Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: 86DEc9U5ySPTdfGK+pdV0QfGiv1qUzQ0KsHuubvytrI=
Subject key identifier: 82:94:06:97:B0:30:2E:D5:D0:BE:A3:40:D3:12:4A:A6:C4:C7:22:79
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01984CD44CF81162E93941BF6E702E9A9C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0E01
Signing time: Sun 27 Jul 2025 17:00:38 +0000
Manifest this update: Sun 27 Jul 2025 17:00:38 +0000
Manifest next update: Mon 28 Jul 2025 17:00:38 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
4: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: lIwwC750GUpwpNLNpWvv+auV7jecct9liid3NKlNJV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d4:4c:f8:11:62:e9:39:41:bf:6e:70:2e:9a:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jul 27 17:00:38 2025 GMT
Not After : Jul 28 17:00:38 2025 GMT
Subject: CN=82940697b0302ed5d0bea340d3124aa6c4c72279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:3a:5a:9e:38:22:41:b9:2a:2a:8d:51:17:
c7:74:0a:0c:24:7a:82:54:5b:16:33:c6:a8:84:07:
b9:23:6f:1a:62:77:33:92:4d:f3:ad:18:8f:6e:59:
1c:a2:a4:0f:0f:4b:26:be:a9:68:b9:e8:f3:f7:66:
56:df:1e:b5:de:f4:a6:93:f5:65:ec:e8:59:f0:52:
77:c3:c7:d2:ec:49:21:5e:0e:5f:97:ac:25:42:a2:
c4:48:aa:97:5c:fc:ec:d6:23:68:f4:04:9f:3c:7d:
54:b2:a7:95:51:34:df:a3:79:36:4c:46:e7:1b:3a:
aa:76:f2:63:ed:6e:1f:d2:a7:62:9c:9c:07:55:11:
92:26:0e:b2:60:66:b8:5b:6b:d8:c7:02:01:bb:ff:
84:d6:d8:2a:71:86:84:ba:6d:d0:92:af:64:0a:2d:
f8:de:a1:b3:4a:6a:61:c9:c3:dc:ac:d9:70:79:62:
36:c9:af:12:07:b0:03:72:ba:58:55:ec:4a:2b:6a:
a1:79:9e:af:21:c1:3b:6b:8b:1b:30:4e:ec:11:08:
35:75:33:f1:8d:1a:c4:8e:20:7b:ca:85:6b:1f:7f:
19:09:6a:f5:11:f3:45:17:23:47:9a:b2:06:7d:41:
de:1e:a2:c3:be:ae:97:6d:d0:fd:24:bf:2a:59:56:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:94:06:97:B0:30:2E:D5:D0:BE:A3:40:D3:12:4A:A6:C4:C7:22:79
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fa:af:8a:64:b5:73:2b:ab:ea:e6:df:c1:ca:80:bc:76:32:
70:7e:4e:5b:62:c7:5c:03:34:91:f4:bb:03:3e:b4:d3:7c:dd:
5f:06:5c:4c:24:0c:c8:da:49:67:81:11:b9:f7:3f:88:85:ff:
28:25:ae:77:33:f2:06:23:b0:e1:fb:11:b7:d2:0e:e0:f9:a5:
71:4e:ff:b3:bb:e2:1c:bd:38:46:bc:b3:2b:3a:73:06:fa:e4:
1b:85:1a:ac:ca:0f:5f:c7:48:50:4f:23:ab:9f:f4:b2:9d:0d:
4f:71:d2:11:95:bf:dd:8b:4b:6c:bc:c7:96:b9:33:c9:69:33:
a7:72:ea:da:7f:82:44:3c:0a:81:85:b2:e1:3d:f1:ce:6e:17:
ba:52:3e:d3:6f:e0:be:4b:22:c4:38:2e:9b:2e:11:63:ce:8a:
90:b2:a8:c9:db:56:a4:3c:6f:d3:19:80:6e:a2:28:5a:0a:5e:
48:6a:a8:1e:ec:e6:16:46:7b:18:f9:2e:af:39:ca:ee:2b:fb:
95:84:ab:a1:e9:df:d6:a2:b3:9e:c2:c8:dc:61:17:e5:ef:e1:
bf:a3:59:12:db:50:ca:1a:12:d8:ec:e5:d8:81:f1:91:5a:1e:
17:b1:d2:c9:55:b1:4b:af:a9:ae:97:29:28:ea:11:6f:15:22:
6a:3e:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:21:47 2025 by rpki-client