Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: uSDlArHru3ZJ23jVEYUhT5w/Ps4rzwZnT2djK0CpiBg=
Subject key identifier: 8E:66:C7:A2:75:A1:EB:A4:10:D4:32:A1:FC:AD:DB:33:05:7D:3F:40
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 019A706E12FC475CF8B9D991F9F7EB55EC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 0640
Signing time: Tue 11 Nov 2025 01:00:53 +0000
Manifest this update: Tue 11 Nov 2025 01:00:53 +0000
Manifest next update: Wed 12 Nov 2025 01:00:53 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: ZgnB8MLfui3rlt0c7JM/MgV+LlfdHuS/+fpZgZy2u5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:12:fc:47:5c:f8:b9:d9:91:f9:f7:eb:55:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Nov 11 01:00:53 2025 GMT
Not After : Nov 12 01:00:53 2025 GMT
Subject: CN=8e66c7a275a1eba410d432a1fcaddb33057d3f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:b7:c7:c2:c9:6e:0a:d2:d9:3d:2e:b9:62:
cf:d3:d1:c5:96:7d:a7:fa:fa:1d:b4:d1:67:8e:17:
f1:f3:b8:98:2e:8a:0a:90:55:87:f9:19:22:a0:0d:
e3:11:16:11:3e:48:97:71:04:f1:ad:bc:bb:c1:e6:
e9:00:dc:a8:26:c1:77:8b:c9:49:c7:79:ca:9c:f6:
47:5b:e3:e6:56:1b:77:4d:33:4b:cf:49:42:50:d1:
d3:3b:ff:54:71:b7:21:02:59:ab:38:66:a5:79:ea:
6b:21:45:e4:f8:6e:f2:c7:c0:07:08:48:ce:00:c5:
4b:b3:d9:c1:4b:20:44:ed:dd:93:c9:ac:70:df:28:
ab:bf:fc:a9:23:79:23:d5:58:4b:8b:87:bf:f3:31:
2f:f9:4c:61:35:87:70:78:92:ae:95:ab:b0:37:85:
e1:51:10:9a:57:bc:6f:02:fa:6f:ad:7c:c1:a4:fa:
15:c2:9c:81:18:4e:9a:e6:d3:ed:2b:60:b1:66:2b:
24:8a:b9:57:9d:f6:ad:39:cf:c4:b4:d9:6f:22:22:
70:9a:ac:8b:8f:19:72:90:d3:54:76:64:3d:4e:a9:
13:1d:d5:00:0e:97:74:e4:87:5f:c1:4e:31:84:ab:
ba:c4:b6:8f:06:65:18:0c:f2:ca:cf:a6:2b:c2:90:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:C7:A2:75:A1:EB:A4:10:D4:32:A1:FC:AD:DB:33:05:7D:3F:40
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0c:30:0c:9c:49:28:cf:cd:f4:43:97:de:f5:25:ce:43:55:
2b:37:69:66:2b:f4:0e:f9:2d:5d:65:2d:63:bb:be:0a:29:68:
55:77:b0:0f:6c:c8:c3:a3:0d:b6:f1:15:b9:56:8f:23:cb:82:
cc:63:4b:b6:e5:b4:df:0e:6e:0d:cf:c6:5f:ec:11:4f:90:db:
8d:f2:6e:ec:1c:40:7e:62:53:b0:05:56:6d:6a:e5:7f:26:54:
3e:9b:57:51:89:2a:a4:50:60:f9:30:20:ea:4c:3d:e5:bf:4f:
67:b8:6d:11:42:c4:63:fa:f2:78:12:20:39:ee:8a:86:7d:e3:
b3:9a:81:be:84:f4:b8:d9:eb:dc:42:f7:06:86:50:db:9b:4e:
7e:11:56:c2:62:46:58:99:95:e0:f4:e9:9c:f9:dc:4c:ae:58:
b7:b1:a5:d7:c0:32:30:b3:bf:59:dc:c2:07:fd:c1:11:2c:c3:
2b:f5:e5:0b:ef:e7:11:db:65:63:08:91:a4:ce:a1:7a:f8:2d:
a7:ec:4b:d0:f9:8a:97:c4:14:cd:31:22:90:88:dc:dc:81:a7:
31:4a:47:f6:ed:77:44:f6:d2:46:8d:ef:22:03:73:f6:1c:88:
d2:81:cf:0c:df:4b:56:d9:22:d6:53:fa:ca:8d:06:54:ef:b6:
ca:07:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:04 2025 by rpki-client