Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json)
Hash identifier: 1JOAhCa00SBFiK5A8P9IqUShN7pf/pnYzqclIb/T/8I=
Subject key identifier: 86:6C:33:4D:31:88:B1:D8:04:1E:40:17:E6:EB:BD:80:65:94:24:C2
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01976CCFD2C5C45ACFBC4D4CB928A832EDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
Manifest number: 0D8D
Signing time: Sat 14 Jun 2025 05:00:48 +0000
Manifest this update: Sat 14 Jun 2025 05:00:48 +0000
Manifest next update: Sun 15 Jun 2025 05:00:48 +0000
Files and hashes: 1: 6a7X1voDRZgIfbbKk3z8lwfZxaY.roa (hash: AaS2aTB6rrSjlOkbBkKHW5hu9doZ/g90zlDcUQsA1d0=)
2: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=)
3: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=)
4: QBFidod6jL-O_PLphDzUTfk8gSs.roa (hash: MzCXrlb+iM3QXQEPZ+kHvIfGWId6awqeXlXphcbIxlE=)
5: fW4AcsvG-JA-vobl201cRJNBVqQ.roa (hash: 0DZ34qEx/Sk1SrhU1+H9av5DQTD3qd6EBGGiFHMhXdQ=)
6: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=)
7: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=)
8: nDQZdingmM80ET66f_cHD5rQYC0.roa (hash: ISKP+zEkKmK3U65ot6Oz+uUfXHtEGhyL31yfH/q/odE=)
9: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: eu4VbtsZSQ0iji9R5nlosyA6BKI2i8eoCVNjUct+v+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:d2:c5:c4:5a:cf:bc:4d:4c:b9:28:a8:32:ed:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jun 14 05:00:48 2025 GMT
Not After : Jun 15 05:00:48 2025 GMT
Subject: CN=866c334d3188b1d8041e4017e6ebbd80659424c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:fa:e0:ff:89:b8:87:1b:f0:04:6f:39:d3:
21:ef:a9:1d:9d:94:d4:9e:34:49:fb:72:7d:44:bd:
c0:aa:14:ac:81:ef:7a:26:e9:b5:81:5f:f1:d9:cb:
af:f8:e8:2f:dd:60:e4:cb:8e:f1:5d:89:0c:dd:d9:
e1:d2:1f:93:f2:21:c0:27:c8:28:99:4d:ed:96:b4:
72:8b:30:7a:19:4f:32:3d:b9:97:3d:d7:01:95:85:
56:bd:06:71:81:53:4a:59:95:c3:9c:74:a5:8c:4e:
ec:ed:07:dd:fb:20:ed:1a:01:55:03:c7:a1:3e:f7:
89:5d:86:da:3a:86:47:59:ff:a8:2b:b6:54:6c:4b:
1e:e2:06:54:f3:bc:9a:6b:89:bd:aa:3a:21:31:d2:
0a:7e:3e:b6:2e:16:26:76:32:8b:b4:3f:e2:f5:79:
d3:bd:a6:75:30:50:0e:cd:31:54:83:c4:41:8d:27:
fe:9d:1a:85:cf:2c:80:79:35:db:a6:92:d6:c3:7f:
ef:ca:33:7c:38:d2:a6:4d:ce:e8:3f:52:50:63:33:
78:ef:20:74:5b:bc:0b:96:d0:b4:31:79:d8:6a:ba:
08:4e:a4:f9:ea:73:21:a6:a3:52:cd:3c:8c:c5:bf:
bb:5c:12:25:45:4b:6a:14:dc:c1:c0:f4:43:70:5c:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:33:4D:31:88:B1:D8:04:1E:40:17:E6:EB:BD:80:65:94:24:C2
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a2:9c:e2:62:94:03:8f:59:85:d1:a4:c3:62:7e:11:00:f9:
da:68:84:9d:43:34:3e:fb:fa:6c:d5:f0:32:58:ca:a2:c0:e3:
83:dd:a6:54:49:c5:12:59:41:1d:9c:72:36:34:eb:f3:3d:5a:
cb:22:b4:9a:c5:a9:c5:1c:5b:a0:ad:e7:27:03:f3:9e:30:01:
b3:24:25:1e:4a:a5:0d:c9:19:b5:22:91:15:89:bf:3c:1c:17:
35:3a:e5:4d:43:21:74:02:9c:e3:d7:b1:ff:56:34:19:55:ce:
f6:f4:6c:75:96:ed:12:ee:d6:47:e4:9f:a8:50:2f:b1:34:93:
19:46:6c:8c:23:3f:c8:8e:07:aa:d2:14:58:dd:ed:59:ec:7a:
86:47:c7:2a:07:6b:59:1f:8a:50:d8:62:57:73:f9:d9:dc:77:
69:1a:49:48:d4:36:10:11:93:c4:97:0c:30:4e:7b:75:de:04:
f0:99:a5:69:0f:69:08:0a:d8:c5:12:ae:2c:f6:f9:4c:ac:5b:
d3:b7:94:a9:ad:a5:ed:ea:03:7e:a3:1a:9c:36:76:07:7b:58:
37:e8:68:25:81:1b:93:3e:4e:e3:d7:4f:30:bd:b7:aa:41:fb:
46:58:26:38:e2:0d:80:d1:23:36:5c:59:0b:92:39:f0:3d:eb:
79:40:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:24 2025 by rpki-client