Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: 6cHCDxKgKlr7F5XBRDW4sJin3h4BCGuMi/GQvKZ8H9s=
Subject key identifier: 26:54:FD:42:EE:33:A3:A4:AA:A2:EE:1D:D3:70:57:0B:0F:B9:B6:1E
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0197C5A5E9FFD34217F55FE9286E542860DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0DBB
Signing time: Tue 01 Jul 2025 11:01:14 +0000
Manifest this update: Tue 01 Jul 2025 11:01:14 +0000
Manifest next update: Wed 02 Jul 2025 11:01:14 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
4: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: GtMwClVdu3KMM9hwJUU4MPyQHnc2Nl9Wtg8bHZQgLxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:e9:ff:d3:42:17:f5:5f:e9:28:6e:54:28:60:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jul 1 11:01:14 2025 GMT
Not After : Jul 2 11:01:14 2025 GMT
Subject: CN=2654fd42ee33a3a4aaa2ee1dd370570b0fb9b61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:84:59:cd:66:bd:c4:24:53:21:f2:7d:19:
61:24:a4:2f:6c:97:c4:e3:13:01:d1:a3:25:4c:33:
4e:0b:e9:4f:0d:d1:a7:42:bf:38:ba:af:a0:0c:45:
eb:08:f1:18:f9:fb:ed:04:a3:d6:00:98:0b:93:a3:
84:18:55:f8:eb:27:cd:c4:01:a5:99:5c:b6:60:ee:
99:ee:18:cd:3d:86:dd:66:f5:1f:6d:55:99:ff:94:
55:85:fd:9d:da:c5:c8:b1:45:19:ed:2b:1f:98:21:
48:79:2d:b4:c7:97:6f:3f:2f:82:2e:0a:bf:84:c1:
6c:0b:b8:7a:59:9a:0f:f8:b0:53:df:8a:05:ed:4a:
dc:27:3f:16:bd:86:ca:73:dd:14:78:aa:c0:bd:e3:
b4:05:22:97:4b:8b:01:9b:f8:f7:8c:5b:74:08:9e:
e5:f6:55:f3:03:f9:68:93:3c:93:ab:11:3b:f5:83:
b8:9f:31:f8:17:a1:af:22:24:84:40:9b:d8:ce:0c:
c3:69:3b:5d:d7:94:25:96:de:43:5b:76:c4:3b:e9:
12:89:9b:c9:aa:2a:6f:ca:62:4b:32:66:3a:c1:84:
e8:7a:8c:ac:12:55:14:7b:1d:1f:8b:4e:bc:5b:8d:
42:ec:3e:4c:27:62:32:7f:07:ca:54:83:0c:f1:07:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:FD:42:EE:33:A3:A4:AA:A2:EE:1D:D3:70:57:0B:0F:B9:B6:1E
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:eb:35:a7:90:a7:cc:73:65:f3:22:64:da:07:c5:f7:5f:
af:4d:61:86:b3:1c:60:c7:ec:e0:f1:a0:fd:00:11:17:f7:fd:
53:d2:cb:4e:b2:01:7a:05:05:54:74:63:52:80:a8:82:3d:73:
ec:dc:40:06:18:44:28:6c:ee:fc:e2:6e:d2:2d:bb:7c:e3:dc:
4d:35:0f:a6:5b:0f:19:54:8c:e2:06:c2:b2:2c:37:ce:15:cf:
f2:a3:68:5b:43:fb:57:b6:fa:3c:2e:0d:df:66:90:b1:6a:00:
aa:7d:8b:7e:ac:c8:60:b9:5d:48:00:da:01:b3:b9:cf:98:45:
5d:e7:79:e0:f4:5e:57:a7:3f:4a:3e:ec:4e:cf:df:73:c9:51:
a7:99:4a:c4:69:35:58:85:c0:c8:f5:bc:7a:d3:84:bd:48:a9:
60:4c:fa:39:4f:d0:9f:7c:2c:dc:27:84:6d:4d:5c:fc:eb:5c:
bd:7c:0d:e7:8f:77:3a:a5:cf:a9:b3:d5:b7:fe:71:25:c6:9e:
0c:2b:a8:f1:ad:12:96:23:17:74:fb:a9:df:bd:7b:21:e5:2f:
ac:ae:21:5e:b1:60:d8:30:75:26:b4:80:01:85:12:92:70:4f:
07:2d:eb:f6:a9:16:19:1d:a2:34:b4:53:f1:2d:c1:13:d1:b2:
4a:4f:fb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:57:12 2025 by rpki-client