Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: 4gFqCu92mq5OnDHVHfeq0FlIJ0HV/UGYOO/SfR5anvk=
Subject key identifier: B1:FC:DD:35:61:97:73:A9:F3:FA:B5:66:62:B4:B9:26:4A:F5:B0:80
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 01987CE5375E73DC7A3B9B91DDAFF08435E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 01:00:53 +0000
Manifest this update: Wed 06 Aug 2025 01:00:53 +0000
Manifest next update: Thu 07 Aug 2025 01:00:53 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: 6j/xufoscD6PErvWVkIkkGpgWOzmz7KXoqkuS+j7eW8=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:37:5e:73:dc:7a:3b:9b:91:dd:af:f0:84:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Aug 6 01:00:53 2025 GMT
Not After : Aug 7 01:00:53 2025 GMT
Subject: CN=b1fcdd35619773a9f3fab56662b4b9264af5b080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:41:16:e4:cb:ce:9a:ea:e5:0c:0d:3d:27:
68:45:63:60:58:d4:25:77:4b:20:24:49:dc:71:38:
01:a8:0d:50:96:10:99:8b:74:5d:ec:f5:e2:e9:83:
64:72:89:06:3b:5f:a8:59:49:78:7a:47:1f:24:d5:
94:1d:b4:47:2b:69:b3:ea:f7:d6:57:3a:b2:df:3a:
0c:d1:79:ef:75:af:13:93:fd:e2:85:99:5c:96:8b:
de:be:68:55:00:81:03:25:b2:a8:c9:d5:bd:62:2e:
34:1b:4f:42:8d:90:1b:81:75:5d:e0:1e:02:a4:5b:
60:7e:bf:78:2c:5c:be:49:7f:8a:c5:f5:4a:28:7a:
c5:90:f6:f9:8f:49:40:b0:81:d0:08:fc:79:82:a9:
bc:4c:3d:7c:2f:56:5a:3c:e6:4b:95:d9:65:6d:83:
99:1c:e9:48:fd:88:71:20:54:4b:03:51:24:91:0a:
0f:05:e6:5e:d5:59:a4:2a:d6:c5:0b:0e:f0:3e:40:
13:70:63:ab:3e:12:83:6d:26:83:b0:ac:e3:eb:75:
f8:33:b0:d0:4f:cc:a5:17:85:2a:5f:d2:32:d4:b4:
bf:92:27:33:da:76:aa:7d:2b:e7:23:cb:b2:b2:19:
f4:b0:75:b9:3f:ac:ba:16:7c:2d:63:59:9e:9f:18:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FC:DD:35:61:97:73:A9:F3:FA:B5:66:62:B4:B9:26:4A:F5:B0:80
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:51:69:ca:3d:fc:04:55:98:ed:c0:7c:f8:6f:68:e9:20:72:
79:b0:87:b9:c3:ff:a5:58:98:17:11:64:5e:57:5f:6a:ef:0a:
d3:29:4f:46:fb:b9:bb:df:a0:f4:c4:61:ce:f1:17:59:f4:84:
73:d8:7c:7c:79:2e:3c:c5:90:6c:79:22:cf:c4:96:76:f3:7f:
a1:4a:c9:72:19:a1:e5:3b:a9:1c:5a:dd:e7:45:cb:ba:3f:eb:
1a:da:8a:5d:95:24:eb:48:c2:07:9b:48:9b:cb:4a:da:fa:e7:
e5:a2:63:b3:68:cb:87:4c:48:bd:66:cf:94:1d:a9:86:e4:15:
40:ac:7c:41:d9:10:b0:73:bb:bc:5f:da:e8:b1:ad:73:b7:df:
0c:4f:6e:3f:2e:cf:13:e1:5d:e1:9d:0b:d5:fe:ac:b7:2c:88:
e5:b8:99:01:2f:e7:34:41:de:ec:81:9c:3d:bc:43:c1:fd:51:
b0:1d:6f:ce:b8:70:09:2c:86:6a:9c:c0:8a:84:42:1c:2b:96:
d9:63:8c:f4:67:a4:1e:e4:a0:b9:8f:56:48:66:cf:4e:2a:fb:
9b:fe:c8:5f:71:5a:1e:d1:f0:8f:bb:ca:92:44:6e:ac:50:39:
c5:99:cc:e1:51:66:ea:8c:ee:50:39:40:72:cd:f5:2f:c6:1f:
ca:e3:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:29 2025 by rpki-client