Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
File: SSs6_XmlHZow5zpYnajjdkH0dRo.mft (raw, json)
Hash identifier: TZqXAW1Wv9KTutq37iP4wIRGMq7/bq9ENIGAlFX4ucc=
Subject key identifier: BA:43:43:B4:4B:DD:48:41:1C:18:A8:F4:72:21:5A:E9:87:B3:4F:41
Authority key identifier: 49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
Certificate issuer: /CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Certificate serial: 01965011C80252CDE75C0879F648C520D8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
Manifest number: 041D
Signing time: Sat 19 Apr 2025 22:01:04 +0000
Manifest this update: Sat 19 Apr 2025 22:01:04 +0000
Manifest next update: Sun 20 Apr 2025 22:01:04 +0000
Files and hashes: 1: SSs6_XmlHZow5zpYnajjdkH0dRo.crl (hash: 8Sj0szLWRax6T8iQ3u7oi0RVL+0YHMVywJEMQ6RAhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:c8:02:52:cd:e7:5c:08:79:f6:48:c5:20:d8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492b3afd79a51d9a30e73a589da8e37641f4751a
Validity
Not Before: Apr 19 22:01:04 2025 GMT
Not After : Apr 20 22:01:04 2025 GMT
Subject: CN=ba4343b44bdd48411c18a8f472215ae987b34f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:cc:de:f2:e0:eb:a4:a5:a6:8e:72:12:f1:
5e:b2:6f:11:3e:35:37:39:a0:16:2e:fd:21:d4:45:
93:b2:71:e8:11:cd:55:33:aa:b3:06:09:46:b3:8d:
98:7d:38:f5:d9:d7:ed:e2:fe:39:13:e6:5d:3b:b4:
d6:e7:54:7d:25:31:1f:c9:09:da:9f:7c:b3:d0:d6:
c8:f6:6e:57:fc:9a:67:50:26:d8:f8:c6:0d:16:4c:
91:3a:ff:e5:4d:cf:5c:d1:bc:a1:e4:0c:16:ee:31:
e8:88:11:af:19:82:9b:22:6f:79:3f:96:60:8d:7e:
c6:cf:50:12:45:5b:b9:76:07:82:d8:f3:9f:2f:d2:
80:da:1f:c9:98:74:6e:68:51:5e:2c:37:81:45:a3:
8c:14:6b:d7:b5:60:df:3b:f5:28:1c:5c:90:9c:32:
0e:a2:e3:2e:01:4f:84:13:dc:27:52:89:f9:5d:6c:
f0:11:e7:98:06:c5:95:c3:30:8b:f1:3f:ca:21:d5:
a1:46:8c:b5:d4:a4:c1:7a:a0:a8:48:b0:78:f9:cd:
9c:78:06:6c:91:19:de:11:e3:17:d6:2a:2f:a5:ad:
55:3a:3a:6d:1e:c7:91:87:0f:13:50:0a:ba:63:24:
2e:4b:d7:c8:ec:cc:bd:ae:ba:9f:39:a7:ad:1d:c5:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:43:B4:4B:DD:48:41:1C:18:A8:F4:72:21:5A:E9:87:B3:4F:41
X509v3 Authority Key Identifier:
keyid:49:2B:3A:FD:79:A5:1D:9A:30:E7:3A:58:9D:A8:E3:76:41:F4:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSs6_XmlHZow5zpYnajjdkH0dRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ae7f9a-df0b-4822-b0f1-a3105bd941d8/1/SSs6_XmlHZow5zpYnajjdkH0dRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:05:55:52:40:83:4a:0a:da:bc:49:a2:ab:38:c4:83:e7:61:
