Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: kamW1yKSRZRAidFpoMObJRubO2qdBoHMPA4WLm0BLjE=
Subject key identifier: 13:EE:B7:FE:64:73:DF:9C:B6:EB:0F:7C:8B:26:95:DE:0A:81:4A:5C
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 0196BCDB924BE1832B02DF1F7C1836C8EBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 01:00:28 +0000
Manifest this update: Sun 11 May 2025 01:00:28 +0000
Manifest next update: Mon 12 May 2025 01:00:28 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: Rbr8bB/azqXGCKpmchjqmllsfZAQyM0ysWo+OOMFln0=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:92:4b:e1:83:2b:02:df:1f:7c:18:36:c8:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: May 11 01:00:28 2025 GMT
Not After : May 12 01:00:28 2025 GMT
Subject: CN=13eeb7fe6473df9cb6eb0f7c8b2695de0a814a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:5f:9d:b4:f2:10:c5:dd:1d:0a:3b:90:dd:
ef:51:c7:ef:83:13:b9:f9:28:44:e7:5c:b3:4f:0d:
4a:17:3b:b1:8e:5f:1f:73:5d:c8:42:ba:e5:c6:03:
4b:f7:23:ef:17:95:35:90:75:a1:76:d1:25:b3:28:
4d:1c:7c:85:db:42:7e:a5:32:21:2d:38:a6:e6:12:
b6:32:77:da:fa:23:48:59:56:8f:ce:98:51:f8:ea:
9a:0b:f6:b8:a2:32:50:d9:77:d7:22:46:10:1e:d7:
ad:d1:36:66:af:4f:3e:b2:67:c0:77:fc:6a:c0:d5:
fd:e4:de:59:91:93:a7:7b:05:2a:ac:0f:c0:92:d6:
00:25:ea:8a:57:1b:55:5d:07:73:31:fe:c3:8f:6f:
41:64:80:07:5f:f9:41:5b:21:10:44:1d:27:36:80:
06:18:e0:c5:bd:73:76:e7:88:7e:a4:b5:c3:be:8e:
15:2f:f4:47:70:5c:6e:7f:53:7b:d8:35:c5:76:11:
04:a2:32:93:18:32:fb:e7:d7:ea:f5:6f:6d:b0:12:
38:4f:77:cd:3b:a4:b8:27:fc:22:88:07:a1:b7:7a:
d4:46:3c:75:dc:da:bb:42:8a:82:10:15:6e:72:01:
70:db:ca:62:76:49:57:fd:39:75:06:3d:2b:be:36:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EE:B7:FE:64:73:DF:9C:B6:EB:0F:7C:8B:26:95:DE:0A:81:4A:5C
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:41:8c:ef:96:cc:bd:1c:1f:0c:93:65:00:8c:5a:e4:2b:ee:
68:1f:d9:f0:d3:97:66:2f:d3:0d:3e:2e:49:f9:e7:ad:cc:b7:
d9:4d:ac:9b:ae:c6:ad:bb:59:2f:90:b3:05:12:4e:32:ac:8f:
5d:69:f5:2a:e0:55:13:72:cc:40:8b:28:3c:79:de:d5:6e:fb:
5a:d4:70:85:32:ed:3b:41:d8:12:83:1c:18:1d:65:24:85:42:
a9:e9:86:39:2d:72:52:3b:7c:77:46:c2:4d:43:f2:11:3f:5c:
ca:0f:dd:d7:7b:f3:f8:f5:99:a7:8a:5f:37:09:f7:c0:2c:da:
57:1b:89:36:3e:02:db:31:a9:06:f1:0f:b8:8c:9d:45:ad:ff:
78:05:f0:04:f9:90:15:42:ac:b5:81:33:3b:c8:c9:69:3c:38:
45:4e:b8:f8:37:7e:ff:2d:47:cc:91:58:13:67:a9:fe:37:b1:
93:cf:7e:45:8f:ba:5a:70:53:0d:3a:b4:3d:0e:c8:dd:31:9d:
8a:75:b1:45:bd:9b:c8:e9:92:ac:56:51:34:82:41:a7:4e:2d:
45:65:5c:98:67:d2:18:80:b5:cb:f1:a9:e0:bb:de:e8:41:f4:
76:ff:33:6d:ff:5f:0a:34:9e:9a:39:6a:31:88:0f:56:3d:92:
75:2d:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:15:20 2025 by rpki-client