Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: hYdUcSvhcb1BM6doWtgResfeh9FeVP0FBogYgsFio/w=
Subject key identifier: 3F:FE:83:18:1D:7A:B0:1B:55:A3:40:DC:41:5F:92:BA:E2:1F:55:BB
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019656815898A544BBC16DC2D9A7221BAFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 04:00:39 +0000
Manifest this update: Mon 21 Apr 2025 04:00:39 +0000
Manifest next update: Tue 22 Apr 2025 04:00:39 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: BNRb9gJPRelLypfBvEoGL1MXdjhS0St/EJMaRp1Od08=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:58:98:a5:44:bb:c1:6d:c2:d9:a7:22:1b:af:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Apr 21 04:00:39 2025 GMT
Not After : Apr 22 04:00:39 2025 GMT
Subject: CN=3ffe83181d7ab01b55a340dc415f92bae21f55bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:66:b8:24:57:b6:b5:ab:15:5a:1f:be:44:
7d:91:58:ae:52:5b:7b:76:c3:77:40:7b:e4:27:ba:
ff:84:37:e8:9c:e6:46:c9:8d:78:70:96:4f:38:25:
36:7b:e2:b4:ef:2f:81:10:27:6b:2c:33:0f:67:85:
8c:88:20:b5:d4:7a:8b:b2:53:f5:3e:9b:ff:3c:53:
f4:07:35:fb:d6:8c:c4:37:d6:45:5a:47:f3:50:24:
aa:9b:2f:41:8b:6a:5c:22:d1:33:0d:66:2c:30:29:
e0:a4:14:c2:5e:11:86:5e:5f:2f:b0:f4:fa:0b:cd:
a6:08:b3:6e:9d:fe:23:07:39:b8:5c:2c:9a:30:dc:
2d:55:f1:00:97:e7:53:a1:3d:60:b7:0d:1d:01:9b:
cd:d8:af:10:c6:40:d0:b5:dc:dd:e9:52:68:a9:a0:
8a:0d:dc:57:a9:b9:2d:25:47:cb:ec:b2:34:5a:5e:
ef:00:7f:7d:46:c5:80:09:ae:6b:6a:cb:68:d1:ef:
31:60:ab:6a:2e:e6:18:83:cd:27:0a:58:c3:dd:b8:
be:e7:15:9e:a7:cc:b4:a3:21:85:de:c7:de:b8:23:
30:64:80:cd:05:6b:4c:18:88:1c:87:05:81:5e:c5:
b8:1a:72:58:2c:76:ec:aa:5e:46:6d:5b:14:58:4b:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:83:18:1D:7A:B0:1B:55:A3:40:DC:41:5F:92:BA:E2:1F:55:BB
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:20:b4:c4:c6:e4:28:bd:8e:fb:4c:6c:00:af:62:a0:40:1a:
4a:02:5c:2c:47:75:9e:88:fb:9f:b5:fc:73:fc:73:1f:ef:ae:
e3:4e:4e:02:c5:ac:2a:ff:27:3b:eb:13:1f:cf:49:cb:c2:c2:
42:f9:ff:29:fb:16:56:5b:11:72:7c:45:48:f5:8d:a8:7c:21:
c2:10:77:db:ab:6c:8f:05:ff:40:a4:a1:38:fe:45:35:49:5a:
9d:a6:be:5b:84:ed:ff:3d:9e:e9:59:4a:a7:13:68:38:0c:03:
e6:0b:42:3b:80:0e:a3:5e:89:8e:5b:62:e2:a9:d3:ee:b7:e9:
27:11:90:b3:ea:6f:e0:27:02:9f:58:16:6f:19:35:87:40:10:
41:bf:57:57:5c:40:32:31:2c:ff:66:7a:6f:26:23:44:a9:1f:
70:6b:f2:29:99:44:fa:6d:80:68:9f:66:bc:27:16:f2:05:83:
8b:b7:58:dc:62:9d:eb:4c:03:7a:1c:2a:d8:a7:63:00:37:7b:
59:36:1f:18:e6:f3:14:d4:12:dd:fd:1c:fe:cb:be:50:c4:bf:
04:5d:6a:84:d6:e1:cf:49:b7:32:1a:24:ee:8a:e9:84:73:54:
67:8d:f5:4a:5a:2b:df:35:7f:e5:61:74:a7:7b:f5:47:d2:2a:
bf:12:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:42:02 2025 by rpki-client