
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier: 0nHjVo54GFvbnRco8go9zSefzTtFEsFZJH28mZpZjhQ=
Subject key identifier: 58:CD:4E:C2:87:DA:E9:B0:DA:92:24:F1:05:CA:DF:A5:BA:5C:DA:79
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial: 10D160099ECB192F98B99E5F8DB9485214EDCBE8
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number: 0205
Signing time: Thu 18 Sep 2025 01:28:00 +0000
Manifest this update: Thu 18 Sep 2025 01:23:00 +0000
Manifest next update: Fri 19 Sep 2025 03:49:00 +0000
Files and hashes: 1: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=)
2: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: YBmyye9dh/QtetnGodhD4t2KU6phEIHVyScrlZi3dlk=)
3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=)
4: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=)
5: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d1:60:09:9e:cb:19:2f:98:b9:9e:5f:8d:b9:48:52:14:ed:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Validity
Not Before: Sep 18 01:23:00 2025 GMT
Not After : Sep 19 03:49:00 2025 GMT
Subject: CN=58CD4EC287DAE9B0DA9224F105CADFA5BA5CDA79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:a3:53:76:f3:9b:6c:02:ed:80:9c:35:02:
7b:c2:47:7b:dc:e2:36:c2:33:27:67:cf:23:54:e8:
8f:34:15:37:93:3d:97:a0:8d:b2:7b:27:36:83:32:
4f:48:42:78:89:43:92:e5:b3:1f:e2:b7:8a:d4:33:
93:c5:f7:e7:cf:12:c3:cd:c9:ed:c1:5a:2e:06:ce:
91:0c:b0:49:33:7b:8c:72:4c:10:59:f1:83:77:8c:
c6:a8:e9:67:d9:44:5b:04:70:ea:c9:03:83:a4:94:
7e:55:d7:79:bf:f6:04:91:6a:19:7b:8f:9e:66:99:
6c:2a:58:7c:00:2f:1b:d5:28:d1:d9:e3:4b:65:94:
8b:f1:d6:4f:68:85:27:02:c7:22:a2:70:6d:8f:60:
e9:54:07:9f:74:0d:6e:e4:64:6d:77:c8:de:4e:1e:
11:76:0f:05:8e:40:fd:5a:44:7c:bb:a4:0c:a3:19:
36:c5:ec:69:d9:25:88:77:36:1f:7b:02:eb:a3:3f:
5b:19:15:db:3e:46:91:52:cb:b8:8c:36:4f:3c:5b:
4b:89:e9:9b:85:11:cb:1b:4b:cd:6f:2b:44:0f:98:
a5:53:5d:d4:4c:79:e8:e7:eb:60:83:25:26:65:6b:
94:52:fc:37:90:5c:65:ed:9b:54:d2:65:9b:75:e9:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:4E:C2:87:DA:E9:B0:DA:92:24:F1:05:CA:DF:A5:BA:5C:DA:79
X509v3 Authority Key Identifier:
keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:2a:1e:09:9d:e4:86:3d:52:8c:25:a9:0e:ff:3e:e8:a1:
f6:8c:2c:21:92:b7:aa:80:26:10:3f:c8:ca:a7:ff:1c:eb:7f:
5b:0f:5f:aa:a9:ac:0e:60:ac:6a:49:b4:9e:eb:d9:64:f7:94:
c9:cb:ef:78:4f:fd:8d:02:8e:9e:e5:be:14:07:7c:55:ff:25:
ad:22:08:0a:56:77:34:6e:89:39:39:d8:3b:49:5b:08:e4:16:
56:61:3b:6e:62:8d:dd:83:5c:ed:2c:13:48:81:88:43:7e:3c:
cd:8b:14:4f:19:44:b9:bf:bc:42:57:7b:4e:e3:44:e6:75:0a:
4c:82:d3:f3:4d:6c:15:20:3e:83:67:79:c1:43:fe:cc:5d:59:
55:b9:b2:65:7d:d2:5d:74:63:2f:1c:ce:62:88:83:b9:7c:b0:
3e:2d:9a:18:23:e4:11:df:89:11:b5:42:61:e6:73:23:27:4f:
65:f4:68:24:37:41:e6:8b:5a:79:0b:25:61:a8:40:8d:e0:66:
cf:b1:1e:80:0a:99:b9:1a:a8:bb:a9:58:d0:4e:d3:e8:0d:db:
9d:4f:e7:66:b7:8f:48:d0:e6:c2:6d:cd:b1:49:a3:73:e3:3a:
d9:6c:9f:7c:b9:29:a4:01:69:9c:90:30:17:ad:9c:95:9c:22:
84:2a:f9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:04 2025 by rpki-client