Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: Lxp5RN4HQAfEctK02KUOxw6uCxQT8z3jh7LfpBaHLfA=
Subject key identifier: ED:E7:08:5B:D6:51:31:61:13:65:93:A1:3C:73:84:3E:68:54:17:54
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 0198820C18A07DF23C06F44E92B6D7452959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 0540
Signing time: Thu 07 Aug 2025 01:01:27 +0000
Manifest this update: Thu 07 Aug 2025 01:01:27 +0000
Manifest next update: Fri 08 Aug 2025 01:01:27 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: k4Lts/YOf2sdfw9yoltPHNEEjdwpMDFMDBD6FDmLP48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:18:a0:7d:f2:3c:06:f4:4e:92:b6:d7:45:29:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Aug 7 01:01:27 2025 GMT
Not After : Aug 8 01:01:27 2025 GMT
Subject: CN=ede7085bd6513161136593a13c73843e68541754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:b8:58:2d:60:19:37:c7:40:d6:b4:83:01:
23:aa:59:0a:36:8e:02:64:95:59:79:88:8c:fb:38:
be:81:44:18:07:95:18:3c:3b:81:9a:e4:9b:64:79:
07:3c:9d:76:75:01:39:f4:f4:a4:1e:3e:61:b0:ac:
82:21:bb:f8:2f:61:f4:a0:90:55:8a:3a:6e:56:ac:
7b:8d:d7:6e:95:87:f0:2a:3f:85:88:c9:71:a6:32:
2d:6c:8d:4c:f6:da:0a:10:d8:0b:2b:61:7d:c9:79:
61:2c:62:13:ef:b1:44:ca:cf:32:30:da:54:05:a4:
ec:97:55:9d:63:91:42:d5:81:93:71:e9:a8:45:8c:
04:7c:02:dd:45:79:04:47:f0:ed:c3:9f:f9:d2:53:
3d:eb:86:86:df:31:c5:22:7d:9b:1b:d1:d5:b4:ae:
7e:2f:4c:ef:d9:8e:0d:b0:7a:eb:d2:48:a1:1c:dc:
28:00:31:b0:d6:d7:96:61:36:af:5f:89:c5:75:bd:
bd:c4:c0:53:f8:25:a9:4f:d6:20:28:29:fa:0a:21:
ad:52:9b:33:1f:d4:b0:79:49:c2:dc:58:2a:25:6e:
cc:3a:29:c2:f4:bf:11:f9:e7:0e:f9:11:03:80:69:
a0:d5:0f:44:ac:dc:48:ed:ba:ff:26:ca:c6:b5:7f:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:08:5B:D6:51:31:61:13:65:93:A1:3C:73:84:3E:68:54:17:54
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:de:b3:1f:f6:ad:52:01:99:d7:72:fc:5d:34:b9:25:cb:1f:
23:ca:c8:fa:c1:56:f6:48:43:0a:d4:e2:b1:48:49:20:3b:9b:
ba:42:f1:fa:13:52:ab:ce:01:6d:57:3a:da:2b:2c:c3:fe:46:
09:22:af:50:d2:15:00:52:03:3e:70:62:8c:1c:a1:a9:b0:c4:
b2:96:3c:4f:15:d1:c9:b3:8e:d9:12:5e:8d:26:85:ac:55:3c:
11:b3:d6:d0:c9:0f:67:b8:30:c8:46:25:f0:8b:33:33:e7:90:
d2:45:2d:65:3f:09:23:3b:9b:05:e7:dd:af:a1:d6:dc:41:ab:
a3:c1:c9:e1:8a:ac:fb:f2:ef:49:ec:8e:88:75:2c:0e:94:0f:
64:c0:9e:d2:68:f2:23:7b:e3:ba:2d:bf:2d:e3:7b:f5:ee:b9:
6d:d4:1e:f9:f2:90:88:2e:6e:b2:71:04:83:2c:be:c3:91:35:
24:03:d9:9a:a7:de:0a:06:fa:fc:29:a5:f6:39:61:d6:f0:57:
5c:87:b7:fe:80:67:65:fe:6c:22:24:c1:94:18:6e:5e:f6:25:
9a:30:8b:cd:77:66:b5:fc:70:53:64:5d:28:c5:9f:ea:15:50:
50:4b:e8:ea:a7:ba:1e:c5:15:23:34:96:9d:f2:95:52:e8:0e:
3b:38:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:11 2025 by rpki-client