Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dc1db4c4-1699-4d62-b0ee-25ed39c61ee5/0/C9BF0871D04EF96E327E1588796BD3697E0FF532.mft
File: C9BF0871D04EF96E327E1588796BD3697E0FF532.mft (raw, json)
Hash identifier: cxTMJfVREbpCZrihdzTcotK9M/CDi8oaxLg9lkOnXss=
Subject key identifier: 09:05:FB:CA:10:6E:46:D4:AE:34:8F:25:B6:AE:3F:5D:4C:AE:67:36
Authority key identifier: C9:BF:08:71:D0:4E:F9:6E:32:7E:15:88:79:6B:D3:69:7E:0F:F5:32
Certificate issuer: /CN=c9bf0871d04ef96e327e1588796bd3697e0ff532
Certificate serial: 68E241BA945EF88B50C33C23233F88D77C35B600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yb8IcdBO-W4yfhWIeWvTaX4P9TI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dc1db4c4-1699-4d62-b0ee-25ed39c61ee5/0/C9BF0871D04EF96E327E1588796BD3697E0FF532.mft
Manifest number: 0D
Signing time: Thu 14 Aug 2025 00:09:00 +0000
Manifest this update: Thu 14 Aug 2025 00:04:00 +0000
Manifest next update: Fri 15 Aug 2025 02:49:00 +0000
Files and hashes: 1: C9BF0871D04EF96E327E1588796BD3697E0FF532.crl (hash: ThehalNLYVPNe+x/64x8ZChmMq/Tf3+ulxHpYPc6us8=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e2:41:ba:94:5e:f8:8b:50:c3:3c:23:23:3f:88:d7:7c:35:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bf0871d04ef96e327e1588796bd3697e0ff532
Validity
Not Before: Aug 14 00:04:00 2025 GMT
Not After : Aug 15 02:49:00 2025 GMT
Subject: CN=0905FBCA106E46D4AE348F25B6AE3F5D4CAE6736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:90:71:d3:cf:20:80:8b:b3:19:68:ab:93:
7b:d0:a6:bf:c6:32:7a:28:21:5f:07:e9:56:b2:2f:
d1:7b:7f:71:83:f5:b4:fb:20:4f:de:de:4d:fd:f9:
aa:fc:13:33:7f:48:82:e0:41:a5:f5:c2:b1:ba:04:
1d:11:cf:ca:cd:b7:80:7c:d8:79:d0:f6:9a:62:ca:
a2:61:5e:37:62:85:19:70:6f:77:8e:6e:21:f3:5a:
e2:6e:d5:72:d9:0d:7b:c0:21:94:42:96:5d:65:d2:
d7:12:60:d4:f4:4d:88:94:72:c1:63:c6:48:84:dd:
a8:b8:1e:27:7d:4c:45:87:3b:32:cc:b7:ce:da:7b:
30:8b:65:f5:81:3e:da:2f:b4:f2:c2:3d:cd:40:18:
5c:01:e7:ac:28:24:6a:7d:0e:2c:5e:12:64:23:e4:
59:be:bb:77:08:fa:b6:79:67:1f:ff:e3:25:43:12:
72:c8:94:1a:d4:25:a0:6e:2f:3d:42:6e:20:fa:9f:
2f:95:fd:4f:0d:44:bd:85:5b:8d:9b:a5:a5:ee:2f:
b9:e1:ff:ab:ec:e2:df:95:3c:5c:4d:30:ed:f8:7f:
ec:f2:fe:5f:fd:cf:f4:89:f5:24:e2:9f:51:50:e8:
dd:98:2d:9c:ac:0c:53:02:f9:66:b2:cf:26:31:9c:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:FB:CA:10:6E:46:D4:AE:34:8F:25:B6:AE:3F:5D:4C:AE:67:36
X509v3 Authority Key Identifier:
keyid:C9:BF:08:71:D0:4E:F9:6E:32:7E:15:88:79:6B:D3:69:7E:0F:F5:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dc1db4c4-1699-4d62-b0ee-25ed39c61ee5/0/C9BF0871D04EF96E327E1588796BD3697E0FF532.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yb8IcdBO-W4yfhWIeWvTaX4P9TI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dc1db4c4-1699-4d62-b0ee-25ed39c61ee5/0/C9BF0871D04EF96E327E1588796BD3697E0FF532.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:09:cc:b5:59:21:f6:99:f1:fb:d0:27:5f:95:63:69:3f:
