Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: l20FcW9kn2oGs3GWBTie+Mi7s/mRzsmxF44qVNDZRkY=
Subject key identifier: 45:63:13:31:7E:6B:A9:DE:7A:D4:B0:AB:0D:92:70:A5:B1:03:2D:FD
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019886C418C3BAB17F42AD4D8A3CEC37F3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0E1F
Signing time: Thu 07 Aug 2025 23:00:54 +0000
Manifest this update: Thu 07 Aug 2025 23:00:54 +0000
Manifest next update: Fri 08 Aug 2025 23:00:54 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
4: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: rnTCgMBWY6LSNG9XH+v7MBz9J+nrTxMtgJLcVMHm9SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:c4:18:c3:ba:b1:7f:42:ad:4d:8a:3c:ec:37:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Aug 7 23:00:54 2025 GMT
Not After : Aug 8 23:00:54 2025 GMT
Subject: CN=456313317e6ba9de7ad4b0ab0d9270a5b1032dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:ad:01:fd:5e:24:a5:bf:55:69:19:a8:7d:
cb:ab:be:fb:61:cf:c4:ce:94:cc:8d:54:4e:72:96:
03:f2:bb:af:f2:5f:12:7c:46:e3:67:c5:36:d1:84:
f1:66:aa:2a:cd:39:0a:30:4d:e4:e8:29:84:4b:35:
24:b7:44:c7:b9:ff:9d:34:f6:fb:67:53:28:82:dc:
51:9a:d8:48:3f:53:4b:ec:12:9f:cd:65:87:49:ef:
a2:79:a7:4e:a9:37:bf:8f:b5:93:c6:11:c9:9c:9a:
20:94:6e:8c:17:59:cc:fa:25:06:8b:c0:6f:70:85:
1d:fd:fe:71:de:6b:56:96:a2:e7:47:33:57:9c:67:
94:c5:d0:47:bf:74:49:fe:96:41:90:de:62:61:d3:
fb:a1:f2:99:fe:c3:c6:c6:0d:a7:50:e5:8a:60:65:
b5:b9:58:e0:33:9f:0d:00:30:64:68:72:a9:32:9f:
b4:00:af:02:5d:53:ba:07:22:e6:53:a4:0b:1a:4d:
35:41:54:d6:89:3e:0d:26:82:55:52:77:1e:32:ba:
44:eb:63:86:78:82:df:40:d7:a9:6c:46:67:89:a9:
93:59:05:fb:50:94:81:05:79:72:43:5b:56:02:59:
05:56:96:b1:77:a9:ea:59:3b:e5:d7:af:02:8b:6d:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:13:31:7E:6B:A9:DE:7A:D4:B0:AB:0D:92:70:A5:B1:03:2D:FD
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e9:e4:ec:0f:26:e7:59:ca:d5:b2:d8:3c:8a:0e:f3:50:e2:
ee:ca:fe:7c:de:48:be:0d:cf:2b:10:0b:4f:5d:2d:0b:fb:2c:
f6:f4:83:71:ac:6e:ba:e8:55:ae:7d:2f:2b:ba:22:a5:58:8c:
0c:aa:a6:c8:a1:2f:ba:6b:ca:57:e3:a5:47:ba:a1:b2:69:62:
6b:fa:65:ee:b0:ec:fe:8d:50:23:5e:3e:16:a5:43:98:db:bb:
cb:17:07:19:3a:dc:d3:a4:35:fb:5e:79:bf:5b:b5:6e:a7:db:
c9:8d:ac:50:7c:b4:5c:2c:bf:71:49:80:c9:70:79:a1:8e:52:
ec:33:06:77:86:92:f5:aa:48:c3:90:65:b5:b5:6a:22:40:fe:
62:58:66:69:52:a5:4e:0c:28:ba:8d:d8:1b:01:49:01:fc:ea:
c7:33:c3:42:84:9e:91:8a:aa:28:c8:f5:fe:bf:02:55:af:99:
cb:7b:bf:23:fb:f2:e2:46:df:b6:1f:be:c6:fb:f8:a0:17:1b:
80:82:88:27:fe:9b:8e:05:11:19:8d:49:61:4b:82:8d:b5:90:
bb:e3:ef:a3:3a:2a:d5:f3:a5:77:60:f6:4e:65:8d:5d:0a:d0:
c7:0d:3f:00:f2:ce:e5:94:83:26:73:d8:58:a2:d1:d5:da:f8:
56:7c:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:47:27 2025 by rpki-client