Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: CVeQko3sTLOsWyFhZlOXkMQYSsl6zUKKvZQ//paDZG8=
Subject key identifier: 70:59:77:C5:2B:2D:E1:C0:58:5F:A4:A3:45:D5:FF:F2:9A:35:27:AC
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 0199FE7E02B154C36C9A1A6A78D9A5CD8ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 0605
Signing time: Sun 19 Oct 2025 22:01:35 +0000
Manifest this update: Sun 19 Oct 2025 22:01:35 +0000
Manifest next update: Mon 20 Oct 2025 22:01:35 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: Bs7gaiGCmcVyAiAXrlI6nVmqD85QwE4Qyj7S46sKCZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:02:b1:54:c3:6c:9a:1a:6a:78:d9:a5:cd:8a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Oct 19 22:01:35 2025 GMT
Not After : Oct 20 22:01:35 2025 GMT
Subject: CN=705977c52b2de1c0585fa4a345d5fff29a3527ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:0e:53:f6:ae:bb:42:00:7d:65:8b:c6:f8:
e4:b1:0d:e9:5e:2d:3b:43:a9:b2:53:43:8f:ab:50:
2a:2f:f2:39:d5:03:c3:99:53:20:e9:0c:00:a1:01:
46:f8:3c:1c:3f:5b:72:dd:e7:05:00:2c:64:e1:57:
41:18:20:12:25:28:c2:3c:a4:1c:34:14:47:e0:49:
7e:3e:96:d0:6d:da:09:5b:3d:b5:9e:1c:51:43:ac:
b0:dd:b2:8b:b1:07:72:ef:01:54:98:c7:eb:72:6c:
6e:e9:17:b5:f3:0a:83:de:35:67:84:9c:29:e0:53:
f4:6e:05:75:5a:b5:d5:5c:9d:36:04:64:bf:2d:52:
bb:95:25:ca:1f:aa:fd:10:41:f8:a1:27:e7:5c:e6:
8b:e9:ba:3b:09:cd:34:b7:39:96:b7:4c:89:8e:5c:
a9:d1:e1:67:c8:19:36:89:72:52:22:3e:08:e0:2f:
01:17:4f:06:ec:d0:15:dd:59:f8:8b:5b:3d:d7:cd:
a6:45:b2:b5:20:bf:2c:17:3e:a7:8c:51:a3:c1:d0:
ed:4f:25:37:c2:de:49:05:09:49:15:ac:82:d4:61:
ce:68:b1:9d:7f:66:09:bf:6f:a3:c1:d8:34:26:7d:
d6:44:5f:28:22:fc:51:35:cd:12:16:e9:0f:fa:6d:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:77:C5:2B:2D:E1:C0:58:5F:A4:A3:45:D5:FF:F2:9A:35:27:AC
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:1a:dc:bb:29:b4:ca:bd:71:7c:78:4e:f0:1a:34:35:81:
76:9f:15:89:0e:4a:60:67:c5:72:a3:28:1a:cc:1f:a1:1f:fa:
30:81:dd:65:1d:63:e8:48:2a:14:4a:87:f2:d2:0a:52:95:14:
7f:6d:c8:53:0a:f2:ba:ae:ee:6b:10:6f:e4:26:28:fa:09:8b:
09:05:0b:0f:63:6c:eb:e4:f5:40:18:f6:f1:62:c0:7a:81:b6:
ec:4a:3a:cf:cd:8c:7b:9c:d9:ec:8a:90:a6:e1:e4:b3:17:9d:
50:34:a0:54:0d:b1:33:cc:31:b7:68:97:89:d6:ed:a1:ed:a4:
ce:77:76:79:ab:29:18:31:c9:5a:d2:c1:a9:8d:7e:3d:e5:fc:
d9:7f:a7:05:34:f6:d8:7e:3a:25:be:d8:ad:e2:03:93:53:88:
30:e8:5c:21:da:25:dc:fd:d6:48:88:c3:f9:47:0c:05:b3:9f:
61:0b:14:65:2b:f2:a7:63:c8:0d:5e:bd:d9:86:45:88:be:78:
ed:12:9e:11:7e:13:f6:31:e2:ec:5c:77:3b:26:38:58:3a:ff:
dc:b4:f8:6f:c2:9c:13:4a:fe:cc:d4:05:d3:65:85:1d:e2:93:
4f:cf:9f:3e:51:90:c5:9d:6e:a4:e5:f9:d8:66:aa:6f:6d:e8:
dc:c2:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:38 2025 by rpki-client