Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
File: 4116FB807A3363A47402C507A15B8182FA00544C.mft (raw, json)
Hash identifier: X7crXXDFwbDVCt2hVMIaYnhZEC3tcPbay7IJBulZAmM=
Subject key identifier: B8:8E:B5:77:EC:11:D7:C4:F1:16:EC:DA:DD:97:B2:74:4E:B7:17:D0
Authority key identifier: 41:16:FB:80:7A:33:63:A4:74:02:C5:07:A1:5B:81:82:FA:00:54:4C
Certificate issuer: /CN=4116fb807a3363a47402c507a15b8182fa00544c
Certificate serial: 07549F18B2D81DC6DA848E3B549B265B4F1496CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRb7gHozY6R0AsUHoVuBgvoAVEw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
Manifest number: 35
Signing time: Sat 11 Oct 2025 18:26:31 +0000
Manifest this update: Sat 11 Oct 2025 18:21:31 +0000
Manifest next update: Sun 12 Oct 2025 18:35:31 +0000
Files and hashes: 1: 4116FB807A3363A47402C507A15B8182FA00544C.crl (hash: XWKQ2p7pYUxKLQP9E5ZCAaccmQaQ+5RAJl5P0vlEPdQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:54:9f:18:b2:d8:1d:c6:da:84:8e:3b:54:9b:26:5b:4f:14:96:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116fb807a3363a47402c507a15b8182fa00544c
Validity
Not Before: Oct 11 18:21:31 2025 GMT
Not After : Oct 12 18:35:31 2025 GMT
Subject: CN=B88EB577EC11D7C4F116ECDADD97B2744EB717D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:b4:77:1f:4d:f7:e0:6e:b7:9d:14:96:37:
35:a1:61:10:3c:ac:79:21:c1:7e:a9:86:99:7d:ea:
b7:c6:a4:c4:f4:27:dd:24:09:7c:17:96:54:c5:00:
e9:ec:30:38:a3:ab:70:45:cf:1c:09:d9:3e:75:91:
e4:18:ee:fa:62:39:14:18:3b:85:57:69:21:f9:a5:
23:52:13:73:af:1b:25:0e:32:cb:c5:c6:a2:67:f0:
2f:74:03:ea:3f:99:08:a0:69:3e:73:74:fb:bd:39:
78:02:7e:8e:b8:19:cd:e9:41:7f:ac:90:a1:51:aa:
e1:9c:a0:95:69:8f:d2:8e:8c:8d:e4:fb:72:37:59:
51:75:c4:bd:99:b5:fe:56:50:de:34:c8:10:c1:c2:
e4:b7:d0:f5:6d:3c:75:9e:93:0c:28:45:46:7c:0c:
1e:9f:82:a8:fd:9f:08:79:31:15:ec:21:8e:f1:32:
d4:72:0c:56:28:42:c6:61:99:d1:5d:d6:84:79:3b:
3c:f4:58:6f:6d:f2:6f:bd:21:2a:5e:1e:dc:1c:ef:
0e:f9:30:70:fb:44:91:2c:13:bd:44:b6:38:80:8a:
b8:14:58:85:a6:0c:c8:2b:f5:1b:9f:e4:a7:ec:86:
78:b7:53:e0:d3:d4:ff:35:1f:8f:fd:04:f0:f5:51:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:B5:77:EC:11:D7:C4:F1:16:EC:DA:DD:97:B2:74:4E:B7:17:D0
X509v3 Authority Key Identifier:
keyid:41:16:FB:80:7A:33:63:A4:74:02:C5:07:A1:5B:81:82:FA:00:54:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRb7gHozY6R0AsUHoVuBgvoAVEw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5da0c829-86ac-4823-9681-4007fbb499ec/1/4116FB807A3363A47402C507A15B8182FA00544C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:76:be:c6:f2:f1:2e:da:e4:56:79:fe:59:8d:03:ce:93:d8:
b7:f7:6e:26:dc:c3:8f:8b:02:0d:a2:76:d1:29:82:77:1c:f0:
c1:f2:d5:7b:95:78:00:17:ce:80:cd:59:11:0a:45:a2:8e:80:
dc:60:09:e1:8e:eb:4c:af:6c:c2:39:09:f0:a9:6a:d5:92:b2:
ef:c9:1c:a6:06:92:3c:39:c0:7d:54:15:5f:26:73:c7:63:42:
98:66:b0:e5:a6:26:e5:8f:c9:b6:68:bd:92:ec:0e:14:5a:96:
8b:2c:12:12:d2:67:ed:7d:c5:51:7e:52:24:90:da:3d:25:73:
d4:b6:0c:44:51:37:11:9a:73:1a:97:6f:f3:e7:90:4b:4f:b2:
86:19:5a:5d:18:cf:aa:b7:4e:6f:b3:a5:40:ca:6e:f5:51:be:
bb:89:cd:e2:54:11:5d:86:ee:21:94:8a:49:e3:2d:7c:38:b9:
4f:ef:d5:40:d6:ff:1f:a9:d4:f4:fa:67:65:d2:9d:e6:e6:48:
52:67:29:54:b8:43:10:11:05:c5:bd:0c:1b:46:f7:c6:9a:66:
9f:26:fd:7f:1e:23:94:b9:87:55:c3:77:ef:e6:e9:1d:f1:ff:
72:a3:5f:b1:e3:62:81:01:f3:22:d2:30:3b:f0:17:1a:9c:6a:
e9:2f:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:05 2025 by rpki-client