Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: hDDRBDLEges/dLRJW6oRY9q2VgoArE9xVYV801Tlqds=
Subject key identifier: AF:CE:20:19:BF:1A:97:D4:45:E0:B6:F0:D9:86:45:9A:BA:AF:BC:AF
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 01974AE87A259BF5D857DC591EC6048C2CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:38 +0000
Manifest this update: Sat 07 Jun 2025 15:00:38 +0000
Manifest next update: Sun 08 Jun 2025 15:00:38 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: nl8Crwu0RttyFS/YpWaS4X682TZkAgt+/nZI6MK0kjA=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:7a:25:9b:f5:d8:57:dc:59:1e:c6:04:8c:2c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jun 7 15:00:38 2025 GMT
Not After : Jun 8 15:00:38 2025 GMT
Subject: CN=afce2019bf1a97d445e0b6f0d986459abaafbcaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:23:f2:7b:73:93:d4:ff:08:37:ba:bb:83:
36:d3:82:a2:22:3e:d9:67:5d:e5:56:89:79:fb:ab:
a7:06:6f:4b:6a:48:a4:56:9e:8c:d9:c3:aa:db:8b:
4f:15:8b:8b:38:1a:ed:e5:39:c6:fc:98:fa:d4:10:
86:42:71:4e:7e:18:7e:3b:9c:88:36:a4:c6:23:97:
a9:b8:e4:44:3d:f2:c7:bf:64:36:3d:f3:b0:b7:4f:
f8:78:47:68:de:20:2a:5b:e0:e5:ea:86:1a:bc:45:
97:57:80:40:3f:71:16:7d:3e:85:ad:db:4b:d8:e7:
7f:59:70:45:6c:f2:f1:e3:b0:e1:b5:61:9f:8d:c1:
b6:c8:04:05:2d:89:ea:21:b0:3d:ac:e3:3e:b8:b7:
48:f0:c9:08:1f:c2:f4:df:3b:d5:a7:a1:1b:b7:ef:
2e:88:f7:3d:7e:d8:9c:84:0a:09:78:06:25:b0:77:
90:68:ef:26:35:83:be:0c:d5:e5:8f:60:d6:dd:6e:
f7:34:34:c5:f2:1a:fa:92:18:02:71:53:89:2e:0f:
c6:64:d2:0c:bd:24:0d:4d:48:e3:cb:76:e4:c7:55:
f3:c5:de:34:24:08:aa:2f:b4:2a:96:16:0f:29:6e:
d3:da:41:21:bc:d5:90:31:c0:84:da:61:6e:6e:d2:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:20:19:BF:1A:97:D4:45:E0:B6:F0:D9:86:45:9A:BA:AF:BC:AF
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ed:5d:62:a3:5e:ba:c7:32:59:e3:a1:0a:df:eb:26:d9:2d:
e6:36:69:70:30:54:e0:0b:64:03:59:4e:fe:a0:48:f1:52:0d:
6f:36:78:2b:75:25:c1:0c:e2:ae:d5:78:35:9c:b0:75:fb:96:
fa:2f:f7:86:1a:63:3d:73:e2:2e:31:93:ed:49:68:81:ef:e4:
bc:c6:c1:c1:f4:3e:cc:6f:e4:a5:2a:b4:2e:4c:18:90:90:f3:
99:38:d6:d2:de:96:3e:2c:d5:44:a9:06:58:15:1d:45:c6:fa:
6f:78:2a:fa:ef:29:aa:5d:a1:d0:c6:6b:39:9a:2c:b0:04:46:
f8:58:8b:3d:f4:61:39:59:52:94:8d:4f:df:da:10:20:f5:2b:
b4:12:f0:af:cc:28:2c:a7:57:8e:ea:83:0f:e2:f6:85:be:1b:
c1:ac:6a:78:d1:4e:ac:d0:b4:f0:fc:73:68:cc:b9:9e:29:70:
65:59:8e:07:b1:61:b8:67:76:29:c5:be:cd:a7:00:2e:8b:60:
ed:5a:1b:f6:ec:eb:91:a7:97:5e:94:63:b6:82:96:78:c5:a7:
43:d2:f2:a8:5a:c7:87:54:57:ec:00:d5:36:8a:b9:d8:6e:6f:
da:02:77:62:df:34:5f:a2:f1:bf:db:89:fe:e7:71:ba:a2:5d:
12:09:64:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Holm/XYV9xZHsYEjCziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWIzOGUzNGJiZTE3ZTE1NzcyNzA2YzdhOTYxYTg1ZTVk
MThiNWMwHhcNMjUwNjA3MTUwMDM4WhcNMjUwNjA4MTUwMDM4WjAzMTEwLwYDVQQD
EyhhZmNlMjAxOWJmMWE5N2Q0NDVlMGI2ZjBkOTg2NDU5YWJhYWZiY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojsj8ntzk9T/CDe6u4M204KiIj7Z
Z13lVol5+6unBm9LakikVp6M2cOq24tPFYuLOBrt5TnG/Jj61BCGQnFOfhh+O5yI
NqTGI5epuOREPfLHv2Q2PfOwt0/4eEdo3iAqW+Dl6oYavEWXV4BAP3EWfT6FrdtL
2Od/WXBFbPLx47DhtWGfjcG2yAQFLYnqIbA9rOM+uLdI8MkIH8L03zvVp6Ebt+8u
iPc9ftichAoJeAYlsHeQaO8mNYO+DNXlj2DW3W73NDTF8hr6khgCcVOJLg/GZNIM
vSQNTUjjy3bkx1Xzxd40JAiqL7QqlhYPKW7T2kEhvNWQMcCE2mFubtIVywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/OIBm/GpfUReC28NmGRZq6r7yvMB8GA1UdIwQY
MBaAFAvrOONLvhfhV3JwbHqWGoXl0YtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2Mt
OWI3OTk3NDgxZjcyLzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNzMxNDYtMmM5ZC00NWNjLTg1Y2MtOWI3OTk3NDgxZjcy
LzEvQy1zNDQwdS1GLUZYY25Cc2VwWWFoZVhSaTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+1dYqNe
uscyWeOhCt/rJtkt5jZpcDBU4AtkA1lO/qBI8VINbzZ4K3UlwQzirtV4NZywdfuW
+i/3hhpjPXPiLjGT7Uloge/kvMbBwfQ+zG/kpSq0LkwYkJDzmTjW0t6WPizVRKkG
WBUdRcb6b3gq+u8pql2h0MZrOZossARG+FiLPfRhOVlSlI1P39oQIPUrtBLwr8wo
LKdXjuqDD+L2hb4bwaxqeNFOrNC08PxzaMy5nilwZVmOB7FhuGd2KcW+zacALotg
7Vob9uzrkaeXXpRjtoKWeMWnQ9LyqFrHh1RX7ADVNoq52G5v2gJ3Yt80X6Lxv9uJ
/udxuqJdEglkGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:33 2025 by rpki-client