Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: INJe9rEAkaauCBZc47C2BWjo28yYR3M4MKCr6UmH8qk=
Subject key identifier: 09:E2:6D:2F:D8:7D:86:FA:02:BE:27:22:8E:0B:33:3A:95:DE:92:EE
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019848C085B0E9A2495CE38DFE8CC5D2F792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:33 +0000
Manifest this update: Sat 26 Jul 2025 22:00:33 +0000
Manifest next update: Sun 27 Jul 2025 22:00:33 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: iYrtRACNMxrqfxPhUb1u+x85lBUoTwD4ZQ/GSRoUOEo=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:85:b0:e9:a2:49:5c:e3:8d:fe:8c:c5:d2:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Jul 26 22:00:33 2025 GMT
Not After : Jul 27 22:00:33 2025 GMT
Subject: CN=09e26d2fd87d86fa02be27228e0b333a95de92ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:27:43:27:b6:65:ce:cd:be:1c:5d:99:e1:
23:25:9f:ae:22:8a:db:f9:a0:e2:d4:b9:96:df:10:
01:83:79:69:ae:a2:c6:2d:1a:fa:d2:f9:98:39:fc:
6f:32:8c:49:e6:ef:72:af:0e:68:dc:44:04:3a:9d:
99:85:6f:e5:7a:ff:8f:85:6c:f7:0d:e3:3d:db:05:
2b:2f:b2:cf:36:96:60:e0:67:41:6d:6b:aa:6e:cb:
6e:8e:6f:ef:fd:64:ed:f7:a9:d4:25:fd:dc:13:e6:
56:e9:60:22:84:06:54:a0:e6:d1:e7:e9:37:46:71:
64:17:35:d5:d7:61:57:c0:cd:02:14:1e:ce:b5:14:
90:62:99:86:1f:76:54:b7:2f:64:68:bc:35:b2:a0:
f8:ec:3f:c5:2e:02:dc:7e:20:9a:32:ed:c3:e1:50:
29:8b:f5:ae:d0:12:e0:3e:e8:5e:59:f1:6e:aa:c5:
4f:90:f0:30:ad:a9:50:a8:ec:cb:e5:09:31:4c:8a:
64:ee:65:e8:93:e9:6c:02:68:d0:f9:e1:4b:e8:85:
42:67:16:0e:92:5d:5d:d9:31:88:ed:1e:fc:3b:3c:
4a:7f:6b:b8:a3:88:f5:a9:52:ea:ed:7f:50:e4:1c:
54:b7:78:5d:cf:20:9e:b7:6c:a7:d3:25:a9:a0:ce:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:6D:2F:D8:7D:86:FA:02:BE:27:22:8E:0B:33:3A:95:DE:92:EE
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:95:7d:40:46:ef:01:aa:bd:7d:a3:44:21:2c:b9:7e:46:36:
f2:60:81:23:4f:38:f4:8f:65:90:42:77:78:d3:c7:2e:9d:b0:
de:24:bd:49:c5:28:fb:05:61:f8:76:ce:63:b5:36:23:b8:30:
b8:a6:82:63:b3:ef:cc:32:fb:4c:0f:36:5b:ce:cd:18:55:30:
ae:ee:c5:3e:6f:21:52:1d:25:01:1f:7b:32:f5:ee:6a:52:1a:
95:ef:ab:3a:ea:cb:0d:89:bb:2b:6d:fa:e6:41:87:c4:7a:d0:
1c:4a:f2:5c:69:a5:35:72:2f:1e:c4:2b:43:b9:6a:ad:76:65:
5e:80:2a:64:1e:82:0e:e2:27:25:26:d9:ee:e0:5f:ce:c4:e5:
d1:2c:04:c8:46:b0:2e:a8:d0:5f:f0:ac:63:cd:2d:57:80:e7:
bc:92:38:26:05:f2:1c:03:24:59:68:f3:62:e6:71:25:25:9c:
4c:e3:5f:91:7a:11:42:7a:b3:d7:85:a8:88:1b:a0:07:2d:e7:
d6:e8:87:39:7c:c0:03:30:8d:ec:ee:3d:36:84:09:af:bf:c4:
40:9d:db:df:af:14:5e:45:30:4c:2b:ca:9d:12:bd:4a:5f:5e:
31:25:bc:34:d0:13:a7:ce:8b:d4:c7:86:42:51:4d:fd:da:1b:
c7:77:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:10 2025 by rpki-client