Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: dgoGZkzm/fw2XTDeF7idgp4LO1YxRpqmPh8Z5Q90Eig=
Subject key identifier: 14:5E:E1:E0:A3:F7:77:45:D1:C5:D8:55:05:D8:C8:D7:5B:E3:64:DF
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019673792A8B19DD5ED6661A0D02B652B449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 19:00:42 +0000
Manifest this update: Sat 26 Apr 2025 19:00:42 +0000
Manifest next update: Sun 27 Apr 2025 19:00:42 +0000
Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: wac/OO6hhmaSYgv+Kt5wm3G+ixLOxklwNDZH1iO1bbw=)
2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:2a:8b:19:dd:5e:d6:66:1a:0d:02:b6:52:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Apr 26 19:00:42 2025 GMT
Not After : Apr 27 19:00:42 2025 GMT
Subject: CN=145ee1e0a3f77745d1c5d85505d8c8d75be364df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:13:46:45:60:07:ec:4f:1f:fc:d3:ad:ce:
99:b6:c8:fd:e3:67:2c:97:7d:86:50:32:20:79:2f:
e7:92:27:85:85:d0:58:c4:12:04:a7:e8:77:b2:e0:
45:9b:ad:ae:f8:4c:19:e7:d7:c4:df:e0:8e:5d:c0:
6b:d3:00:3e:73:53:f5:88:3d:42:e1:69:b2:85:c4:
1e:88:db:af:70:df:2c:d1:c3:ac:6a:65:15:b5:13:
05:39:5f:ba:df:20:14:3e:0a:67:e7:7c:e0:2b:d8:
a1:41:50:53:a7:d8:fc:3e:0b:13:dd:b6:d4:06:d9:
53:44:b5:88:01:08:54:eb:7a:8c:44:89:d6:93:01:
46:27:e6:b0:52:36:42:2c:09:80:5f:d5:4f:e5:8d:
fe:9d:52:8f:82:57:64:66:0b:15:78:67:09:b3:b6:
c8:af:01:02:1a:7c:59:fe:a9:a4:f6:f8:52:df:f7:
55:eb:66:6b:54:5e:5c:c3:5b:7d:ad:af:f7:7f:01:
bd:fe:59:1e:31:78:0c:09:a0:52:c5:db:07:bb:a2:
15:9f:9f:7a:c3:53:b0:83:46:42:91:cd:85:a0:80:
b1:3f:d6:4b:57:40:e7:ab:f3:6c:71:bd:ee:1f:4f:
4e:45:31:12:6b:83:53:13:a1:01:0d:bd:39:31:92:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5E:E1:E0:A3:F7:77:45:D1:C5:D8:55:05:D8:C8:D7:5B:E3:64:DF
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:42:c7:a9:e8:7b:29:04:2a:c0:61:33:f6:be:09:c5:c7:66:
c1:99:c4:92:2e:c6:2d:04:81:62:ba:b3:76:3e:1b:4c:2b:fd:
a5:fa:2f:5e:4d:5e:04:e3:02:aa:f8:47:ec:45:61:ce:23:78:
23:de:49:a7:48:ed:1d:e1:1d:e1:83:d8:9c:cc:08:96:8c:25:
9a:0b:54:ab:9c:ab:3b:27:f0:cd:7f:fc:5e:58:6a:10:4e:ef:
6c:af:eb:23:78:a2:32:07:3b:b1:bc:ba:46:c9:08:2d:cc:36:
fb:12:0a:2a:8d:14:27:03:f5:e2:82:f3:81:06:39:4c:f1:44:
e1:8d:3d:46:96:a0:ab:11:f2:d8:61:55:98:ff:68:eb:31:63:
ea:97:08:fe:d5:27:3c:9c:62:f8:08:f9:21:13:82:af:7c:46:
c0:10:26:91:09:c0:61:17:1f:43:b9:d7:f6:e3:60:1a:59:28:
f3:25:29:80:75:c8:3e:02:92:bd:5d:63:83:1b:66:7c:91:89:
8d:76:c7:12:28:6f:be:2e:60:1d:dc:f6:80:f1:26:52:f6:c3:
b2:57:fd:fa:1b:4d:50:34:e4:2b:9f:b9:ff:16:01:ec:6f:59:
67:94:05:5a:b0:50:3f:08:9b:cb:d5:62:32:c9:41:d6:d9:38:
87:09:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:59 2025 by rpki-client