Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: 06bf6sE/SocX60AlhDBxnULq6RiTTSB5eqlSM2wvmhU=
Subject key identifier: 62:AF:3A:55:A1:5A:FF:EE:D0:62:5D:95:7A:DE:AC:AB:6F:0E:06:D8
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0199FBB36EC120B0FF8470DD9CA5BDD1EF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0EE1
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: 1-h5OCB8JpMYjopLDVkrKQwK2dpM.roa (hash: d3AbXN4lYtYyEUM8E0v7gWJmAkvZX7xtSRa43xkdCaQ=)
2: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
5: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
6: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
7: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
8: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: ehHReg0oAmEO496qIXhBWO45UD0YFgQOTp3jlX7k3+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6e:c1:20:b0:ff:84:70:dd:9c:a5:bd:d1:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=62af3a55a15affeed0625d957adeacab6f0e06d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:9d:ad:d7:4c:11:62:3e:43:a9:83:c2:d8:
2f:2f:a8:e1:47:29:da:70:c4:6b:86:49:bf:6e:97:
6b:f3:03:e9:43:70:e5:8a:91:34:c4:b9:5b:a6:a1:
2e:35:d8:2b:f0:3c:db:76:cb:be:96:e2:1f:df:9f:
ad:cd:48:12:46:e0:83:df:fe:3d:59:fb:b9:89:86:
62:7b:ab:14:8c:95:8b:15:24:ec:31:31:2e:6b:d1:
b6:e1:11:28:d5:89:3d:f5:ae:85:dd:4f:ac:4b:df:
f7:e8:da:fc:82:1c:0d:47:43:8c:9e:2b:7c:ca:f4:
fc:30:dc:3a:d0:c3:9d:74:a9:29:25:a2:c7:d8:c1:
eb:df:f3:2d:d0:a5:ea:3c:09:1d:8a:35:24:bb:fc:
84:60:9b:07:8a:aa:f1:48:c2:21:fb:85:6d:4b:06:
a1:ca:19:72:c9:d5:06:59:f8:2f:fe:fe:39:85:9d:
46:9a:17:71:bf:0f:f9:01:d8:d5:f2:7a:99:0a:7a:
16:e2:2e:0f:7d:4c:a2:79:4d:d9:07:cb:02:70:1f:
e0:67:f1:9e:51:d5:b6:d5:e5:01:c9:b2:d2:8f:b8:
c7:b8:4d:ef:2b:03:b0:40:29:59:ac:ce:44:ce:da:
3a:62:cc:6e:87:f0:41:5d:3a:fe:d3:bc:d6:26:5f:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:3A:55:A1:5A:FF:EE:D0:62:5D:95:7A:DE:AC:AB:6F:0E:06:D8
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ea:b0:80:ed:5c:20:0e:1c:f4:d0:61:68:2f:a6:32:04:26:
9c:d2:13:91:c0:7a:dd:70:61:26:cc:c7:68:d9:e2:f3:85:d8:
bc:0b:01:6b:61:68:84:ee:f1:61:c1:5b:6b:d0:cb:93:9f:1d:
4e:0c:e6:ee:0f:8a:6d:28:9e:2b:78:99:b5:6a:15:4a:be:30:
04:ce:df:1e:06:f5:36:70:c8:a6:66:da:5f:ab:a4:7e:5c:f1:
38:b8:d0:1b:28:5b:cb:a2:44:c1:42:8b:09:64:32:cf:0c:95:
71:7c:cc:93:44:ea:09:39:3b:8a:31:ad:f6:0d:2b:43:6b:c1:
0e:44:19:e6:40:1a:af:13:31:f9:3a:ad:9e:25:83:43:ea:7f:
5c:18:d0:a8:0c:38:a7:42:5e:46:c4:28:fa:66:61:01:6f:50:
f6:78:60:3a:e6:49:7e:e1:5e:31:4d:ec:4e:05:69:01:95:d0:
2a:4b:f5:ed:ee:7d:ad:1a:cd:32:13:3a:10:5a:6a:86:38:ad:
f1:f4:a7:1c:67:4c:b7:d7:09:77:6f:5d:cf:c8:06:69:94:04:
19:89:f2:b7:02:c5:7e:75:6e:89:1a:55:80:90:fb:3b:0d:b3:
15:06:0d:79:c7:80:e9:4d:7b:4b:bc:d9:08:47:43:f6:36:3c:
e0:fc:ec:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s27BILD/hHDdnKW90e8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD
Eyg2MmFmM2E1NWExNWFmZmVlZDA2MjVkOTU3YWRlYWNhYjZmMGUwNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGqdrddMEWI+Q6mDwtgvL6jhRyna
cMRrhkm/bpdr8wPpQ3DlipE0xLlbpqEuNdgr8Dzbdsu+luIf35+tzUgSRuCD3/49
Wfu5iYZie6sUjJWLFSTsMTEua9G24REo1Yk99a6F3U+sS9/36Nr8ghwNR0OMnit8
yvT8MNw60MOddKkpJaLH2MHr3/Mt0KXqPAkdijUku/yEYJsHiqrxSMIh+4VtSwah
yhlyydUGWfgv/v45hZ1Gmhdxvw/5AdjV8nqZCnoW4i4PfUyieU3ZB8sCcB/gZ/Ge
UdW21eUBybLSj7jHuE3vKwOwQClZrM5Ezto6Ysxuh/BBXTr+07zWJl/xTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKvOlWhWv/u0GJdlXrerKtvDgbYMB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuqwgO1c
IA4c9NBhaC+mMgQmnNITkcB63XBhJszHaNni84XYvAsBa2FohO7xYcFba9DLk58d
Tgzm7g+KbSieK3iZtWoVSr4wBM7fHgb1NnDIpmbaX6ukflzxOLjQGyhby6JEwUKL
CWQyzwyVcXzMk0TqCTk7ijGt9g0rQ2vBDkQZ5kAarxMx+TqtniWDQ+p/XBjQqAw4
p0JeRsQo+mZhAW9Q9nhgOuZJfuFeMU3sTgVpAZXQKkv17e59rRrNMhM6EFpqhjit
8fSnHGdMt9cJd29dz8gGaZQEGYnytwLFfnVuiRpVgJD7Ow2zFQYNeceA6U17S7zZ
CEdD9jY84Pzs7w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:44 2025 by rpki-client