Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier: oRjMuEnDVdu1ElGStk+8dJ/X2qUn3AXHjYMt20X36UA=
Subject key identifier: BA:D0:CD:49:48:25:BC:7D:80:87:72:BE:F8:B3:7B:A5:65:B5:2D:20
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer: /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial: 5A8E68EC7D0C5A26229D0F328DDF325626E4679D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number: 0202
Signing time: Sat 06 Sep 2025 03:29:13 +0000
Manifest this update: Sat 06 Sep 2025 03:24:13 +0000
Manifest next update: Sun 07 Sep 2025 05:59:13 +0000
Files and hashes: 1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: 3VWFsjjlCdDK8UDLQQKwfmDaozRB9KqwOFuZnMw042g=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8e:68:ec:7d:0c:5a:26:22:9d:0f:32:8d:df:32:56:26:e4:67:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Validity
Not Before: Sep 6 03:24:13 2025 GMT
Not After : Sep 7 05:59:13 2025 GMT
Subject: CN=BAD0CD494825BC7D808772BEF8B37BA565B52D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:1c:8a:86:b6:a5:9a:4a:9c:ff:2e:fa:ba:
2e:59:f4:4a:05:20:36:a2:cf:85:e4:f1:d8:51:e4:
6c:5a:3e:f4:36:d8:5c:6e:63:43:9e:90:ca:39:79:
50:fe:3b:4b:32:4d:1f:ba:47:fd:92:94:71:70:ff:
cc:b0:dd:d0:6e:f3:aa:24:1a:39:97:7f:33:1f:94:
7e:c5:e4:c0:f8:6c:d0:1a:08:f6:b8:fd:9a:cd:a0:
da:fc:f0:a2:81:ac:41:be:5a:fe:2c:25:93:b1:d5:
10:73:89:af:e7:b9:f5:e2:4e:47:2f:ae:9b:67:e3:
f6:00:6f:50:a7:96:10:0a:60:43:a1:a0:de:a0:8d:
fa:7d:91:5b:81:2d:0f:34:92:94:59:8e:63:93:e0:
f9:f7:e9:36:61:30:13:ec:09:2a:5f:76:98:fa:c6:
ab:08:7d:31:81:b8:33:55:53:16:22:c9:70:c1:98:
44:4b:9e:d5:97:3e:9e:a6:b6:7d:47:e6:d3:d1:42:
66:39:a1:d1:83:ab:6a:b4:76:f3:7c:df:99:ba:1a:
2a:82:9f:e7:bc:fe:a4:5d:22:be:88:3a:df:85:f9:
c4:70:32:7c:23:97:40:df:70:89:a0:1a:48:6a:41:
6d:b7:6d:a3:5b:10:54:17:f8:9c:a1:51:2b:fc:a4:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:CD:49:48:25:BC:7D:80:87:72:BE:F8:B3:7B:A5:65:B5:2D:20
X509v3 Authority Key Identifier:
keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:00:3c:26:bf:e2:14:d8:eb:a3:3a:8b:cf:17:2e:cc:74:fd:
ed:eb:a2:c2:e5:17:93:89:27:db:32:ab:64:94:6d:5c:99:5d:
57:4b:f0:3f:cb:f0:a2:76:a2:07:8e:11:28:1f:86:2d:5e:c6:
da:3b:48:3a:47:a0:16:42:5b:fb:7c:d1:96:e8:cd:a0:5a:57:
35:3d:15:fa:21:10:48:fb:01:bf:27:f4:ad:23:a2:66:20:61:
39:1f:c2:f9:56:15:89:2f:9e:68:9c:d7:c7:db:55:44:bc:7a:
5f:66:b0:e7:7e:3d:e2:94:be:fb:21:9e:00:14:80:bb:1e:e0:
56:dd:09:fe:84:86:71:00:89:2f:b6:16:e2:b5:21:3d:27:45:
80:d0:28:eb:b9:bd:62:61:00:c2:1e:91:b8:61:26:62:a4:e4:
30:f8:b8:01:d7:23:4b:12:43:b3:88:60:7c:66:e3:31:29:71:
6e:40:c1:2a:c6:68:89:d9:8b:61:bd:3a:f5:9d:29:b1:1d:7b:
a3:ce:93:44:5d:49:67:c3:2f:9b:0b:86:17:18:9d:f9:76:36:
db:52:64:0e:82:46:2f:2f:67:96:72:77:ea:51:a2:a9:40:13:
45:2f:56:bf:a1:3c:0f:fe:78:fc:9b:b2:79:39:6c:b0:0f:ed:
15:16:58:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:06 2025 by rpki-client