Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: r9seEzKHfGrNaC20NBefpCRztHRIRPC3bPZhssZwkT8=
Subject key identifier: 08:3E:17:BD:60:A9:DC:A6:94:19:B6:EE:07:7F:6E:45:1F:99:E5:06
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01974A7AA7400DB40054A1872DA65ABA1D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0D7B
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: Bf7OVXQI7NP6BnLconGXvo-6sws.roa (hash: JyZurMaiEFvjOy1NMo/RzKa7qogLz+KnFYIZAGu//y8=)
4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: sPaZVqx4ZMPXCCwviisAZra0rw1I26w7SlKOViNm01k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a7:40:0d:b4:00:54:a1:87:2d:a6:5a:ba:1d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=083e17bd60a9dca69419b6ee077f6e451f99e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:e1:6b:7f:14:c0:e1:f3:d3:0b:36:bb:63:
a6:ec:a7:a1:ce:ee:f8:4d:f0:cc:52:10:d3:04:37:
b5:02:f7:7a:0c:82:fc:35:d3:ac:c8:4b:86:19:2f:
6a:bc:2e:e4:fb:a1:94:94:03:9d:d1:96:bd:6c:bc:
86:46:d4:5c:c7:ba:1a:c3:b1:f6:67:0c:e4:d3:4f:
40:2b:b0:94:60:0a:d6:54:c0:22:af:5a:2e:ff:a3:
f7:8b:8f:44:e7:df:60:b8:64:60:e5:60:bf:76:87:
70:5f:1e:6a:97:b7:08:a7:ec:db:a9:4e:0d:32:4b:
2d:9f:79:1b:ef:bb:90:f7:c5:85:1c:19:3e:58:51:
ad:77:cd:ae:89:a1:9e:c9:85:c8:e5:7b:d7:80:bc:
fc:0b:c0:58:6c:cd:f8:e8:5e:98:ea:59:d4:25:c3:
b5:5d:52:54:c1:e4:a5:e0:2f:6e:9c:04:76:35:fa:
8b:c6:b5:ed:ee:72:56:a5:93:54:39:bd:0d:75:41:
e4:3b:10:fa:c7:25:4a:22:6f:ee:40:c4:69:cc:5f:
d1:f0:6e:b9:d4:dc:61:3c:54:57:82:0b:f5:67:66:
51:69:8a:08:4c:f9:3d:ed:41:70:bf:c8:7c:cf:b8:
aa:40:be:4d:19:90:9a:e2:94:c8:e9:70:24:71:13:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:17:BD:60:A9:DC:A6:94:19:B6:EE:07:7F:6E:45:1F:99:E5:06
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:de:f1:53:5e:61:2c:24:1d:47:72:a9:6f:40:b0:2d:a7:b3:
2f:b4:61:16:aa:d3:15:8a:32:d1:81:97:6d:49:76:e5:01:06:
8d:9c:37:b8:5f:08:bc:fa:42:a5:dc:ef:e6:e0:cb:81:d0:09:
e6:d3:e8:70:c3:4e:80:e9:42:02:d6:8d:53:3c:f4:01:40:76:
56:7b:9a:a0:1d:70:78:a9:62:52:c5:92:be:01:b4:bd:82:1a:
0d:aa:bc:c8:0f:6c:fa:1f:47:e9:79:94:93:a4:18:af:35:c4:
7f:bb:8d:5f:39:b5:d7:e2:34:ad:20:89:95:24:3f:88:88:13:
14:e5:8c:45:ab:c5:40:cf:80:c2:31:78:1e:f4:31:2e:95:42:
4c:30:b0:47:26:e3:43:39:36:3d:4b:7f:74:bd:49:bb:34:84:
4b:4d:80:9d:c8:b5:1a:a6:47:b3:fc:02:65:6a:6e:3e:ad:41:
c6:ab:e4:07:2f:70:63:44:86:96:5a:da:d7:3b:53:8d:44:c6:
03:fb:3c:dc:0f:a0:35:82:52:b3:d1:e0:14:fd:7f:65:72:92:
fc:6c:e2:a9:86:4f:9b:b0:16:0e:12:06:2e:1c:6c:4b:2c:5b:
a9:c2:e8:72:66:3b:34:64:f8:94:00:96:99:c0:2c:f2:24:1f:
db:60:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:56:24 2025 by rpki-client