Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: 3ANHgedM6rkjYzMMrHa+XvBAjHyKR/rkJdBy6YVvNfw=
Subject key identifier: 5D:CF:75:79:8C:31:42:AF:FE:FB:3B:57:2A:2F:5D:06:43:67:A0:37
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 0198D4DFF251C5AC4F136AB5EC933FE39B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: t+qberXXVJPDdlZanfjrsau/Nc5XfJdvZ5atsPu/aRc=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f2:51:c5:ac:4f:13:6a:b5:ec:93:3f:e3:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=5dcf75798c3142affefb3b572a2f5d064367a037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:74:d1:83:b5:9d:b4:f7:98:9c:ea:50:2d:
eb:18:7e:a3:a1:00:b2:5c:6f:8e:c6:b6:ae:f7:cc:
cc:60:d3:8f:08:e8:da:db:fa:de:9d:bc:32:05:60:
6a:82:d4:e7:e4:e2:56:f4:a4:a8:61:91:be:1f:77:
11:6a:84:26:3d:8f:f1:29:2d:74:04:18:85:18:02:
ef:dd:9e:50:7e:d6:8f:d9:0b:c3:58:06:ac:78:94:
17:c1:45:61:5b:ff:88:1d:12:6c:dc:f0:7a:6b:73:
9e:69:ff:d8:4d:73:31:96:21:68:7f:07:d5:a0:e9:
6c:ad:ec:75:b7:02:7c:8e:08:eb:c1:bc:88:a4:6a:
f5:10:0c:c6:62:fa:3f:8a:11:d7:c3:5f:af:18:92:
ea:67:b0:cf:2f:95:a5:97:e2:16:69:05:55:73:37:
c7:b2:45:e3:db:5d:46:82:c8:62:28:c4:1d:d4:bd:
3d:1e:96:8e:b7:ec:a8:da:d1:47:4b:a2:f1:d1:59:
a8:bc:92:7a:3f:52:08:ec:81:0a:ee:d2:96:cd:1f:
ac:60:d4:6a:23:d6:88:9d:ee:3a:3a:d2:cd:a8:0b:
87:d0:23:92:ba:ee:dc:da:1a:eb:ae:d0:41:e7:6c:
fc:d1:03:f9:e1:27:77:20:f3:a4:e9:ff:62:e0:b3:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:75:79:8C:31:42:AF:FE:FB:3B:57:2A:2F:5D:06:43:67:A0:37
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:f7:66:94:7b:80:1b:8f:9e:f6:71:d0:76:4e:d3:96:14:
2e:ed:34:23:ca:b2:5e:94:a4:e2:9c:8b:6c:b2:05:8c:26:ed:
57:97:f8:91:92:c1:ad:c7:36:d5:4f:93:47:44:5b:95:3a:af:
18:23:e7:77:a5:28:d3:9f:68:40:23:0e:31:9f:1b:e0:02:1d:
be:bb:2d:5e:34:58:bc:c3:d9:e0:f8:85:5a:c6:57:5d:fc:d7:
63:a3:93:20:b6:86:f7:00:db:c4:f5:46:ec:17:61:98:00:ac:
db:fb:e9:45:66:d3:c1:05:b0:98:32:a6:3a:20:eb:09:99:3b:
21:b8:1b:21:3a:b6:a5:66:6c:24:ef:42:0c:19:bf:ab:10:0b:
ea:46:6d:dc:a4:74:7c:f4:6c:c8:70:89:3c:9f:52:3a:0f:5a:
46:ca:b8:90:48:e4:8b:95:e0:dd:9f:e0:10:f1:d8:7b:ef:ab:
23:ee:7c:c7:84:fc:e2:12:87:4c:9d:8f:4d:60:48:6f:4b:5d:
e5:c6:ef:f9:3f:12:ff:f1:8a:91:71:b5:2e:93:37:17:5b:5f:
9d:00:14:06:b1:b2:98:38:71:34:53:ed:87:7c:53:35:f1:89:
e5:7f:18:01:0e:f6:2d:53:d5:78:38:cb:51:08:5a:76:26:ec:
75:71:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:41 2025 by rpki-client