Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: nPepzXddy77cDi5kv5WToV5ppFeKxRuaWaFhKcsORCA=
Subject key identifier: F3:AD:9E:73:AA:4B:4C:3C:27:22:43:C6:2F:7F:0E:28:5A:0F:ED:4B
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019A2440AE8A2ED083B3E867767764C7632B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0EF6
Signing time: Mon 27 Oct 2025 06:00:09 +0000
Manifest this update: Mon 27 Oct 2025 06:00:09 +0000
Manifest next update: Tue 28 Oct 2025 06:00:09 +0000
Files and hashes: 1: 1-h5OCB8JpMYjopLDVkrKQwK2dpM.roa (hash: d3AbXN4lYtYyEUM8E0v7gWJmAkvZX7xtSRa43xkdCaQ=)
2: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
5: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
6: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
7: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
8: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: 9zfe7CJy85vA5NpPuooBIM8BI/CCNmUBs4SAm3KfdNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:40:ae:8a:2e:d0:83:b3:e8:67:76:77:64:c7:63:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Oct 27 06:00:09 2025 GMT
Not After : Oct 28 06:00:09 2025 GMT
Subject: CN=f3ad9e73aa4b4c3c272243c62f7f0e285a0fed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:11:9c:48:48:93:fa:96:7d:80:85:c1:c4:1a:
f1:1a:46:02:49:24:4d:77:e1:75:00:4c:e1:a8:b7:
b6:92:fb:23:7d:c7:13:ea:e9:d7:d5:55:87:62:0e:
30:84:c9:58:0f:c1:12:71:b0:52:ba:de:0e:a8:b9:
7e:ca:88:e0:ef:d3:18:6f:5a:c5:81:82:27:31:94:
99:dd:2a:bb:23:0b:3b:36:30:84:ca:2d:54:26:7a:
4c:59:8b:68:38:96:11:57:28:14:e0:53:27:93:b7:
3e:06:ba:6e:fe:7c:fa:5d:d8:59:16:1b:d5:36:25:
13:b1:66:35:aa:4d:88:d2:01:6e:c7:12:b5:0b:7f:
75:b0:22:d9:3c:28:03:71:f5:7f:cc:ca:b2:c5:45:
85:ce:31:7d:49:5c:e6:c5:e5:5e:5b:2e:ca:9f:c7:
2b:5e:52:08:d6:c9:71:87:2f:f5:15:cf:56:20:34:
fc:4d:ae:10:df:f4:b6:26:32:65:df:1e:1f:bc:23:
c8:7f:6c:e1:70:65:ee:50:d7:96:26:8c:0a:53:03:
f9:2f:99:d4:ff:2e:e7:d9:c5:40:f9:65:cb:dd:aa:
09:fa:16:06:62:91:2c:3d:df:e2:bc:e4:0a:db:0b:
32:da:f3:78:0a:8e:08:27:20:be:91:19:76:a1:28:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:9E:73:AA:4B:4C:3C:27:22:43:C6:2F:7F:0E:28:5A:0F:ED:4B
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a2:e5:96:4b:b3:3a:28:a8:7d:ab:b3:08:f1:dd:74:5e:e3:
00:d0:1a:cc:ba:3c:f1:00:50:54:65:cb:2b:39:77:5f:64:8d:
45:f5:5a:0b:fb:9b:57:42:26:98:71:e3:cc:d8:0f:5f:c2:3e:
dc:06:f2:c2:d3:ba:02:98:71:b2:3e:8a:a6:c0:00:6e:d3:80:
8e:e1:aa:cb:fa:f0:24:f3:84:2a:be:01:30:c2:99:fa:c2:fc:
d7:2d:84:c5:b9:04:50:3f:5c:91:3d:1b:4f:9b:5a:6b:12:ec:
3c:07:f4:54:76:b7:fe:30:95:b4:f1:05:e1:13:b0:28:ae:db:
13:fc:bb:e5:c7:0b:7a:1b:92:2c:7e:97:1f:13:8e:c1:5d:50:
f3:cd:e9:d3:76:69:00:4f:60:2d:9f:57:8e:df:2b:e5:4f:b9:
e4:2b:db:79:29:6c:12:39:e2:d4:5f:73:d8:b4:92:49:69:04:
a8:15:43:28:6f:20:d4:84:30:2a:ad:78:e8:48:ec:f0:cf:a4:
11:75:46:5b:bb:ab:29:7f:5a:81:6e:0d:a2:0c:eb:ed:e8:77:
77:4b:f3:f5:73:f4:44:58:54:3c:26:5d:c4:e2:60:fa:2c:50:
34:e6:22:c8:e5:74:62:84:03:87:c1:48:5b:4a:a8:33:c5:f6:
5e:93:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:53 2025 by rpki-client