Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: FMru7q0LPZttSM1Q1a3xPr6htqA+WT/R1ruUG6dG8LY=
Subject key identifier: 35:6D:14:62:8F:2D:93:B1:E4:A7:E5:B5:43:BB:C4:3C:AE:6E:41:82
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019681A245B8C67EA9DE3AF4F1DDCBB55AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0D13
Signing time: Tue 29 Apr 2025 13:00:17 +0000
Manifest this update: Tue 29 Apr 2025 13:00:17 +0000
Manifest next update: Wed 30 Apr 2025 13:00:17 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: Bf7OVXQI7NP6BnLconGXvo-6sws.roa (hash: JyZurMaiEFvjOy1NMo/RzKa7qogLz+KnFYIZAGu//y8=)
4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: 3D7iEVvXan+D8l5iUqgDnl30qXW1jfjFPVrOqGVMts0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:45:b8:c6:7e:a9:de:3a:f4:f1:dd:cb:b5:5a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Apr 29 13:00:17 2025 GMT
Not After : Apr 30 13:00:17 2025 GMT
Subject: CN=356d14628f2d93b1e4a7e5b543bbc43cae6e4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:cd:3b:16:6d:58:8c:36:93:0c:93:17:5b:
15:0c:22:36:c4:e8:43:ee:ee:1b:11:27:61:69:93:
59:51:33:cc:d7:8b:0f:8c:ca:02:02:a6:02:87:d6:
e8:8b:6b:b4:a6:1b:0d:36:9c:2a:4d:23:ab:62:40:
e4:80:a6:fa:20:17:98:98:1e:26:2c:af:da:74:56:
c8:f8:bc:ee:91:45:45:56:24:9b:40:df:d7:f9:9e:
3f:d3:62:3f:7b:fe:8b:6c:45:80:30:68:5a:af:ec:
03:65:93:d1:f0:f8:ea:cb:11:ab:ff:72:f3:75:d2:
9a:00:d0:8e:12:cc:34:5b:3c:59:83:a0:72:fc:58:
7d:24:d1:a1:a9:02:a8:ea:de:ac:f1:c6:0d:b5:1a:
88:ea:33:bc:f0:0a:ad:a0:bf:38:5a:74:b0:ab:2b:
c3:f7:53:7b:5d:38:c2:0c:df:c7:db:e0:e3:46:15:
5f:23:d5:3f:c6:67:36:01:59:9e:94:fb:ce:a2:44:
e7:30:8f:61:79:bc:08:8c:54:71:d9:a1:0d:6f:e6:
3b:3b:92:a9:2f:f8:93:3e:35:c5:38:3b:f8:8a:6d:
aa:41:32:d7:33:70:5a:e7:4b:c9:42:5c:4f:70:b8:
a5:8f:64:c5:4e:c5:ea:e7:1e:a4:7b:f3:a0:8f:15:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:14:62:8F:2D:93:B1:E4:A7:E5:B5:43:BB:C4:3C:AE:6E:41:82
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d2:c8:8e:7c:a5:fd:52:89:e0:a0:07:6e:58:89:30:30:9a:
1e:62:e5:de:39:b1:85:59:f5:9a:53:49:27:40:c1:29:34:59:
3f:a7:55:7d:08:de:ea:94:fd:a3:09:16:79:86:b3:c3:ac:da:
d1:50:29:eb:b8:74:57:6b:13:4c:00:d7:16:7d:53:29:dc:b7:
7e:ab:47:a2:6a:ac:39:f8:61:d6:52:7e:36:b1:26:30:1e:76:
4c:df:f5:8a:76:62:9b:5e:74:e8:91:84:70:38:d8:17:28:13:
d1:e2:47:13:8a:4d:78:1b:0a:46:89:2b:eb:21:4b:cd:93:29:
d4:8c:6d:4d:9b:b5:08:ad:48:83:3a:06:92:c2:c4:3e:88:a5:
4a:28:17:dc:7a:10:5e:d4:fd:6c:cf:1b:99:9b:7e:2e:a9:a1:
b6:71:e0:46:2c:20:78:ac:ab:7d:7a:e8:38:42:cc:a3:9e:27:
3a:16:d0:61:0b:98:f5:a6:bd:36:3f:37:e9:91:11:c4:55:38:
68:20:7c:2e:e3:79:6d:74:2f:74:02:44:1c:81:8e:2d:be:31:
18:e5:6f:3e:21:2c:97:0d:70:dd:ff:42:e7:05:97:db:f2:c1:
6a:96:49:32:e3:5e:6a:67:1a:ac:28:a7:cc:7b:ef:38:2c:fb:
52:5a:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:27:03 2025 by rpki-client