Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json)
Hash identifier: UfbkyALTNvSp9Jile/rFAHbi3gtibmmPEVSG+oIBAPQ=
Subject key identifier: 71:AE:8E:41:77:C2:B8:2F:67:B9:84:C5:E0:27:27:37:AD:6F:43:8B
Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Certificate issuer: /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Certificate serial: 18F75D483AC20A5D2E7AB5D150D9CB0AFB2A7AA2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
Manifest number: 2D
Signing time: Mon 18 Aug 2025 20:58:36 +0000
Manifest this update: Mon 18 Aug 2025 20:53:36 +0000
Manifest next update: Tue 19 Aug 2025 22:03:36 +0000
Files and hashes: 1: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=)
2: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: 5svRRnM/CY4h5ZqSHJst8y65rIct7hLLRoeThGNe0Kc=)
3: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f7:5d:48:3a:c2:0a:5d:2e:7a:b5:d1:50:d9:cb:0a:fb:2a:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Validity
Not Before: Aug 18 20:53:36 2025 GMT
Not After : Aug 19 22:03:36 2025 GMT
Subject: CN=71AE8E4177C2B82F67B984C5E0272737AD6F438B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:c3:8e:5a:74:d5:e7:1a:4f:1b:2f:c5:05:
3d:63:a5:c9:69:0c:ca:24:96:61:39:d8:a8:72:76:
19:e5:21:6a:12:fc:f0:ba:69:1c:da:2a:5d:9a:7d:
0b:88:e7:4b:48:37:3f:a3:d9:b7:cc:52:ca:0c:8f:
96:af:f9:8d:28:b7:76:fe:3f:77:f8:72:0a:4a:20:
09:0e:b7:69:82:3d:88:4b:3f:2c:63:ed:12:94:77:
3d:e5:d7:7d:21:16:e6:e1:e0:df:cd:8e:bb:7b:cc:
b6:0a:6d:f2:f1:5e:52:ac:35:05:f8:9c:2c:e4:b8:
25:9c:7c:6f:be:de:4d:95:a7:ae:7b:4a:86:3d:7b:
65:09:8e:87:1e:5a:bc:94:bc:e2:3b:11:be:c6:a9:
50:c9:ac:4a:e9:09:e5:5f:7e:96:e6:a1:ec:37:74:
30:d6:22:0c:e0:7c:37:d9:49:f6:b6:3e:f4:1f:17:
8e:5b:ef:8c:d5:67:ff:b3:8e:94:42:aa:6f:20:9a:
83:fa:ea:b2:68:df:3d:16:7a:00:7d:aa:f7:04:7f:
79:d1:0b:c0:7d:c7:1b:50:af:c7:6f:04:af:6e:e1:
48:53:8e:ff:51:0e:7a:21:88:06:3b:b2:ca:c2:d1:
9c:c1:79:39:74:32:68:96:43:55:b1:3e:4c:df:4f:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AE:8E:41:77:C2:B8:2F:67:B9:84:C5:E0:27:27:37:AD:6F:43:8B
X509v3 Authority Key Identifier:
keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:be:32:e8:6d:76:92:af:4c:a2:b9:fa:4f:86:22:0f:b4:7b:
2a:f5:e2:9a:71:7d:19:5f:d6:fb:70:4d:9c:a2:01:2f:5e:98:
fe:ef:54:c9:15:8f:9d:7c:e8:8a:3a:a7:7b:5a:9e:ef:0a:0a:
0b:a2:88:76:9b:e9:5c:aa:86:ac:06:6c:76:69:78:6a:57:ff:
db:76:26:dd:7c:2b:9a:46:a5:c7:98:f6:7f:8f:fd:c8:42:84:
3e:b6:88:77:2a:b2:2b:25:18:da:f1:3f:38:04:d5:fa:81:ec:
d6:ca:c3:79:88:49:f8:dc:ad:84:ac:b3:8b:6b:95:3b:bb:0f:
bc:5e:ac:fb:a0:c5:ee:21:06:11:9a:2a:3c:95:13:d4:13:8e:
7c:0e:83:47:1b:1a:b7:c7:9d:4b:b1:50:fa:cd:55:19:de:31:
bf:2f:7e:ee:6b:b7:66:29:c4:fc:29:be:bb:c4:3d:b0:c5:ec:
ef:7e:91:61:22:b8:95:d8:0f:1b:93:c9:cc:5f:c0:b7:34:c8:
d3:26:dd:12:46:e1:a4:77:01:47:2f:c7:c2:65:71:e2:4b:e5:
76:d6:b2:c6:f2:c4:e0:d2:d2:b3:53:de:95:95:81:54:80:61:
5b:0a:69:a7:1d:85:81:92:c9:bc:f7:95:e6:6d:70:bd:1e:86:
16:6a:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:50:05 2025 by rpki-client