Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier: k359dOo3ApAdRbRaYUe6ie7SahKS5N54rPPdlOxM0tc=
Subject key identifier: 6F:B2:D8:35:22:BF:D1:A4:8D:E4:43:EA:F1:B3:C6:8D:F1:3D:94:57
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer: /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial: 714392DF396E0D5CBB516297DE652FA3E12110A7
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number: 15
Signing time: Fri 27 Jun 2025 09:12:52 +0000
Manifest this update: Fri 27 Jun 2025 09:07:52 +0000
Manifest next update: Sat 28 Jun 2025 12:11:52 +0000
Files and hashes: 1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323135353433.roa (hash: 9e2yjigX5+cNnGpC5dYpYp4x5beQHVuns4hEprR01WE=)
2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: HcSAgCOzV7kMK584h9Z6HSbnRgEwdQDkRFuYxDa5ClQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:43:92:df:39:6e:0d:5c:bb:51:62:97:de:65:2f:a3:e1:21:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Validity
Not Before: Jun 27 09:07:52 2025 GMT
Not After : Jun 28 12:11:52 2025 GMT
Subject: CN=6FB2D83522BFD1A48DE443EAF1B3C68DF13D9457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:81:a4:37:6d:78:95:bd:d9:c6:0e:c3:a7:
e5:4b:31:59:6d:15:da:6b:54:4a:73:de:ee:91:27:
0c:65:83:79:db:a7:f0:45:1a:d4:40:86:7c:0a:67:
f8:f6:50:15:44:8d:b4:80:8f:08:24:91:0d:a2:29:
78:98:9b:a7:a8:59:6f:38:d5:29:ad:f0:7c:e7:a9:
2f:10:db:ad:34:8e:e9:df:e3:a6:b0:bc:46:ea:09:
ac:7e:c5:76:ce:7c:4b:fa:19:0b:07:a6:da:74:32:
eb:93:34:70:ce:c8:6f:b1:f8:34:b3:8c:7f:b5:e9:
a5:e2:5b:aa:81:66:4f:cb:e0:a8:25:eb:be:14:cb:
cb:f6:64:d6:84:d6:11:f1:70:6d:83:eb:a4:eb:0a:
3a:a5:3c:32:d1:0f:5d:68:d7:d7:ac:64:ca:53:61:
4f:d1:bc:aa:13:24:d3:68:bc:0b:24:20:f2:06:61:
88:08:cf:f4:ee:97:9b:31:8f:84:78:e0:4c:7d:ce:
29:20:80:fc:dc:a8:b7:01:b9:6c:ae:82:ed:e6:d6:
63:eb:f6:36:47:be:e6:c5:bc:0e:cf:b5:35:57:6f:
d9:6a:37:f9:c7:5c:5e:74:69:5c:cd:cb:1a:ad:d8:
b1:4a:70:45:95:77:54:72:82:4b:42:24:ab:ea:32:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:D8:35:22:BF:D1:A4:8D:E4:43:EA:F1:B3:C6:8D:F1:3D:94:57
X509v3 Authority Key Identifier:
keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f2:4c:ab:1c:c4:0f:7a:7b:9d:10:a9:2c:ae:48:c7:c4:fe:
e9:b2:d5:17:c8:6c:06:36:e4:ae:f3:f5:d0:25:99:57:5d:c3:
1a:a7:82:43:88:e2:63:a3:74:16:4d:9d:76:53:ee:10:9b:a5:
dc:49:c3:b5:ab:cf:e9:ec:87:03:e9:be:11:ef:0c:ff:f8:3d:
b1:fe:e1:f0:e9:9a:2c:89:87:e0:75:8e:c6:4e:d2:0f:63:65:
82:db:f2:5e:ee:e2:d5:07:c8:b4:59:35:b7:ac:b8:c1:28:37:
63:76:79:26:82:c2:15:0d:b5:87:c6:ae:38:c2:f4:fa:01:9d:
2f:00:8b:66:98:cc:65:61:cb:25:65:d4:9d:2e:60:f9:10:bb:
d4:61:41:ec:74:c2:8e:86:13:3a:bd:6b:18:eb:59:f6:63:c4:
ae:f8:62:88:34:fb:e5:43:ec:34:53:d8:d2:6e:51:81:3c:3b:
78:34:83:b4:cc:cd:d7:cf:86:a0:fb:20:92:22:17:8b:aa:12:
82:a9:23:1d:95:84:ba:c8:50:10:2d:34:52:21:ee:1f:85:a5:
20:af:09:ec:d4:de:5b:eb:35:45:97:64:b3:00:55:6b:ce:db:
3d:b0:1c:53:8e:53:1b:13:35:cc:e8:11:d2:a6:99:41:f3:ce:
40:79:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:36:48 2025 by rpki-client