Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: 1lGDyxNIZHoVmCJLCYKBaoo6fz4QxW9gxFXbT5xzofA=
Subject key identifier: 1B:44:D3:37:83:BE:B7:41:18:7C:29:87:9B:3C:7D:FF:76:C4:15:6D
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 0197B745A85A6D1DD6BD3450158F951E1524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 04D7
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: Bziino4akKcnTd9XO4t70X8JRhh0shaK5QlPHYF4YJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a8:5a:6d:1d:d6:bd:34:50:15:8f:95:1e:15:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=1b44d33783beb741187c29879b3c7dff76c4156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:3d:f6:fd:71:10:19:f6:40:d0:49:e3:e1:
92:3a:da:a8:87:78:fb:e8:1e:09:8a:b4:06:5d:f6:
c4:7c:ea:7c:db:02:8b:85:20:29:e0:29:05:37:e3:
b9:31:a3:9a:1a:65:d7:b7:36:e8:b4:f3:a1:c6:85:
39:ec:dc:8b:2f:2a:d5:5c:8c:79:52:47:fe:7d:53:
cb:f2:db:8c:31:3b:7b:9e:39:db:fb:b6:b1:04:12:
cd:41:e0:e3:19:bc:7f:47:5b:0c:e3:41:c7:da:a1:
51:0f:6f:7c:cc:dc:2a:31:40:21:c5:4c:9f:f2:74:
7c:ce:d0:ae:75:75:bf:0c:51:9e:56:1e:02:07:77:
5a:22:13:09:10:a8:14:46:16:4e:25:e7:7e:e5:c3:
0e:e5:6c:b1:11:03:b0:53:95:2e:8a:eb:88:7c:2a:
ce:55:01:a3:ae:f5:40:2e:d0:54:20:ea:db:e7:f4:
c9:b2:f9:de:89:f3:b0:b9:bc:7b:20:41:fe:f1:a6:
46:fe:a0:66:98:74:58:9d:3c:01:a6:b5:fe:33:ba:
c5:e0:6d:59:27:d7:19:ad:52:e2:e5:f5:97:ff:23:
28:c7:5e:ee:e5:50:0e:ef:20:ba:7c:b0:2d:c5:da:
26:bd:82:e4:15:03:3a:bb:eb:89:0e:1b:d3:f6:b9:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:44:D3:37:83:BE:B7:41:18:7C:29:87:9B:3C:7D:FF:76:C4:15:6D
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:49:5f:1e:41:55:b6:c4:7f:c5:d9:43:8d:2a:29:49:89:
65:00:46:46:f2:72:9a:c6:50:32:cb:eb:8d:02:e5:40:6d:62:
08:dd:12:97:8c:74:c1:a0:57:fb:09:2b:3c:aa:5a:0d:2b:3d:
cb:62:82:e8:a4:a7:e3:64:60:c2:bf:8f:80:cc:c5:f4:82:a4:
52:42:cb:8d:eb:46:0b:7e:76:da:df:be:14:62:30:cb:7e:8f:
45:70:e0:22:47:82:a1:af:92:a2:6e:62:a8:e2:9a:7f:5d:e9:
ce:f3:78:ae:c1:36:18:d1:cc:1b:33:55:e8:a1:d4:0c:55:bb:
e8:e2:4e:50:c9:6f:66:4d:ea:5b:39:18:aa:43:67:1f:a4:8e:
e1:ff:4a:e5:d5:88:4c:df:a6:e5:7b:90:0d:ed:a3:6e:2b:66:
a2:8e:3c:53:c2:66:fb:a3:6d:38:41:97:7a:95:8d:64:8a:06:
71:f3:25:bc:3e:52:6e:35:2b:03:ac:d1:09:c2:d8:50:7a:35:
c8:a1:11:0c:97:b6:35:6d:f5:f0:31:ba:ae:2a:ef:1d:10:7f:
26:26:8e:3a:06:21:f2:eb:73:c6:9b:dc:d6:44:87:5b:4c:46:
bb:7d:33:a4:25:d8:0b:b6:3d:92:a8:ee:5e:af:f1:c8:12:45:
c1:25:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:35 2025 by rpki-client