Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: 3ghRzMpYR+IKjQ5qRjTmmB4sOghhxOWJGea2wrtzyg0=
Subject key identifier: 06:6C:21:5F:A8:46:4E:38:A6:6E:05:43:5A:9D:E6:65:F4:89:94:AD
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 019653B76237FCA683A65286C12B55381C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:49 +0000
Manifest this update: Sun 20 Apr 2025 15:00:49 +0000
Manifest next update: Mon 21 Apr 2025 15:00:49 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: EGYZLxe/ReWD73cb04/XkTL2CIknBBEdOWGnbOHls0I=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:62:37:fc:a6:83:a6:52:86:c1:2b:55:38:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Apr 20 15:00:49 2025 GMT
Not After : Apr 21 15:00:49 2025 GMT
Subject: CN=066c215fa8464e38a66e05435a9de665f48994ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:7e:9f:59:9e:27:83:43:c0:38:41:90:8a:
70:fc:67:4b:91:87:05:5d:54:f7:aa:8b:52:14:75:
5c:2a:9e:ea:02:b5:63:dd:23:6e:a0:7e:40:25:8f:
47:c9:0d:50:4c:5e:5d:07:ae:49:f9:4c:30:35:25:
27:1d:ba:d7:8c:7c:03:51:52:0b:2f:dc:2d:6a:9d:
3c:c1:a5:21:09:61:99:83:3d:05:43:d5:f1:bc:11:
d4:0f:e5:ad:4e:92:af:87:6d:f8:df:8b:9e:c0:3b:
be:fe:f5:52:ee:29:0c:76:e3:ab:56:ac:be:b3:50:
c5:78:89:9e:ed:28:19:62:e4:9b:b3:cf:28:f5:3a:
04:05:22:fa:ef:80:49:ab:29:71:fe:bd:88:20:fa:
7d:11:a3:e4:95:4b:10:db:a4:80:f8:ec:21:79:1e:
6a:ba:27:ff:05:28:b3:4b:5d:2f:56:63:fa:ad:81:
a4:1b:48:11:a9:46:16:59:cd:c7:ea:af:96:23:c1:
9f:f8:0c:d7:f0:87:e6:4c:c1:fc:2b:aa:1d:bb:93:
57:23:67:15:65:dd:89:18:50:de:87:9e:51:a5:79:
ba:62:f1:b3:1d:7e:38:9e:71:16:5b:73:ed:3f:a2:
0a:f8:96:e1:16:6c:76:fe:22:cb:35:92:d3:ce:32:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:21:5F:A8:46:4E:38:A6:6E:05:43:5A:9D:E6:65:F4:89:94:AD
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b9:11:c2:56:da:df:5c:9b:a2:3a:2a:e6:b9:6e:45:af:c8:
9e:6a:97:c0:81:d9:df:fe:56:cd:45:8b:d5:70:95:3a:02:62:
35:32:75:0e:f2:10:7e:a8:c3:40:6c:cc:bd:76:61:b3:85:ad:
48:5b:30:e3:34:3e:3f:74:b8:37:17:84:de:25:25:83:ee:2a:
ba:b1:eb:e2:fe:39:c7:bf:59:7b:61:c4:5c:c1:66:bb:18:cc:
bb:ba:b9:f6:c4:12:cd:9f:1b:27:1d:7b:7e:7c:ce:f5:6a:32:
63:87:85:55:dd:39:59:29:fc:34:fd:d2:f9:79:65:f5:df:47:
f3:6a:98:89:84:b8:1c:b5:55:28:3d:47:e7:ef:ba:ed:4a:47:
16:7b:8a:a1:43:8c:6a:db:74:4d:54:66:06:3f:2e:43:2e:70:
89:d1:db:30:54:94:aa:e8:e5:99:16:2f:84:8e:a1:3e:68:00:
be:87:87:b3:b6:51:73:51:bf:22:8d:ec:17:5b:5b:d7:64:7c:
0e:93:5d:40:10:75:50:6d:6a:1f:6d:52:8c:27:72:8a:03:13:
23:2d:ec:2e:15:c0:7a:00:a5:de:7f:59:f3:74:00:a5:d3:7a:
63:c8:b4:e4:7a:50:b6:3a:11:8f:aa:a9:10:80:70:8d:89:d9:
ea:8b:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:33 2025 by rpki-client