Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: k6Pup+1qMOFXfQU88VNRh+OYC6D0OfTiW0iHgZo3mgE=
Subject key identifier: 9D:F6:C6:CB:D9:E8:E2:AF:3A:3D:69:DD:BF:D2:BC:25:67:5C:FB:15
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 01976F9A24A2D0291F31E7BB778EC16FD695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 18:01:02 +0000
Manifest this update: Sat 14 Jun 2025 18:01:02 +0000
Manifest next update: Sun 15 Jun 2025 18:01:02 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: twOyufzgjr8CO1upO3Gd/rTXtGrfk7npte/qg1Q9vjM=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:24:a2:d0:29:1f:31:e7:bb:77:8e:c1:6f:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jun 14 18:01:02 2025 GMT
Not After : Jun 15 18:01:02 2025 GMT
Subject: CN=9df6c6cbd9e8e2af3a3d69ddbfd2bc25675cfb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:eb:8d:a9:7c:25:46:89:68:e9:ac:27:fa:
eb:7a:b2:27:80:c8:b5:11:6a:db:03:0d:31:39:51:
1e:29:bb:65:b8:06:95:1b:af:e7:ec:f8:dd:3f:7c:
c9:98:34:aa:e6:4d:df:11:72:ba:d3:ec:a3:52:61:
3a:0e:ef:77:82:93:a0:95:b0:81:c7:96:4b:53:ba:
39:6f:c2:10:b5:d4:8e:eb:0c:09:15:4d:0b:4a:4d:
f5:12:4c:ed:08:7e:15:2b:24:d9:4f:fd:e6:c6:fe:
d5:83:cf:ea:05:6d:77:88:d2:71:9e:b6:39:9d:13:
25:cc:be:58:86:d4:6c:02:42:42:73:61:32:f4:c2:
2c:f0:4c:11:70:e4:58:6d:78:b5:0c:34:8b:4c:82:
86:50:f7:5b:0b:2f:92:d5:69:49:aa:b2:18:e4:88:
8d:e6:cc:60:36:6c:90:22:90:fe:d9:f2:ab:56:fb:
da:7e:b1:84:dc:a3:ee:32:46:40:f2:23:73:80:72:
39:50:1b:d4:bd:26:db:35:81:8e:54:ca:1f:de:76:
6a:aa:1e:65:b3:9f:3f:db:77:6c:63:30:1a:2f:66:
50:81:bf:df:36:f5:71:f8:a3:0b:61:4b:df:5c:3e:
83:41:9d:7b:21:95:3f:cc:b6:fb:56:ba:38:ef:54:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:C6:CB:D9:E8:E2:AF:3A:3D:69:DD:BF:D2:BC:25:67:5C:FB:15
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:e9:f6:d2:fe:b2:a9:f7:f4:49:c0:ed:97:1c:b7:3c:79:
ae:48:1c:43:66:df:fb:97:22:9f:46:71:bc:26:36:4f:35:e1:
a4:e2:d1:80:5c:76:89:b8:c7:c8:1f:79:88:bf:8e:a9:ab:ce:
a9:a7:b2:89:f9:cb:77:de:4a:c6:8f:a5:af:41:7c:d5:f8:89:
e0:55:de:87:69:0b:e7:86:e7:b8:8f:8d:8d:99:c9:76:ee:9d:
47:7e:6b:bc:b9:e0:07:cf:76:b2:a4:d4:9c:95:2d:d7:af:fb:
2d:80:52:ec:f2:09:ad:69:df:30:93:9b:f4:77:30:22:fb:4a:
e6:8a:fe:c8:ab:87:17:98:a9:fd:b5:89:c5:c5:06:a0:ac:e7:
1a:ae:0a:44:5e:59:f1:8b:4d:e4:bb:4d:fa:2d:68:ca:9d:0c:
70:4a:b2:c1:64:99:0f:1f:51:55:b0:98:85:a7:5f:a1:b3:fb:
7c:3d:37:ad:5a:fd:19:4c:09:f8:ab:c0:e1:c3:e3:e9:e3:f6:
a6:39:4a:c9:c2:d1:d0:c5:fd:78:f4:b5:6e:95:f8:b3:ad:2f:
c7:f9:f8:b0:9e:44:fe:3e:eb:1c:96:9f:16:64:6a:f8:d0:57:
3a:d3:57:cd:b3:c9:09:24:78:3b:fc:bd:62:c5:9c:7e:bd:1d:
8a:17:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:32 2025 by rpki-client