Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
File: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft (raw, json)
Hash identifier: gaURUkOkE3lSc0jMKMG/cKHLdkIOPWAU1kBpkyqCEqs=
Subject key identifier: EC:22:4F:FD:16:5E:12:7D:99:25:ED:46:09:A2:89:93:63:6B:09:B2
Authority key identifier: 4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
Certificate issuer: /CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Certificate serial: 6AB54641D31D64C4169D2FC64376DE911180FD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
Manifest number: E2
Signing time: Fri 22 Aug 2025 07:48:29 +0000
Manifest this update: Fri 22 Aug 2025 07:43:29 +0000
Manifest next update: Sat 23 Aug 2025 08:54:29 +0000
Files and hashes: 1: 4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl (hash: 1vvXc+WRlZqupShv5jPnl1MpkxLzxx3FwRjxghFI0/M=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b5:46:41:d3:1d:64:c4:16:9d:2f:c6:43:76:de:91:11:80:fd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6ea5a3c53bef2e65170c037c4451cfa78ef458
Validity
Not Before: Aug 22 07:43:29 2025 GMT
Not After : Aug 23 08:54:29 2025 GMT
Subject: CN=EC224FFD165E127D9925ED4609A28993636B09B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:7a:c1:c6:e1:6b:82:dc:c9:02:a8:86:c0:
07:4e:9f:c6:de:04:48:8a:04:a6:d6:92:b2:37:fb:
66:69:5f:a9:89:45:c1:2d:ea:32:3f:fc:bb:f0:6c:
b2:37:a0:c2:0b:67:26:d1:5f:38:18:5c:55:f3:de:
0d:07:51:cb:ce:f1:98:52:77:d6:e0:d9:6c:fb:1e:
ef:d2:ff:33:d7:89:31:ed:7b:d8:60:36:09:58:25:
af:3b:00:18:68:a5:87:97:7f:a9:81:56:67:26:a9:
4c:db:f3:7c:3c:55:9d:66:90:48:ea:df:38:b2:fd:
44:7a:83:38:5f:15:5d:7d:24:7e:7d:da:54:73:9a:
a7:c3:84:76:8e:4e:67:f3:c2:be:55:cb:fb:3d:7b:
0d:84:9b:24:08:08:dc:ac:e8:22:24:9d:6e:16:4c:
c2:77:ca:be:4c:bb:ca:75:f9:11:9a:a2:55:1a:7c:
ab:68:d2:1c:7c:89:48:bf:a1:90:41:27:9f:3b:2e:
c1:66:48:79:04:6d:79:a5:84:ed:1b:82:48:62:a5:
35:dd:c5:8f:86:18:fd:18:7e:b0:22:51:bd:96:fe:
3f:09:00:2f:6f:99:c2:32:3e:7f:58:7f:53:ff:8f:
51:97:ec:11:92:70:ff:4b:c0:70:80:b5:59:9e:3e:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:4F:FD:16:5E:12:7D:99:25:ED:46:09:A2:89:93:63:6B:09:B2
X509v3 Authority Key Identifier:
keyid:4C:6E:A5:A3:C5:3B:EF:2E:65:17:0C:03:7C:44:51:CF:A7:8E:F4:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TG6lo8U77y5lFwwDfERRz6eO9Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/0/4C6EA5A3C53BEF2E65170C037C4451CFA78EF458.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ac:76:37:e6:f0:d4:c8:a3:ef:f6:ec:47:2c:46:3e:64:fb:
95:bf:a2:62:c6:33:2f:a2:64:eb:a4:84:f1:e2:1d:26:d4:30:
26:e5:42:97:e4:5e:29:b3:b5:c4:e1:75:48:77:a0:63:fa:86:
10:b4:34:9c:b2:75:2e:08:23:a9:e6:0b:fd:c9:e9:fc:0a:69:
69:6e:5f:57:b5:8a:8a:00:87:50:f6:91:bb:d7:56:56:52:7d:
87:51:c1:55:d9:23:0d:ef:ed:ac:7f:1b:59:ac:58:bc:82:8a:
62:f1:a8:05:a2:11:99:6e:2d:15:60:74:d8:81:10:f8:d3:3d:
dc:12:d8:25:ed:1e:3c:c3:59:05:ea:4d:c1:4b:46:91:48:b4:
7e:b8:d9:41:83:89:d8:7d:8e:58:6f:09:24:a2:bf:41:3c:b0:
f4:2a:5f:0b:17:91:89:4e:f3:bf:8b:79:37:48:5c:72:e3:43:
4e:29:b2:0f:44:2a:a6:64:40:5a:12:08:76:5d:f2:55:93:7a:
2f:8f:9f:29:9b:b6:4a:b1:85:f2:eb:25:75:77:42:a9:29:dd:
03:e4:48:b1:6e:56:6a:be:d6:d2:30:79:0d:d7:1b:be:55:46:
22:12:60:a6:4d:ee:77:ad:59:71:cf:b6:46:8b:11:86:17:5c:
f7:b8:9a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:47 2025 by rpki-client