Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: 7gcWiCaOLDCWpjgBjdOs9IOYzuRNdBPXbWvTmqP1AXg=
Subject key identifier: 5B:07:11:66:64:DF:AD:25:39:17:44:57:E4:5B:59:3B:BB:C3:D1:17
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 019A5187CF4F20937D3BD68F2013EFE5067B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 0630
Signing time: Wed 05 Nov 2025 01:00:46 +0000
Manifest this update: Wed 05 Nov 2025 01:00:46 +0000
Manifest next update: Thu 06 Nov 2025 01:00:46 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: vc3O5dCfffv50fhV5P5RZH1Ab0P9PkyX0Mf8mtndOBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:cf:4f:20:93:7d:3b:d6:8f:20:13:ef:e5:06:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Nov 5 01:00:46 2025 GMT
Not After : Nov 6 01:00:46 2025 GMT
Subject: CN=5b07116664dfad2539174457e45b593bbbc3d117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:bb:96:c1:fd:58:43:ee:21:4d:2f:f3:f5:
93:4c:2c:9d:e8:f7:6b:f2:87:8b:c4:90:74:1f:76:
a7:b1:76:d7:17:02:66:0b:b5:a8:7c:c4:5e:dc:8f:
7c:ef:33:87:ee:a9:48:ae:f5:49:e5:81:7b:e4:5f:
d5:19:31:68:66:45:1b:04:14:aa:c3:4f:4e:ac:49:
ad:ba:d1:f3:b8:01:dd:99:7b:ce:28:13:46:90:1a:
53:d5:8c:db:88:28:e7:f4:8b:f2:bb:c8:39:32:01:
3c:f6:8a:31:cb:19:e6:51:c8:67:29:ac:93:11:10:
31:a8:fe:25:ee:d9:8c:9d:95:20:55:14:81:34:5e:
54:f6:50:f1:7b:3e:66:09:4e:fe:fe:4b:01:c2:ac:
af:f6:89:fb:9b:4e:bb:ec:ff:60:ef:be:60:57:08:
d7:5a:15:9c:11:bc:88:46:01:17:32:d5:cc:9d:cd:
13:a7:f1:02:0f:73:23:23:d4:e5:7e:95:61:c3:0a:
3d:43:7a:d1:4d:5a:68:87:58:97:5a:8b:bb:7c:b4:
36:c7:9a:32:25:4d:f6:09:cb:92:3f:85:ff:5d:2f:
12:b4:d2:95:26:eb:8a:d2:b5:f0:87:b6:ed:da:0b:
bd:ee:a9:9a:b0:87:db:6a:ab:df:f5:17:0f:06:b2:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:11:66:64:DF:AD:25:39:17:44:57:E4:5B:59:3B:BB:C3:D1:17
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:51:a0:96:75:af:a0:91:bd:39:d1:17:31:db:68:68:95:92:
83:04:44:30:f9:17:b1:cf:41:0a:1f:27:37:09:33:03:b7:26:
fc:69:b0:61:6b:58:be:71:18:69:bb:35:a3:59:17:12:64:7b:
2c:35:da:90:8c:ec:88:c0:15:ed:ac:f6:31:5e:df:37:d3:7f:
0d:68:25:63:cf:22:cc:ed:ca:de:83:8d:15:49:59:d9:ba:8a:
64:01:0e:bb:a7:dc:fb:ba:21:a5:af:fb:5e:f2:ae:3e:1d:fe:
be:1e:8f:7e:74:9b:bf:56:e0:f2:e3:3e:42:52:a4:35:01:11:
19:4f:63:04:22:a9:db:55:2d:55:0c:49:8b:46:51:a9:7e:31:
ed:85:3a:56:1d:4a:59:39:65:90:48:2c:ed:08:44:4f:60:99:
f6:45:6d:c4:2d:5e:41:bc:aa:b5:51:c7:ee:47:ff:7e:6f:aa:
9b:19:44:5e:4b:db:dc:8d:7a:c6:49:14:43:04:87:5c:48:83:
57:4c:30:3e:dd:f2:77:dc:e8:c2:d0:ec:d9:1c:fe:5a:a4:fa:
29:22:53:bb:89:b2:7a:fa:52:17:66:94:1b:00:78:54:c2:27:
d5:0b:af:f3:a2:f1:84:26:ac:b3:af:ba:8e:64:8d:a9:54:7a:
18:3b:9d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh89PIJN9O9aPIBPv5QZ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MmIzYWZkNzlhNTFkOWEzMGU3M2E1ODlkYThlMzc2NDFm
NDc1MWEwHhcNMjUxMTA1MDEwMDQ2WhcNMjUxMTA2MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg1YjA3MTE2NjY0ZGZhZDI1MzkxNzQ0NTdlNDViNTkzYmJiYzNkMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXe7lsH9WEPuIU0v8/WTTCyd6Pdr
8oeLxJB0H3ansXbXFwJmC7WofMRe3I987zOH7qlIrvVJ5YF75F/VGTFoZkUbBBSq
w09OrEmtutHzuAHdmXvOKBNGkBpT1YzbiCjn9Ivyu8g5MgE89ooxyxnmUchnKayT
ERAxqP4l7tmMnZUgVRSBNF5U9lDxez5mCU7+/ksBwqyv9on7m0677P9g775gVwjX
WhWcEbyIRgEXMtXMnc0Tp/ECD3MjI9TlfpVhwwo9Q3rRTVpoh1iXWou7fLQ2x5oy
JU32CcuSP4X/XS8StNKVJuuK0rXwh7bt2gu97qmasIfbaqvf9RcPBrIp3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsHEWZk360lORdEV+RbWTu7w9EXMB8GA1UdIwQY
MBaAFEkrOv15pR2aMOc6WJ2o43ZB9HUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEt
YTMxMDViZDk0MWQ4LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEtYTMxMDViZDk0MWQ4
LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlGglnWv
oJG9OdEXMdtoaJWSgwREMPkXsc9BCh8nNwkzA7cm/GmwYWtYvnEYabs1o1kXEmR7
LDXakIzsiMAV7az2MV7fN9N/DWglY88izO3K3oONFUlZ2bqKZAEOu6fc+7ohpa/7
XvKuPh3+vh6PfnSbv1bg8uM+QlKkNQERGU9jBCKp21UtVQxJi0ZRqX4x7YU6Vh1K
WTllkEgs7QhET2CZ9kVtxC1eQbyqtVHH7kf/fm+qmxlEXkvb3I16xkkUQwSHXEiD
V0wwPt3yd9zowtDs2Rz+WqT6KSJTu4myevpSF2aUGwB4VMIn1Quv86LxhCass6+6
jmSNqVR6GDudew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:48 2025 by rpki-client