Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: Ozg+lfnhI2gJLS+qRKlbJblG3XblD0TCd626WSyZoG8=
Subject key identifier: 1C:EF:3E:27:F6:6C:07:44:3F:34:73:EF:C6:5C:3C:EF:E8:25:AC:80
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 0199221ED688F5384DBAB3383C6EB206BFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: ijFHUCOSXbmSm0fQ1obFwmykJ3uSdif1IAKkE1h/pZU=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d6:88:f5:38:4d:ba:b3:38:3c:6e:b2:06:bf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=1cef3e27f66c07443f3473efc65c3cefe825ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:33:b3:a9:c5:1c:a4:9c:fb:04:6a:2a:49:
7b:05:37:44:04:0e:d9:94:73:cd:8e:65:a5:a1:d6:
af:e1:24:d2:ef:cf:7a:00:32:41:92:f4:93:81:17:
18:75:68:1a:a1:2a:94:df:3c:82:79:69:91:3e:35:
e2:6c:d0:f3:65:b8:d4:42:94:b0:89:f3:3e:90:2b:
04:32:5d:af:9d:9f:d5:80:11:a8:d8:90:5c:93:9c:
26:86:f3:88:ad:2c:cd:86:30:52:84:24:d7:a2:fe:
51:22:3b:2f:fb:30:e1:27:07:31:bf:a5:46:de:bf:
ec:7c:14:c1:96:17:ab:19:6f:0b:58:2e:e3:d8:d4:
a1:74:32:2c:a1:e9:59:e1:8d:5a:21:3b:85:fe:90:
47:f6:0a:86:c8:62:d3:38:87:72:8e:66:05:d8:14:
4e:38:d5:40:24:eb:b1:fb:55:b3:62:fb:3a:c0:db:
65:1a:26:cf:7f:3d:1a:5c:f5:04:f2:66:c0:bb:0a:
a5:89:2f:b3:53:de:d7:f5:83:cc:d8:82:5e:f1:35:
2c:0b:8a:87:a2:f7:2f:6b:5d:c0:14:c6:3a:34:8f:
b7:e8:9c:8a:b5:19:60:98:c5:ff:74:20:fb:89:f6:
87:e6:94:ad:fc:53:5c:d1:ab:56:83:03:be:43:c7:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:3E:27:F6:6C:07:44:3F:34:73:EF:C6:5C:3C:EF:E8:25:AC:80
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c0:86:1d:a0:19:47:30:e9:b7:31:fc:04:11:57:4a:b1:66:
8c:71:9b:a4:04:14:72:e9:18:3a:2c:bc:20:0f:8a:bb:db:78:
cc:21:71:bb:e3:43:f9:40:5c:2a:75:85:62:ac:e2:81:55:d0:
f8:dd:c5:89:8c:f9:1d:05:e8:7d:f1:76:f8:ef:f6:40:9c:11:
fa:0a:70:c0:1d:52:2d:90:ec:20:80:5a:6f:fb:17:42:f6:92:
7f:ea:1d:d9:6f:49:cc:13:e9:89:94:ec:f5:18:c2:b8:6c:5f:
b5:92:50:7e:e7:10:c6:da:a8:bc:a9:2f:af:65:da:0b:38:43:
77:f9:a4:a5:12:19:82:01:e8:d1:53:dc:a0:d5:c6:8c:33:4a:
83:a4:e2:7d:ce:20:6a:9c:0d:68:10:c6:f1:ea:3e:a2:32:a1:
65:d7:b4:39:de:00:d0:53:75:00:e4:3f:58:88:78:a3:3c:48:
44:b2:3a:2a:d6:9a:cd:63:ed:00:06:2f:cd:09:30:31:d5:c0:
b9:c4:fc:7b:d9:8a:74:de:95:d2:cd:b3:fc:eb:4a:17:66:8e:
47:23:ea:b3:7d:f1:06:a4:a6:8a:1b:de:1d:1e:84:e6:ee:31:
ce:41:a7:04:b9:c2:34:45:57:d4:e7:41:52:26:96:3a:25:b5:
b6:f5:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:27 2025 by rpki-client