Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: w8YoEGAOMZw/Tucd8it/+why6+PXAIzXEn8JDcOW/uY=
Subject key identifier: 8D:88:F4:9B:22:5F:C5:B8:D6:33:ED:67:D1:02:07:B3:30:49:F6:93
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 0197B8FD5BF24B68DF0252D629042DC8AB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 00:01:41 +0000
Manifest this update: Sun 29 Jun 2025 00:01:41 +0000
Manifest next update: Mon 30 Jun 2025 00:01:41 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: YTgRH4pW5CrLfWF/jeGshE4jofzX3oGVqjamZTecjOU=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:5b:f2:4b:68:df:02:52:d6:29:04:2d:c8:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jun 29 00:01:41 2025 GMT
Not After : Jun 30 00:01:41 2025 GMT
Subject: CN=8d88f49b225fc5b8d633ed67d10207b33049f693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:7a:c4:b8:e3:67:ec:5e:cf:4a:70:29:18:
08:fe:3d:9c:0d:b0:19:9b:80:65:fb:e0:55:10:9a:
9f:3b:f6:bc:2b:2e:ba:5d:1b:04:50:f0:e5:ea:cb:
9c:a4:ae:2b:01:f2:c6:65:f3:93:4c:3e:5c:77:fd:
95:d9:5b:f3:fc:3b:52:e5:f8:95:72:bd:24:66:39:
80:7a:6e:03:89:75:1f:9b:77:09:2b:34:22:2a:67:
01:86:90:c6:3d:74:66:8f:05:b2:a0:f2:48:87:85:
44:0f:93:da:e9:3a:ea:11:a2:06:37:d6:6f:c1:26:
85:6d:06:8f:56:3a:14:6d:38:14:03:26:23:51:e4:
8e:1f:33:16:4a:1c:c8:e7:ce:45:01:9d:7a:25:7b:
c3:72:e2:ed:4c:4f:08:ac:4c:46:9c:e6:d0:4a:b1:
cc:47:7c:8f:8d:56:38:5d:c8:4b:ea:64:18:e7:aa:
20:c3:ee:9c:5e:f8:00:d4:9a:b0:02:6b:3b:2d:98:
49:c3:a5:9d:38:8b:c6:77:24:db:1b:4b:e1:8f:af:
03:47:b0:68:84:dc:04:87:71:dd:cc:75:03:a4:ef:
42:23:02:12:24:87:77:17:9d:36:27:20:fc:91:01:
0d:9a:30:2f:6e:a0:b8:42:9c:8b:23:14:06:82:d2:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:F4:9B:22:5F:C5:B8:D6:33:ED:67:D1:02:07:B3:30:49:F6:93
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:f5:ed:2c:a5:2b:33:0b:c8:a5:d5:18:0b:dc:8f:fe:21:
19:a4:3f:de:1c:13:a6:4d:a3:78:47:48:df:53:0a:20:08:df:
c4:80:ce:d7:d3:61:6c:2d:97:82:8e:f8:d7:fa:f6:39:30:46:
5f:1a:33:0f:19:83:d7:4e:a7:58:c7:23:df:57:a6:7c:23:f7:
b8:98:4d:43:e1:9e:2e:04:16:9f:30:3a:de:55:ca:1d:cc:50:
a5:8b:95:7e:61:f9:4a:16:c3:0f:51:a8:ca:1b:7b:4f:1b:a6:
1a:12:17:42:3c:22:07:0c:b6:12:5f:df:ad:b9:4b:f7:54:73:
67:b2:02:0b:0a:7b:43:3b:ff:68:88:77:83:bf:d7:cb:36:9e:
cb:ca:24:b2:e3:38:71:2c:fa:1a:17:1b:bf:9c:70:34:75:e7:
f8:e6:cc:fd:8f:28:80:27:20:50:ed:d5:ef:b2:9f:6e:50:7e:
e3:0f:5c:a1:da:5e:60:a7:e3:9f:9a:97:9f:1a:0b:85:20:e0:
a9:33:78:b5:3e:0e:ee:3e:9a:27:1b:87:e2:a1:c7:11:b4:3f:
ea:f4:12:24:d6:09:7d:f8:c9:df:7e:5c:d2:fd:d1:36:e1:4f:
a4:7f:f8:2e:ae:49:2c:b9:bb:2b:b0:95:2a:22:73:8f:3e:9e:
41:e9:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:12 2025 by rpki-client