Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: bdXqMcwkIBotN+vPCK74S/JzUdWGhGImmRXe9AQuFko=
Subject key identifier: C1:B8:EB:FD:0B:F1:1B:8C:3C:A1:C6:0B:4A:90:C6:69:2B:14:23:7F
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 0199FB459EA8CBC7C77090D874ED63B67503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:07 +0000
Manifest this update: Sun 19 Oct 2025 07:01:07 +0000
Manifest next update: Mon 20 Oct 2025 07:01:07 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: wBIo1gxM5o4WrR9fGQ7Z81GzYnoNjxpYzack79YxqFs=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:9e:a8:cb:c7:c7:70:90:d8:74:ed:63:b6:75:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Oct 19 07:01:07 2025 GMT
Not After : Oct 20 07:01:07 2025 GMT
Subject: CN=c1b8ebfd0bf11b8c3ca1c60b4a90c6692b14237f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:20:2c:73:f5:74:2c:ec:75:bd:3a:f3:07:
9e:c9:28:da:c5:0e:de:80:78:6a:6e:c0:b3:2b:d1:
b1:29:76:21:6c:4d:9a:55:29:b4:8a:fc:04:ad:6a:
5b:0a:ff:33:06:c2:96:45:cd:92:73:a1:c8:b6:6c:
cc:47:1a:82:3a:1c:6c:6f:7a:8b:b7:e8:70:f2:ae:
f0:84:90:c3:6f:d4:63:31:b1:fb:b8:c2:92:2b:ca:
69:fb:21:b7:fa:1a:00:bb:ee:93:37:96:7f:6a:53:
db:dc:73:53:78:58:b3:a1:34:b1:39:fb:d3:40:ff:
39:f4:26:11:47:9b:04:3d:74:ca:78:02:4a:74:80:
4d:d8:e8:a4:21:b5:6b:95:5c:4a:ce:2b:76:2f:54:
28:19:68:17:d5:ab:08:ab:2e:08:c8:dc:0b:03:03:
05:61:41:b6:75:ea:ca:48:f1:60:9c:61:60:06:10:
dc:e3:51:ac:93:9f:91:7a:aa:5d:21:1d:06:f4:5e:
da:bf:e9:5b:b8:4b:ff:90:e1:39:8a:4f:41:8d:99:
87:d2:2e:6d:ef:05:43:2a:25:53:a7:e9:6e:a1:3e:
86:6e:86:24:47:a3:33:1b:71:18:44:fb:7f:6a:5a:
b2:9c:dd:d2:28:94:06:02:00:ec:b8:80:b9:e1:c0:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B8:EB:FD:0B:F1:1B:8C:3C:A1:C6:0B:4A:90:C6:69:2B:14:23:7F
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d3:1d:73:24:9f:8a:8f:fa:00:4e:33:bd:7e:a9:98:8c:49:
8a:f4:46:74:e3:ef:eb:05:ba:bd:bc:3f:4b:b8:0d:d2:1e:6f:
58:4a:a0:2d:25:38:08:8f:ad:d0:83:8e:61:67:b9:c9:f0:ee:
80:67:8b:41:cb:98:4c:a4:fc:a9:ea:be:67:67:d4:a0:d2:d1:
c4:27:e6:fc:4f:e6:45:63:2b:d6:f8:8b:7e:e7:56:33:57:51:
8b:7a:30:9b:c2:8a:ed:1b:69:01:9a:9b:17:6f:63:16:2e:b8:
57:dc:35:43:4d:99:23:a5:9d:36:36:8b:52:e6:d6:29:25:5d:
71:f8:43:b6:00:5e:1b:e7:c9:71:40:9e:3b:fe:51:88:31:71:
12:d5:5f:1e:b8:74:cf:f7:e9:c0:a7:b2:86:5b:c7:8e:50:b7:
1f:31:af:f7:f0:67:da:c4:3e:60:a7:54:ce:b2:a7:61:77:be:
09:46:82:3f:8f:8c:63:1e:8a:7c:c2:71:ab:9e:d8:46:8a:c4:
37:3e:97:c1:d9:b4:29:8d:ec:4d:3f:cb:2b:b0:8b:a5:a2:a4:
fe:fe:76:08:f2:8e:92:f7:ef:3a:2b:c0:c4:da:bb:2e:bc:61:
dc:8d:b9:08:89:b6:ed:e5:07:6c:e5:69:87:3d:8e:48:0d:65:
49:ac:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client