Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
File: C3A70AD7F32685733597C663E02CE28A3306F923.mft (raw, json)
Hash identifier: 2NlEbO/+atL2pAn1hFJf82Q+S7klGfTKKm+yF5xibuM=
Subject key identifier: 96:E4:DE:90:52:61:1D:A0:90:DF:F6:31:8F:01:F2:42:EE:80:AF:F8
Authority key identifier: C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
Certificate issuer: /CN=c3a70ad7f32685733597c663e02ce28a3306f923
Certificate serial: 39EE660CD8C284EADCE6CD07672482D72715D345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
Manifest number: 6E
Signing time: Thu 08 May 2025 16:07:30 +0000
Manifest this update: Thu 08 May 2025 16:02:30 +0000
Manifest next update: Fri 09 May 2025 19:55:30 +0000
Files and hashes: 1: C3A70AD7F32685733597C663E02CE28A3306F923.crl (hash: lbA1vTNt/pyzw3qOsAlacJMQub7RqMv8IK6cEW2uamg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ee:66:0c:d8:c2:84:ea:dc:e6:cd:07:67:24:82:d7:27:15:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a70ad7f32685733597c663e02ce28a3306f923
Validity
Not Before: May 8 16:02:30 2025 GMT
Not After : May 9 19:55:30 2025 GMT
Subject: CN=96E4DE9052611DA090DFF6318F01F242EE80AFF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:0f:93:a6:39:83:7c:ba:97:10:ea:55:16:
1b:c9:ad:a5:4e:38:3c:9f:24:18:9e:7f:fd:74:1b:
86:04:7d:88:e5:3d:77:11:82:84:11:30:83:4b:15:
3e:89:90:b7:ce:cd:4d:4b:b3:97:61:57:91:0c:d9:
7d:8b:5d:10:80:ac:4e:64:1a:0f:00:10:23:f5:b1:
e9:73:5a:5a:e7:0f:28:ec:75:c1:4e:19:5d:46:86:
60:eb:39:de:57:72:9f:55:1a:c4:f6:b5:70:0a:13:
10:29:4d:25:cc:16:85:b5:7a:ef:bd:f1:65:7c:73:
3f:b5:69:9b:3b:82:d8:02:89:67:8e:04:8d:ff:9d:
dd:fd:3e:a0:0b:d4:ac:95:ad:72:68:a0:a4:c9:ed:
e0:5e:a9:38:ca:99:6a:83:26:70:95:23:4f:d7:8b:
c5:04:d0:d5:d4:e8:48:a0:58:74:e0:e1:3f:d5:93:
33:e5:cb:6d:53:7a:8d:ec:b2:6c:6a:17:ef:cc:c4:
f7:a3:00:82:7f:dd:c3:5c:fe:ca:61:6f:31:fb:c9:
a8:cd:a0:27:da:c9:0a:36:8a:9f:95:d9:6e:e0:dc:
2a:e4:7c:b1:c5:76:25:8b:3f:77:b8:39:7d:3a:35:
46:54:86:52:dd:f5:2c:8c:f5:7c:89:1f:b9:57:d6:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:DE:90:52:61:1D:A0:90:DF:F6:31:8F:01:F2:42:EE:80:AF:F8
X509v3 Authority Key Identifier:
keyid:C3:A7:0A:D7:F3:26:85:73:35:97:C6:63:E0:2C:E2:8A:33:06:F9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6cK1_MmhXM1l8Zj4CziijMG-SM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fa1b8677-ea6b-4043-907d-59f4675f2977/0/C3A70AD7F32685733597C663E02CE28A3306F923.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:43:69:c9:2c:75:2a:86:52:ee:7f:b0:b5:c1:bb:14:ba:
37:75:e0:68:db:c9:a1:a3:00:cf:92:c6:6c:d2:74:8d:c3:e4:
cb:57:38:93:59:c5:0b:65:cf:7e:2b:dd:dc:4d:89:7d:bc:cf:
df:6d:b2:a9:c0:d8:ac:2a:fd:bb:08:7d:ab:44:b4:70:8d:f3:
99:c6:85:e2:1f:56:be:01:b8:04:e4:6b:e4:af:53:35:d3:81:
3e:94:19:62:31:1a:5f:75:9b:70:fa:34:9f:11:99:1c:d9:31:
45:47:7d:67:7c:c4:8c:2d:c9:71:3f:27:7b:7f:a2:b9:bd:07:
0b:9b:be:b9:da:14:99:4b:b5:17:d4:b5:ed:f3:f3:8f:f5:55:
23:4e:54:f2:6f:79:77:cb:a0:cd:5f:f0:df:92:99:a5:c8:c6:
b9:cd:54:c2:cd:e2:39:f8:d3:55:29:09:2a:22:3e:37:15:30:
ff:06:2f:b5:ae:2f:5d:7e:0c:fb:14:ba:72:be:8a:dc:99:aa:
77:32:93:2f:7a:7d:bb:7d:c1:22:00:dc:fa:b0:9c:12:55:fa:
40:9a:5e:34:a1:24:5f:69:f5:c1:f6:05:0b:5b:af:b3:80:ac:
56:07:25:05:3b:69:65:f3:6b:5d:0d:d2:79:ac:ff:6e:f3:e0:
95:fb:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:56:06 2025 by rpki-client