bc:39:3f:93:e1:52:3f:d1:3c:d7:35:99:ac:3e:1f:6f:35:3d:
1e:46:25:c2:94:ab:f6:0b:2e:4d:a5:82:55:b2:fe:a2:97:b4:
f3:10:4d:db:43:3d:1e:32:8b:37:7a:31:ba:ec:d9:aa:35:03:
28:77:26:d5:a9:85:d0:eb:8b:9a:af:51:7d:bd:aa:58:a3:94:
bf:0d:6b:de:f7:c0:1f:04:c0:22:c8:3d:cc:f4:82:ad:f7:f4:
d0:18:58:a4:77:98:3f:17:54:16:9c:6a:f6:97:68:23:fb:db:
c4:91:29:48:ae:59:6e:37:d5:8f:11:d4:24:6f:76:e4:57:66:
48:29:be:47:51:e8:36:94:d5:d7:9d:da:b1:ac:70:3a:3b:ed:
88:93:25:78:0e:10:8b:af:fa:bf:ec:f9:3f:ea:a1:1f:f7:b7:
e5:45:07:45:29:78:e2:6c:47:ce:de:48:44:ad:8a:ab:94:45:
88:14:e2:22:05:05:89:43:6a:00:a7:72:dc:b6:ef:af:ba:4d:
34:03:88:1b:86:2f:c4:45:36:ab:0c:e1:8d:b4:c7:b5:cc:9d:
fb:d3:9b:c7:08:5e:06:02:3e:b0:ae:e6:8b:fb:7a:84:79:a8:
a4:74:d6:11
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUaOJBupRe+ItQwzwjIz+I13w1tgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzliZjA4NzFkMDRlZjk2ZTMyN2UxNTg4Nzk2YmQzNjk3
ZTBmZjUzMjAeFw0yNTA4MTQwMDA0MDBaFw0yNTA4MTUwMjQ5MDBaMDMxMTAvBgNV
BAMTKDA5MDVGQkNBMTA2RTQ2RDRBRTM0OEYyNUI2QUUzRjVENENBRTY3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZM5Bx088ggIuzGWirk3vQpr/G
MnooIV8H6VayL9F7f3GD9bT7IE/e3k39+ar8EzN/SILgQaX1wrG6BB0Rz8rNt4B8
2HnQ9ppiyqJhXjdihRlwb3eObiHzWuJu1XLZDXvAIZRCll1l0tcSYNT0TYiUcsFj
xkiE3ai4Hid9TEWHOzLMt87aezCLZfWBPtovtPLCPc1AGFwB56woJGp9DixeEmQj
5Fm+u3cI+rZ5Zx//4yVDEnLIlBrUJaBuLz1CbiD6ny+V/U8NRL2FW42bpaXuL7nh
/6vs4t+VPFxNMO34f+zy/l/9z/SJ9STin1FQ6N2YLZysDFMC+WayzyYxnMmfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUCQX7yhBuRtSuNI8ltq4/XUyuZzYwHwYDVR0j
BBgwFoAUyb8IcdBO+W4yfhWIeWvTaX4P9TIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGMxZGI0YzQtMTY5OS00ZDYyLWIwZWUtMjVlZDM5YzYx
ZWU1LzAvQzlCRjA4NzFEMDRFRjk2RTMyN0UxNTg4Nzk2QkQzNjk3RTBGRjUzMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3liOEljZEJPLVc0eWZoV0llV3ZUYVg0
UDlUSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kYzFkYjRjNC0x
Njk5LTRkNjItYjBlZS0yNWVkMzljNjFlZTUvMC9DOUJGMDg3MUQwNEVGOTZFMzI3
RTE1ODg3OTZCRDM2OTdFMEZGNTMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfkJzLVZIfaZ8fvQJ1+V
Y2k/vDk/k+FSP9E81zWZrD4fbzU9HkYlwpSr9gsuTaWCVbL+ope08xBN20M9HjKL
N3oxuuzZqjUDKHcm1amF0OuLmq9Rfb2qWKOUvw1r3vfAHwTAIsg9zPSCrff00BhY
pHeYPxdUFpxq9pdoI/vbxJEpSK5ZbjfVjxHUJG925FdmSCm+R1HoNpTV153asaxw
OjvtiJMleA4Qi6/6v+z5P+qhH/e35UUHRSl44mxHzt5IRK2Kq5RFiBTiIgUFiUNq
AKdy3Lbvr7pNNAOIG4YvxEU2qwzhjbTHtcyd+9ObxwheBgI+sK7mi/t6hHmopHTW
EQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:37 2025 by rpki-client