b8:a3:31:9d:ef:5a:2b:c9:f0:00:e2:97:c4:00:e7:4a:bb:91:
8c:ba:dd:f1:ba:70:31:65:16:22:08:cd:02:3e:e8:c8:7f:f8:
94:2f:49:14:1f:46:0c:1e:81:57:af:07:d4:fa:a9:f4:da:63:
8a:1f:a2:c0:23:e6:52:e6:47:fd:cd:35:98:14:92:4a:a1:01:
19:9c:01:42:65:8d:b6:06:fa:a0:b7:39:09:7b:0e:f6:62:34:
e6:26:ee:6f:25:35:14:59:24:33:b1:62:c5:a6:fc:99:2b:e6:
9f:c0:39:9f:f3:fa:ce:e1:7e:bc:4c:27:49:04:ac:b5:54:03:
ce:5b:39:5b:e5:16:7f:29:04:3a:76:f6:5e:1f:23:1c:18:82:
ce:62:fe:c3:1d:fe:74:28:b5:1b:fa:40:0d:e2:05:5a:d9:25:
b4:af:69:de:c5:82:7e:48:73:85:83:79:d8:17:1d:71:49:3f:
97:b3:64:b9:6a:96:60:4c:f1:5c:75:23:b6:8b:40:8a:96:ff:
1e:ac:06:01:f9:84:82:a8:ff:8b:34:6c:4e:d8:d8:f3:e2:c5:
b4:10:eb:83:c5:46:a9:8e:ee:a1:1a:5a:ab:12:47:58:a5:3f:
de:c7:48:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEcgCUs3nXAh59kjFINipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MmIzYWZkNzlhNTFkOWEzMGU3M2E1ODlkYThlMzc2NDFm
NDc1MWEwHhcNMjUwNDE5MjIwMTA0WhcNMjUwNDIwMjIwMTA0WjAzMTEwLwYDVQQD
EyhiYTQzNDNiNDRiZGQ0ODQxMWMxOGE4ZjQ3MjIxNWFlOTg3YjM0ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q/M3vLg66Slpo5yEvFesm8RPjU3
OaAWLv0h1EWTsnHoEc1VM6qzBglGs42YfTj12dft4v45E+ZdO7TW51R9JTEfyQna
n3yz0NbI9m5X/JpnUCbY+MYNFkyROv/lTc9c0byh5AwW7jHoiBGvGYKbIm95P5Zg
jX7Gz1ASRVu5dgeC2POfL9KA2h/JmHRuaFFeLDeBRaOMFGvXtWDfO/UoHFyQnDIO
ouMuAU+EE9wnUon5XWzwEeeYBsWVwzCL8T/KIdWhRoy11KTBeqCoSLB4+c2ceAZs
kRneEeMX1iovpa1VOjptHseRhw8TUAq6YyQuS9fI7My9rrqfOaetHcUzRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpDQ7RL3UhBHBio9HIhWumHs09BMB8GA1UdIwQY
MBaAFEkrOv15pR2aMOc6WJ2o43ZB9HUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEt
YTMxMDViZDk0MWQ4LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZTdmOWEtZGYwYi00ODIyLWIwZjEtYTMxMDViZDk0MWQ4
LzEvU1NzNl9YbWxIWm93NXpwWW5hampka0gwZFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAVVUkCD
SgravEmiqzjEg+dhuKMxne9aK8nwAOKXxADnSruRjLrd8bpwMWUWIgjNAj7oyH/4
lC9JFB9GDB6BV68H1Pqp9Npjih+iwCPmUuZH/c01mBSSSqEBGZwBQmWNtgb6oLc5
CXsO9mI05ibubyU1FFkkM7Fixab8mSvmn8A5n/P6zuF+vEwnSQSstVQDzls5W+UW
fykEOnb2Xh8jHBiCzmL+wx3+dCi1G/pADeIFWtkltK9p3sWCfkhzhYN52BcdcUk/
l7NkuWqWYEzxXHUjtotAipb/HqwGAfmEgqj/izRsTtjY8+LFtBDrg8VGqY7uoRpa
qxJHWKU/3sdI8w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:10:55 2025 by rpki-client