Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: Lf7p0UQFJ+ItwYFLRteHPx+Bz3DaJMPqCIYKZ8SsghA=
Subject key identifier: 73:5B:B7:02:79:39:B4:94:1D:94:55:36:9C:69:88:CD:59:3C:F9:D1
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019A4D73BAA5D2816ABB55EBA39532D8A364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:21 +0000
Manifest this update: Tue 04 Nov 2025 06:00:21 +0000
Manifest next update: Wed 05 Nov 2025 06:00:21 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: dw7OKhggzdCWoSFojv3MGII0PWqMHoBdxg+d4rlCttA=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ba:a5:d2:81:6a:bb:55:eb:a3:95:32:d8:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Nov 4 06:00:21 2025 GMT
Not After : Nov 5 06:00:21 2025 GMT
Subject: CN=735bb7027939b4941d9455369c6988cd593cf9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:cc:f0:7a:3b:c9:c5:b6:b3:9b:86:19:0c:
cd:10:2f:ca:74:82:1e:9f:25:ca:72:55:92:2a:e6:
ae:2f:91:04:35:e7:23:5d:e8:5d:4b:a7:26:f9:33:
b0:bb:86:04:0d:f3:a5:ab:84:c1:78:e0:57:c9:80:
06:71:60:df:4a:ac:48:df:6a:b3:bb:9d:9d:69:f3:
5f:bc:8a:ce:e0:71:46:18:4a:af:6b:b2:3f:90:18:
55:e8:c4:77:75:51:9f:42:88:be:c4:eb:20:60:52:
2e:ae:5c:af:1c:07:ef:1a:88:1f:13:9b:66:6e:73:
12:db:3c:03:95:b4:6c:49:db:d7:17:b3:ae:82:25:
8b:82:a1:d7:6c:86:c8:d2:b7:ed:cd:42:62:42:4c:
56:df:ef:1c:a7:6d:51:99:bc:3d:3f:5b:f9:1f:5e:
80:6d:f7:17:a3:f9:3a:c2:fc:f6:a8:c9:36:5b:ed:
2c:7f:18:c7:e8:e8:5d:74:a1:a1:ca:f2:53:de:0a:
df:36:18:c4:1e:ed:0b:dc:df:87:6b:f4:a4:6a:ea:
8e:c3:04:87:32:ec:a5:07:16:8b:51:a5:f5:54:a8:
3e:1a:b0:41:ee:5f:ce:d2:a0:a9:2d:1a:ae:3a:62:
f9:9a:f2:d9:53:99:36:2e:a6:72:97:95:7a:ef:4c:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:B7:02:79:39:B4:94:1D:94:55:36:9C:69:88:CD:59:3C:F9:D1
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b5:63:13:92:64:c4:56:e1:0c:ea:99:93:13:37:fb:21:9d:
03:8c:a4:b8:2d:b1:94:db:2b:2f:c2:48:fa:47:f6:ae:28:a9:
e0:db:22:cc:1e:ec:b5:56:cd:2a:11:80:58:1c:92:de:6a:df:
09:ec:2a:2d:23:9f:ee:09:45:5a:a3:41:33:7d:aa:ff:35:28:
b7:5b:1b:3b:dc:09:90:46:73:94:1d:d6:cf:55:af:34:b7:96:
80:7e:42:1c:6c:f2:a0:ec:04:b4:0f:73:66:fa:18:8b:89:3d:
e5:62:35:82:65:9f:b7:6b:31:eb:11:19:41:92:59:df:70:29:
04:11:7c:2d:9c:64:f4:8c:1b:0c:38:74:b8:1d:4e:69:dc:c2:
c0:fb:e2:a2:c8:4b:d2:1c:3b:3d:1f:38:3f:60:68:3d:d2:57:
58:14:05:f3:45:43:28:8e:6c:3d:fc:d7:41:ac:ee:83:59:aa:
43:85:7d:3b:db:f3:0b:a6:7d:f2:23:55:0c:b2:88:3c:ed:c8:
e9:fe:69:bd:ba:4c:79:d7:2b:a4:63:c6:64:b0:22:36:40:34:
b1:e0:52:e5:2b:3c:02:a9:25:28:4c:bd:9a:4c:d8:41:c3:16:
ee:9d:b4:a1:2f:09:ae:24:61:0d:5d:3d:eb:82:27:61:ce:52:
ef:6b:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:02 2025 by rpki-client