Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: P/IeLLJNjE7tQzOvbIMkoYFqHNKIXOYfMKlTO5lC/4Q=
Subject key identifier: 8A:05:82:02:D4:6D:87:62:6D:3A:D0:FA:03:21:FE:0B:3A:0D:17:64
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 0197B7EA6811013B52C10FD1C08CEA1AC539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: iBskrEGZTUtpxtGdlA5GTQzluMFt+ZmRfyoqB5BJwBs=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:68:11:01:3b:52:c1:0f:d1:c0:8c:ea:1a:c5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=8a058202d46d87626d3ad0fa0321fe0b3a0d1764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:c3:53:ff:37:8f:bb:8b:d8:07:d1:b4:71:
e7:e5:b7:a4:1c:3a:0b:eb:c4:bf:fc:39:21:52:cb:
50:14:97:ab:66:61:b0:50:62:e4:09:ec:48:ef:bc:
d4:8c:a4:1a:cc:13:a2:f8:46:d9:dc:fd:81:c1:8e:
5e:35:88:fc:f9:8a:3d:5d:04:e0:8e:aa:52:19:d0:
a6:f2:a0:26:95:a7:08:0a:b6:3e:24:e9:43:a0:7c:
c5:f2:87:86:6f:64:0a:62:6b:84:88:52:f6:1b:b1:
a6:a2:5c:2d:08:66:de:27:15:23:95:4b:a7:89:1d:
ef:c8:e7:fc:2b:98:0c:2a:e4:4c:dd:4b:ff:bd:ef:
e8:b3:92:55:9c:72:d7:0b:eb:b9:9f:fb:c8:c5:7e:
be:2e:94:b0:89:2d:ad:08:77:ec:ce:e8:8d:a7:fd:
4d:db:a9:6b:88:0b:c2:e7:a7:3b:2d:dd:4b:b7:8b:
39:07:a4:be:1d:72:cf:23:aa:53:67:46:44:6a:42:
9d:06:ef:ae:d1:70:e7:6a:71:c6:68:9e:c6:26:ff:
e9:9a:ea:ed:05:c3:5b:da:33:0f:5c:d9:b4:d1:bd:
87:48:43:6d:97:6e:56:18:47:c9:71:3c:2f:9f:1e:
8e:74:7f:cc:c1:a5:77:0a:eb:9e:85:2e:0a:4d:57:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:05:82:02:D4:6D:87:62:6D:3A:D0:FA:03:21:FE:0B:3A:0D:17:64
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1d:3c:46:20:36:54:a0:a0:d0:b3:9b:bb:ec:79:84:db:0b:
f4:56:3c:a3:02:c3:e6:b9:3e:7b:50:1f:1f:17:d1:d4:92:5d:
19:3a:dc:06:8c:ab:0f:8c:36:1c:44:1a:80:d8:c1:d3:8e:34:
bf:90:e7:e4:01:d6:92:c7:f9:f7:93:bc:1c:6f:60:04:b9:b0:
db:94:1c:a0:09:c4:67:6d:4a:48:46:0f:6c:41:e5:eb:0b:b2:
21:f4:d5:d8:9a:22:6c:e7:5f:b0:38:2b:e5:df:b7:fa:86:8c:
a5:c0:12:42:30:78:ae:ab:5e:a0:53:b9:8b:f7:02:25:bc:df:
1e:82:53:da:72:33:a4:46:80:5a:fa:9b:23:3c:c0:2c:19:88:
3c:d3:0d:d1:3c:57:46:8b:51:7b:60:9c:49:e6:d6:e4:5d:0a:
0c:cb:7d:03:ad:8a:bd:4c:0c:45:dd:fe:54:dc:68:cb:a2:ca:
8c:ad:d6:15:99:03:f9:f3:20:19:97:ea:3c:aa:35:39:30:61:
1b:42:af:42:9d:81:c7:48:c6:20:60:37:47:c3:13:cf:48:ce:
22:bb:1f:63:29:eb:2b:fb:9b:96:e3:21:5a:da:72:cb:23:4b:
30:a2:05:ba:5d:3c:49:7e:c9:07:b2:e2:d1:ae:be:b8:7f:f2:
91:0e:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:19:28 2025 by rpki-client