Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: w6Gl4baAJ9AAl6DLJhS31E6y9k6yiPlEq+2Z0hfK3nI=
Subject key identifier: 45:DF:04:81:DA:CA:D6:9B:5E:4C:55:36:67:D3:F5:45:3F:02:BE:9C
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 0196AE7AE3F6E98E65CB66AB042DA0D66359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 06:00:11 +0000
Manifest this update: Thu 08 May 2025 06:00:11 +0000
Manifest next update: Fri 09 May 2025 06:00:11 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: ZvW62HVodQAnPQ+QSD71DnZbaePtik3Z+TIf9HoOveA=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7a:e3:f6:e9:8e:65:cb:66:ab:04:2d:a0:d6:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: May 8 06:00:11 2025 GMT
Not After : May 9 06:00:11 2025 GMT
Subject: CN=45df0481dacad69b5e4c553667d3f5453f02be9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:ba:70:a7:b8:1b:10:1f:c0:d1:0e:72:fa:
35:14:a3:29:a0:94:d9:12:ad:51:ed:0f:2a:f9:5d:
2d:6a:95:11:59:11:83:e1:31:0d:54:51:73:70:c7:
29:15:01:07:f8:56:5a:39:73:1b:c5:f0:7e:05:47:
38:be:f4:a5:5e:07:b2:2f:49:a7:8e:70:a6:d2:1f:
99:32:c8:0a:d1:6b:34:70:20:d8:51:e2:95:84:f8:
67:fc:70:a3:07:b6:a3:0c:c5:e0:78:65:e9:dd:ae:
7b:45:f1:dd:9b:02:db:a7:a6:2c:d8:2f:7f:57:86:
65:9b:f6:c3:25:75:b6:62:b9:d9:76:78:c9:7b:ed:
d0:54:9f:97:b1:45:94:2d:8b:58:fb:39:d8:fe:9a:
81:e6:0b:95:38:3c:96:9c:e5:3a:35:01:b5:ec:92:
63:22:ca:f2:15:1a:54:10:11:2c:91:32:73:b7:00:
f5:16:d5:4b:ad:b4:de:6a:8d:5f:b2:c3:6b:9d:e5:
5e:15:e3:2d:ba:a4:d1:f7:00:b1:a7:32:33:85:29:
c0:76:53:eb:5f:dc:78:50:40:df:f6:e2:7f:94:f2:
42:80:31:bd:03:9f:8e:e3:c9:17:63:46:09:e4:8d:
89:47:f8:ae:d4:4c:7a:24:2f:41:4f:b4:c9:6b:a5:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:04:81:DA:CA:D6:9B:5E:4C:55:36:67:D3:F5:45:3F:02:BE:9C
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:68:e3:d5:cb:8a:19:64:f7:bf:3c:5e:aa:45:d5:35:50:
be:29:80:2b:d9:2d:eb:83:9a:e8:31:cb:2d:aa:f3:fa:1f:e3:
82:7f:34:d1:60:0f:29:e3:46:da:1c:3d:77:cc:82:68:8f:0a:
3e:a2:03:5d:ec:36:22:d1:f4:17:75:0a:5e:e6:93:22:7e:7f:
54:94:18:00:01:4c:80:c3:b9:51:6f:4f:79:7c:c5:37:b9:ff:
00:e5:fe:92:64:a4:1f:80:65:a0:15:f8:c3:4c:c6:a8:5f:be:
35:b1:a4:9b:7f:87:de:61:58:cf:21:d1:01:b6:64:c5:a0:86:
3b:31:6c:7c:e0:8a:cc:a8:9e:58:43:7e:a7:d4:ab:60:24:5d:
e3:75:50:e0:fc:73:d7:29:da:1d:d1:bd:af:4d:f7:34:ee:db:
98:bc:91:f1:5e:09:d4:2b:82:dc:49:c5:54:12:8c:98:93:1a:
69:ef:42:0c:78:ce:0a:32:df:a7:ee:e5:1e:dc:25:75:90:2d:
be:09:32:82:9d:76:4d:06:16:0b:54:35:5f:59:c5:cb:f9:01:
a0:1b:4f:22:7b:90:85:73:9c:15:bb:e3:16:77:6f:eb:d0:65:
18:82:27:96:84:7e:7f:5c:94:b6:5d:96:0d:e6:c8:1e:eb:a9:
3a:13:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:48:44 2025 by rpki-client