Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: hI58xiFNp4cQLmsEbOL9uafsa2r1OvDIqiZK98yvUFU=
Subject key identifier: 70:DF:80:AD:16:46:E5:B6:2E:6C:97:B0:72:3B:9B:14:F1:4F:5D:B4
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0196BF6EC004B88217E6CAF933FCD43F5F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0D33
Signing time: Sun 11 May 2025 13:00:28 +0000
Manifest this update: Sun 11 May 2025 13:00:28 +0000
Manifest next update: Mon 12 May 2025 13:00:28 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: Bf7OVXQI7NP6BnLconGXvo-6sws.roa (hash: JyZurMaiEFvjOy1NMo/RzKa7qogLz+KnFYIZAGu//y8=)
4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: Z4GtU0bz1+jz3BdesabvMjOM8qqYHqMCgtN2k/cRmUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:c0:04:b8:82:17:e6:ca:f9:33:fc:d4:3f:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: May 11 13:00:28 2025 GMT
Not After : May 12 13:00:28 2025 GMT
Subject: CN=70df80ad1646e5b62e6c97b0723b9b14f14f5db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:c8:ba:28:61:f5:68:ec:b0:c7:a2:61:1a:
fc:19:61:66:e7:76:83:be:56:d6:11:10:b2:eb:1e:
4b:38:74:c4:53:ec:2f:27:bc:f1:f2:4f:9e:5c:45:
f9:51:a6:09:c2:10:b3:9c:66:fe:f0:b4:88:ee:b5:
a5:43:2e:78:de:71:24:3d:cf:cf:9c:39:8c:78:01:
75:ae:bf:20:81:0b:28:af:27:cc:c4:22:4d:79:ce:
41:3d:86:f1:1b:88:46:2e:8b:72:16:2e:de:82:06:
87:73:e9:d2:3f:c6:f0:6d:a7:69:e9:e5:b4:30:b4:
f2:ce:d6:17:33:28:69:a0:9e:48:bb:12:92:e9:9f:
31:06:48:ec:63:aa:4a:4c:b0:74:ea:b9:2f:d0:75:
b7:da:2e:07:94:e6:0a:4f:20:57:e2:5b:de:44:3a:
fd:43:38:51:06:94:ed:d2:21:33:3b:04:0d:1c:32:
b1:5f:86:2d:b5:69:df:73:c5:0f:d8:0f:0d:54:de:
c3:b2:02:a7:52:85:1a:ee:ec:ea:93:56:a9:45:18:
2c:b9:c5:c7:89:04:38:a6:a2:2d:29:29:5f:54:0e:
dd:2e:5a:80:db:3d:40:8b:32:f4:63:53:1b:7e:27:
f1:16:24:fd:74:eb:af:60:53:59:b2:71:98:4c:c9:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:80:AD:16:46:E5:B6:2E:6C:97:B0:72:3B:9B:14:F1:4F:5D:B4
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7a:7d:6f:f6:10:ee:57:53:02:ca:be:46:2c:20:02:cd:e2:
fc:cf:4a:e9:86:bf:2a:12:87:da:6a:70:8c:8e:5c:57:d9:f3:
97:26:8a:4e:29:d1:44:c2:36:b7:62:42:57:d1:6c:63:93:61:
88:93:bf:aa:29:9c:c2:5d:48:55:8e:66:73:2d:4b:87:7a:a8:
75:c9:cd:d8:d5:22:98:19:5d:04:e6:53:a2:b9:90:12:94:13:
4b:b7:dd:ae:c8:96:15:58:0e:46:c6:8c:a6:50:16:0f:11:60:
95:82:83:e1:bc:09:ae:50:99:92:dc:e4:50:30:ef:9c:18:2b:
c1:c2:98:83:9c:10:7a:76:e7:ad:2c:6a:61:0b:96:21:1f:77:
70:1c:0b:2e:40:e1:da:28:76:cc:ff:62:84:93:42:7a:b0:19:
61:71:77:28:2d:56:6c:30:68:06:05:ba:94:ad:28:35:24:da:
0c:57:03:09:62:f4:90:f2:04:c2:73:c7:39:d5:c6:9c:a0:94:
2a:19:94:79:ac:c4:31:bd:4e:21:fc:b4:c0:c1:51:3e:eb:a0:
ad:7f:82:73:ed:03:77:b3:ab:9a:69:49:76:df:19:8c:a5:cb:
99:91:e2:d4:39:dd:bd:51:9f:8f:86:4b:1a:8e:b3:53:f8:41:
7e:19:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:16:27 2025 by rpki-client