Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: PJcHtr5aFBPoaQfr3hI5A/PsJcfsYEn7zyensLrFR9A=
Subject key identifier: FD:80:9B:E1:1B:3D:76:FB:04:33:C0:A3:B3:9A:DA:53:9F:D9:03:94
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 019A4CCECB0E9E906ACCF136E0357278795A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0F0B
Signing time: Tue 04 Nov 2025 03:00:12 +0000
Manifest this update: Tue 04 Nov 2025 03:00:12 +0000
Manifest next update: Wed 05 Nov 2025 03:00:12 +0000
Files and hashes: 1: 1-h5OCB8JpMYjopLDVkrKQwK2dpM.roa (hash: d3AbXN4lYtYyEUM8E0v7gWJmAkvZX7xtSRa43xkdCaQ=)
2: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
5: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
6: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
7: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
8: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: cMKANUz0iK90RFB4MjYx1d2yUF6TRLAFkJLMQklCWxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:cb:0e:9e:90:6a:cc:f1:36:e0:35:72:78:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Nov 4 03:00:12 2025 GMT
Not After : Nov 5 03:00:12 2025 GMT
Subject: CN=fd809be11b3d76fb0433c0a3b39ada539fd90394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:b5:28:66:45:dd:f3:5c:06:59:0f:22:01:
23:de:dd:81:0b:06:bf:2c:fe:40:80:59:6b:71:02:
35:65:45:3b:05:81:b3:cc:fd:4e:3a:bb:d6:16:10:
0d:b0:45:fe:cc:02:91:49:b7:b4:6a:10:3d:cc:eb:
b2:54:99:3f:58:15:05:cd:98:fa:79:46:84:fc:86:
27:63:5d:74:23:cc:c0:8f:00:7b:e1:4b:2c:94:2b:
60:f6:8d:99:0f:91:a7:5c:aa:9d:36:41:65:33:54:
d1:f6:46:12:0e:d8:82:5e:b1:eb:16:44:8f:aa:a3:
ea:f6:c6:ed:2a:d9:00:7b:2c:24:59:9c:dd:0e:f6:
93:3f:35:8f:db:b3:27:07:c8:6d:6c:25:a6:89:e4:
16:fb:3f:7a:69:4e:15:f7:eb:e3:e1:4f:ff:b9:24:
31:92:5d:33:bc:77:c0:50:d3:ca:85:9c:69:81:9d:
a1:05:24:3f:6f:df:2e:40:ac:91:80:79:4d:35:4a:
a1:17:6b:d9:90:f6:89:d4:2b:d9:d6:b4:3e:bc:d8:
1f:cc:5e:b0:4a:5d:ee:7c:a0:f6:48:7d:b2:52:86:
ba:ad:ed:40:da:e7:fa:ff:f1:fb:e7:2a:0f:57:df:
b6:54:09:5c:99:88:c9:43:d0:f4:b7:a8:10:23:da:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:9B:E1:1B:3D:76:FB:04:33:C0:A3:B3:9A:DA:53:9F:D9:03:94
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a5:46:28:fd:41:0e:b0:75:48:65:59:c1:c6:6b:9d:96:b6:
fb:2f:0e:a3:8c:23:68:f8:c9:28:c8:6c:d5:b6:ff:9f:ed:f5:
9e:5b:ea:4f:27:7b:13:a9:51:05:5e:b0:7c:6a:09:36:09:78:
1e:54:da:09:2c:1e:7a:6e:b5:ed:ee:ab:e1:07:1a:58:95:f2:
90:75:c5:e4:e2:f0:c7:76:69:d1:7e:33:cb:a0:aa:63:9a:52:
71:e9:67:fd:8b:09:42:05:02:a7:b1:ef:0e:cd:45:0c:63:7d:
db:c8:ba:16:83:0b:82:c5:60:0d:ef:bf:cc:e3:bd:b2:3b:86:
ed:9a:f4:07:92:7e:1a:d5:67:06:8d:ed:69:cd:52:81:81:97:
27:46:b3:f1:8c:2c:ce:24:cd:ef:d4:f1:fb:4c:3d:50:03:45:
4f:e6:db:c7:e1:a1:bd:e4:b1:af:10:b2:de:89:ed:0e:b3:f8:
e4:1c:33:75:34:0c:6e:a8:ab:46:a6:d0:b3:01:3e:08:2f:b4:
28:ba:4e:00:98:6a:fd:de:06:ed:9a:e4:b3:cf:e8:99:c5:a4:
e3:a3:79:13:07:1b:68:ed:fb:25:1a:70:2e:ba:91:09:96:22:
9d:fd:b0:56:cb:08:e1:1d:05:0c:8c:b5:cb:28:12:6c:3c:2e:
f7:24:ce:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMzssOnpBqzPE24DVyeHlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi
ZjQ3NWQwHhcNMjUxMTA0MDMwMDEyWhcNMjUxMTA1MDMwMDEyWjAzMTEwLwYDVQQD
EyhmZDgwOWJlMTFiM2Q3NmZiMDQzM2MwYTNiMzlhZGE1MzlmZDkwMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jm1KGZF3fNcBlkPIgEj3t2BCwa/
LP5AgFlrcQI1ZUU7BYGzzP1OOrvWFhANsEX+zAKRSbe0ahA9zOuyVJk/WBUFzZj6
eUaE/IYnY110I8zAjwB74UsslCtg9o2ZD5GnXKqdNkFlM1TR9kYSDtiCXrHrFkSP
qqPq9sbtKtkAeywkWZzdDvaTPzWP27MnB8htbCWmieQW+z96aU4V9+vj4U//uSQx
kl0zvHfAUNPKhZxpgZ2hBSQ/b98uQKyRgHlNNUqhF2vZkPaJ1CvZ1rQ+vNgfzF6w
Sl3ufKD2SH2yUoa6re1A2uf6//H75yoPV9+2VAlcmYjJQ9D0t6gQI9p0WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2Am+EbPXb7BDPAo7Oa2lOf2QOUMB8GA1UdIwQY
MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt
YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk
LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqVGKP1B
DrB1SGVZwcZrnZa2+y8Oo4wjaPjJKMhs1bb/n+31nlvqTyd7E6lRBV6wfGoJNgl4
HlTaCSweem617e6r4QcaWJXykHXF5OLwx3Zp0X4zy6CqY5pSceln/YsJQgUCp7Hv
Ds1FDGN928i6FoMLgsVgDe+/zOO9sjuG7Zr0B5J+GtVnBo3tac1SgYGXJ0az8Yws
ziTN79Tx+0w9UANFT+bbx+GhveSxrxCy3ontDrP45BwzdTQMbqirRqbQswE+CC+0
KLpOAJhq/d4G7Zrks8/omcWk46N5EwcbaO37JRpwLrqRCZYinf2wVssI4R0FDIy1
yygSbDwu9yTOJA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:57 2025 by rpki-client