef:a3:4e:
8b:02:b1:3c:e6:35:31:73:58:5f:63:57:42:99:1a:bf:e0:2f:
71:04:bf:4c:37:da:ff:d8:26:e4:12:9a:2a:38:5a:44:ec:a0:
df:d0:28:27:d1:e7:7d:0d:1d:af:20:2c:b2:18:6e:a6:f0:0f:
63:c6:9a:d0:e8:89:0e:d9:bb:e1:66:78:d1:71:2f:c0:56:56:
2d:8e:38:30:a2:1b:14:9b:f0:23:2b:a3:50:80:6f:0c:e5:d2:
d9:f6:30:e9:ed:72:72:1f:18:e3:e7:cd:51:cb:c2:ff:03:19:
70:5e:0e:3a:36:03:ef:92:d0:8b:49:5c:5c:b3:f7:f5:97:e5:
d3:be:80:aa:29:ec:1c:98:22:c4:67:b6:31:bb:56:0d:50:a4:
59:3a:03:97:1e:b7:e0:1f:ee:ee:d2:05:bf:9e:9a:9b:d9:0c:
b2:86:3f:57:37:13:7a:e7:ee:b8:2e:97:a7:a0:84:86:3d:ff:
51:1c:0f:fb:4b:cf:ed:39:ce:fb:2d:a1:d3:f3:76:cd:94:0e:
30:ff:b3:7f:cd:61:d5:da:00:9c:5d:b7:37:1d:da:ea:c3:f3:
75:06:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:38 2025 by rpki-client