Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: M5vDLx03OGgG/sax4og4LJkPWr//HkyQIqs43iAXG7Y=
Subject key identifier: CD:C5:2B:30:49:9F:49:88:49:58:2A:17:C5:31:AB:78:04:2D:9A:99
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 0198744FB113F9B8B77EC91D8B4B9AA4C4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:00:36 +0000
Manifest this update: Mon 04 Aug 2025 09:00:36 +0000
Manifest next update: Tue 05 Aug 2025 09:00:36 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: KBa6cqBYAMH9nH/Fk53HhT8QRs8XdozEONyGWT1nUec=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b1:13:f9:b8:b7:7e:c9:1d:8b:4b:9a:a4:c4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Aug 4 09:00:36 2025 GMT
Not After : Aug 5 09:00:36 2025 GMT
Subject: CN=cdc52b30499f498849582a17c531ab78042d9a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:f9:d2:5b:64:10:36:58:15:48:21:b9:da:
ff:17:7e:43:c3:bc:6e:fc:ba:5f:90:3b:b6:7d:08:
9e:03:c1:54:46:61:1e:08:62:0d:d8:69:67:69:f9:
7f:ac:da:d0:59:41:67:43:2d:11:ce:f7:f3:7e:59:
af:3d:c6:20:13:f8:c6:97:0e:c6:ef:a7:09:62:34:
91:20:6b:d9:d3:66:8e:a4:91:b7:1c:7b:a8:d4:03:
c9:01:b0:d6:95:3c:ae:2b:1c:36:2a:c7:6d:0f:8b:
ed:dc:02:c9:4d:18:82:9b:06:cb:9b:b7:e0:e7:35:
3c:de:40:5b:b4:0c:fd:6a:ba:64:b5:c3:1a:a5:5d:
8d:1b:98:2c:dc:b7:56:d4:d5:ee:06:d5:5a:5a:30:
d4:2f:50:0c:e7:41:26:bb:47:28:1f:8e:1d:73:82:
8e:0d:40:09:dc:59:25:77:df:c8:c2:9f:99:3f:87:
b8:22:bb:9c:23:6f:05:18:f0:a1:72:4e:f7:19:29:
54:da:c1:8e:8e:5c:ca:1e:f1:69:cb:5e:40:dc:06:
e1:05:18:78:cd:dc:a0:48:f4:1a:e2:82:aa:90:41:
70:32:32:29:5f:9a:74:ce:21:6e:b0:e1:57:c6:7d:
83:15:1c:d3:b4:43:2e:a2:bd:bc:64:0a:80:a0:1e:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:2B:30:49:9F:49:88:49:58:2A:17:C5:31:AB:78:04:2D:9A:99
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:ec:a2:7c:92:9b:79:52:b5:77:f9:03:38:ac:ad:5c:8f:
3e:d0:80:20:64:f4:26:28:c3:0f:6f:e2:de:c0:eb:7d:ef:78:
4f:ed:94:2a:ec:28:56:97:c0:0a:0a:af:ff:f7:b9:60:ea:31:
ec:02:4b:11:8e:94:6e:e9:91:54:15:65:e4:54:3a:98:88:b0:
77:dd:7b:d5:24:70:59:12:de:bb:90:0e:37:81:2e:d5:08:29:
75:dc:c6:1f:6c:eb:a6:70:ec:30:a9:c1:ef:e9:ab:09:13:21:
f4:26:c5:18:c1:80:07:cc:1d:e7:79:d0:48:8d:e8:bd:55:d2:
46:cd:b1:23:3b:c5:8a:c2:f1:d1:f9:dd:be:8a:9c:a0:95:1a:
b7:81:b3:24:db:d4:9c:a8:6e:d0:5d:84:ca:ae:22:f9:8c:2e:
32:da:44:a3:57:b2:9e:f2:9e:f9:5d:0a:d1:85:d8:37:d5:e5:
84:fb:b8:1e:48:a1:33:cc:38:0a:04:2b:c6:d8:99:42:cb:b9:
e9:37:78:f9:90:6e:45:ec:8a:4f:a2:c7:a2:e3:c6:84:f6:55:
3f:84:16:2b:0d:1e:34:cb:b0:4e:bf:1c:d0:81:d2:1a:e5:3a:
9e:8b:3c:41:a5:31:87:5e:66:05:91:ab:2e:05:2a:d0:0c:ab:
31:8a:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:20 2025 by rpki-client