Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: FFvYssV2YLvL9XaFy1kL/kdaoZUvecI9Fp1tfm6zn/M=
Subject key identifier: 95:E2:63:84:65:88:79:0A:98:08:7C:BF:37:94:46:8F:F5:0F:38:13
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019896A548040F27A1C14ADAC40E6762BC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0A37
Signing time: Mon 11 Aug 2025 01:01:10 +0000
Manifest this update: Mon 11 Aug 2025 01:01:10 +0000
Manifest next update: Tue 12 Aug 2025 01:01:10 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: o/ANAf7aUf/qL2VQC6W1a2NfUhPX2qo18KXjUha3WVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:48:04:0f:27:a1:c1:4a:da:c4:0e:67:62:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Aug 11 01:01:10 2025 GMT
Not After : Aug 12 01:01:10 2025 GMT
Subject: CN=95e263846588790a98087cbf3794468ff50f3813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:16:48:64:ca:c0:d7:4d:1d:b2:f3:a1:11:
de:c4:e9:60:d7:0e:92:5e:10:93:f8:02:44:90:e2:
3c:10:1a:7a:62:17:e6:14:ce:71:35:21:3e:aa:cd:
1b:fb:e3:09:0b:c4:c9:ae:08:35:9d:22:5e:dc:43:
04:8b:78:b9:b8:42:f5:05:e8:f5:d0:fb:e4:14:d8:
89:23:c8:e9:20:54:c9:53:83:1f:9f:ca:29:bb:59:
45:d6:bb:5d:9c:6d:de:82:c1:47:92:81:c2:b9:17:
44:42:ff:23:f8:a0:86:46:d3:4f:58:4a:64:6e:2a:
32:7e:f2:f9:7e:ee:81:03:95:c1:a7:b1:f9:8b:15:
65:f1:b0:1a:f8:e6:a3:22:92:c3:07:40:41:89:57:
9f:d9:8b:92:83:85:7d:41:53:42:cd:ea:42:4b:30:
11:5d:e8:21:8e:f6:7d:4a:74:bf:49:00:34:df:e7:
89:6d:bf:d0:79:09:71:30:e3:fe:56:45:6e:d9:ad:
e5:fa:c1:15:e6:04:b1:c3:ba:90:aa:38:f7:5e:a2:
83:f1:0f:3d:9a:c6:a8:c1:a8:bb:74:67:aa:d8:69:
b1:7a:3e:f8:8c:79:d5:5d:f2:cc:e5:1f:06:58:5b:
0d:28:a8:7c:23:37:7c:c8:1f:ea:82:e1:07:0b:be:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:63:84:65:88:79:0A:98:08:7C:BF:37:94:46:8F:F5:0F:38:13
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:8a:26:48:7e:0f:76:fc:c3:19:aa:79:3c:4d:6d:3a:52:
d5:ba:c8:8c:f8:e2:d6:0c:eb:d4:2f:ac:50:7f:4d:81:3f:16:
b2:bc:f1:a8:53:6e:f6:93:6f:ca:2f:0d:dc:b1:1b:dd:22:a0:
fd:45:5e:7f:a4:61:43:b5:11:dd:dc:42:a4:6e:4b:e4:fd:8e:
9c:01:f6:25:77:b2:ea:cf:80:c4:ec:bb:9d:f8:62:12:fe:46:
b3:fd:f6:d4:f2:55:d6:b0:51:8e:9e:62:e4:33:af:f1:af:b5:
6d:33:99:e0:49:38:28:c4:49:a2:79:78:57:1a:a2:49:c4:99:
40:5c:f0:b1:64:0b:b7:65:79:03:91:48:dc:4c:86:2d:b2:01:
73:c4:3e:9a:d4:d0:00:e9:0b:27:30:89:67:cb:3d:84:24:8f:
fc:4f:04:3e:97:5a:02:f5:16:65:60:21:96:3b:83:b2:f7:ca:
f4:61:4b:48:1b:f8:a1:c4:6f:2c:f6:55:3d:a9:c7:ae:ea:70:
3d:6d:7e:61:b0:bd:55:a5:37:94:fa:09:ad:0a:d2:d1:b8:1e:
d2:a6:ac:2f:9b:58:69:ee:39:77:86:64:6b:c0:b4:bd:dc:f7:
3a:dd:d8:7d:24:cd:3f:82:d5:e2:58:ad:c1:b6:e2:a8:db:79:
94:52:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:19 2025 by rpki-client