Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: 4Xf9AkHZcR5zc9uglOaKZabZmUH5v01fZppX5X+sklc=
Subject key identifier: 27:E7:9E:28:8F:30:C0:F3:65:0E:44:F2:2C:F9:BF:39:DF:F4:13:E6
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 0198D515B7FF590DB17384D8A25631715E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 056B
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: s7E1zTvLEfwzeEVUNZ0EIuql/7Sz32NJ6dh4KUY0Qlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b7:ff:59:0d:b1:73:84:d8:a2:56:31:71:5e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=27e79e288f30c0f3650e44f22cf9bf39dff413e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:9b:d3:27:49:b8:ae:6d:6a:ff:62:15:cc:
fd:a2:4b:ab:be:38:0d:6c:b1:fc:6d:46:8a:34:59:
fc:f5:03:65:90:81:17:4e:22:c6:9d:ac:b5:78:75:
00:90:6a:aa:16:dd:37:13:a6:e6:f3:cd:3e:ca:7f:
5c:b6:d9:a3:8b:33:76:7a:59:ec:0c:06:53:d3:6f:
25:45:93:e0:c1:02:e7:2f:11:92:e4:e5:00:6a:d1:
f2:fd:9f:b2:e3:0d:aa:17:39:45:f4:9c:3a:2d:38:
f5:bf:a5:ee:8b:b7:b8:36:a1:4e:0a:88:10:f9:9a:
07:ba:14:fb:b4:a6:c2:0b:98:02:07:e9:f9:00:de:
56:7a:85:34:f1:c5:53:07:ef:90:7d:43:3a:12:36:
23:79:fc:64:11:9c:b3:7e:9b:c3:49:04:37:dd:0e:
50:21:75:fb:3f:0d:20:b5:bd:9c:24:07:9c:24:45:
12:64:5d:5e:67:fc:06:ea:13:70:ce:15:11:ac:b4:
af:9b:22:69:95:8a:c3:29:7e:9b:e8:56:dc:ba:bd:
f5:6e:67:40:11:c7:62:82:06:79:d0:97:f2:d5:41:
b1:b2:c8:23:db:5e:2f:0c:7f:0d:59:0d:db:79:df:
5e:54:a2:5b:ff:26:4f:81:e3:04:72:eb:3f:94:73:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E7:9E:28:8F:30:C0:F3:65:0E:44:F2:2C:F9:BF:39:DF:F4:13:E6
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9c:6e:51:61:e0:00:12:91:d1:4b:52:68:c9:d9:70:48:0b:
60:72:bc:a1:f9:0d:28:ec:ba:cb:24:d8:80:ce:df:34:78:4a:
9c:0d:2d:f6:90:4b:6e:40:91:77:b6:59:c1:59:82:e7:7e:85:
51:70:f7:f4:65:9a:32:64:c3:0d:83:fb:a2:a0:cc:e3:84:90:
9a:8d:3d:10:24:9d:63:1f:71:dd:c4:30:8c:b5:a2:5e:3d:78:
a5:f3:9d:ae:bc:b6:0f:ee:b5:98:de:e0:d9:67:43:67:ff:76:
a6:55:3e:0a:dd:60:2d:0d:4e:aa:63:ad:e1:81:71:e0:3b:2b:
27:b6:4b:37:66:2d:22:aa:9b:ba:5b:39:ee:93:62:59:2c:99:
77:db:67:ae:f0:da:09:b1:8a:b7:bd:44:15:af:13:2e:c2:67:
2c:f9:9c:24:61:d6:6a:37:22:79:d8:a1:5a:8b:4f:cd:cd:07:
26:9a:a1:32:58:a3:06:0f:20:ba:88:e3:73:14:f7:73:7b:48:
8f:c0:7e:11:3b:5b:a0:44:b6:b7:23:7b:ed:b3:6f:35:ae:34:
3f:5d:c1:55:a7:35:3f:3a:fc:4b:10:28:a5:83:bd:a4:24:a5:
e5:3d:34:1d:12:48:07:a9:d3:48:f5:d5:3a:18:46:3a:68:1e:
eb:1a:ed:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:13 2025 by rpki-client