Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: xyKd8JzOE+GXoIlRyiX7rnP4FclwKBM40LOxo/K13UI=
Subject key identifier: 57:7C:E6:64:65:D8:B7:EE:6D:EB:2F:CF:B7:84:44:BE:EB:9B:F8:74
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0198D4046560BA67F853717657BF628A3754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0E47
Signing time: Fri 22 Aug 2025 23:01:54 +0000
Manifest this update: Fri 22 Aug 2025 23:01:54 +0000
Manifest next update: Sat 23 Aug 2025 23:01:54 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
4: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: orvgw+PlU+5WmvpggDtrcHoldpr8kulMaHZ8rVYjj7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:65:60:ba:67:f8:53:71:76:57:bf:62:8a:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Aug 22 23:01:54 2025 GMT
Not After : Aug 23 23:01:54 2025 GMT
Subject: CN=577ce66465d8b7ee6deb2fcfb78444beeb9bf874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:f3:e0:99:f0:c5:e2:a7:af:90:43:8d:00:
60:7b:11:76:f4:57:63:74:50:45:9a:df:b5:31:e4:
da:a8:63:d7:89:e6:98:e5:c2:8b:93:c3:16:c3:1b:
78:11:d3:df:f8:a0:93:24:e4:eb:d7:98:ae:fb:63:
a3:9e:8d:eb:67:19:30:5f:79:d0:47:45:b4:6f:d8:
ec:0d:54:30:2b:57:3e:36:da:22:3c:57:84:31:1c:
c1:fb:4f:b8:df:93:91:6f:18:d8:46:44:72:79:5d:
3e:68:f7:a4:aa:89:cd:27:95:25:11:fb:30:cb:ae:
f9:68:cc:ea:11:4f:dd:08:77:57:09:e4:aa:01:87:
95:7b:83:0c:24:05:31:fa:98:40:4f:b3:2b:b3:12:
4f:ec:78:72:58:9f:0a:e9:be:30:0d:1c:ae:9f:70:
d2:fc:26:f3:09:8b:8b:25:c9:12:43:d9:7b:a4:b3:
e2:40:86:37:d6:7a:9c:9d:c0:be:19:24:a3:ca:0a:
73:d8:7a:aa:3c:a5:8a:76:fb:c2:0c:ee:6c:e3:01:
f0:6c:fe:55:eb:14:f3:7e:52:22:e2:ba:0a:9f:75:
4d:36:e0:51:6f:c3:cd:11:cf:d3:d1:85:6f:67:48:
c9:60:44:1a:da:44:0c:7c:dc:d4:85:51:0e:e5:a3:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7C:E6:64:65:D8:B7:EE:6D:EB:2F:CF:B7:84:44:BE:EB:9B:F8:74
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:79:d1:8c:db:d9:7c:34:b0:95:d5:07:56:77:52:0c:ff:
83:a1:9b:87:11:26:b8:de:15:cb:2b:c8:3f:3c:72:59:df:71:
49:58:a0:be:d7:7e:df:86:18:2c:da:04:2d:7d:45:75:c8:14:
7a:00:82:19:86:2a:b3:77:fa:d0:47:ce:a1:eb:6b:b7:6d:a3:
51:42:9d:aa:0b:a1:6d:fd:6c:91:50:00:ae:ea:b8:6c:17:e8:
9e:fa:b9:f2:11:3c:58:6b:9b:40:c8:8b:d7:60:d5:ee:e3:56:
c5:fc:8a:aa:76:07:66:0a:1f:43:fa:24:5c:f8:92:84:73:34:
24:51:59:d2:cf:85:ba:76:32:c4:85:01:ab:17:f9:19:95:63:
e0:65:e8:19:e5:ac:4b:14:88:93:31:9a:d1:61:8f:ad:10:20:
71:14:50:10:de:09:25:65:34:85:ed:5b:69:24:c2:49:5f:ff:
53:8f:62:72:b9:51:41:84:03:36:c3:ea:28:92:91:20:13:32:
57:5c:16:58:c0:d8:d5:a6:52:ce:f1:24:0f:47:97:bc:ff:ce:
36:4b:43:6c:61:8d:95:db:3b:16:1e:1a:f6:b8:93:11:c1:c2:
df:81:37:04:b4:58:cb:15:63:66:a7:23:84:94:b1:a4:b7:5b:
6b:54:6c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBGVgumf4U3F2V79iijdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjUwODIyMjMwMTU0WhcNMjUwODIzMjMwMTU0WjAzMTEwLwYDVQQD
Eyg1NzdjZTY2NDY1ZDhiN2VlNmRlYjJmY2ZiNzg0NDRiZWViOWJmODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HXz4JnwxeKnr5BDjQBgexF29Fdj
dFBFmt+1MeTaqGPXieaY5cKLk8MWwxt4EdPf+KCTJOTr15iu+2Ojno3rZxkwX3nQ
R0W0b9jsDVQwK1c+NtoiPFeEMRzB+0+435ORbxjYRkRyeV0+aPekqonNJ5UlEfsw
y675aMzqEU/dCHdXCeSqAYeVe4MMJAUx+phAT7MrsxJP7HhyWJ8K6b4wDRyun3DS
/CbzCYuLJckSQ9l7pLPiQIY31nqcncC+GSSjygpz2HqqPKWKdvvCDO5s4wHwbP5V
6xTzflIi4roKn3VNNuBRb8PNEc/T0YVvZ0jJYEQa2kQMfNzUhVEO5aOjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd85mRl2Lfubesvz7eERL7rm/h0MB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1N50Yzb
2Xw0sJXVB1Z3Ugz/g6GbhxEmuN4VyyvIPzxyWd9xSVigvtd+34YYLNoELX1FdcgU
egCCGYYqs3f60EfOoetrt22jUUKdqguhbf1skVAAruq4bBfonvq58hE8WGubQMiL
12DV7uNWxfyKqnYHZgofQ/okXPiShHM0JFFZ0s+FunYyxIUBqxf5GZVj4GXoGeWs
SxSIkzGa0WGPrRAgcRRQEN4JJWU0he1baSTCSV//U49icrlRQYQDNsPqKJKRIBMy
V1wWWMDY1aZSzvEkD0eXvP/ONktDbGGNlds7Fh4a9riTEcHC34E3BLRYyxVjZqcj
hJSxpLdba1RstQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:51 2025 by rpki-client