Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: OYCGQvYZlcb0PuuQMLdNk8ZpBJVthlOkM9rscvW5ClM=
Subject key identifier: AB:D4:F6:ED:C8:76:E6:F4:9C:2C:9F:A4:06:AA:B3:0A:9B:90:1E:75
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 01968B139CD6EEAC068F5EBDFDA881DF512C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0928
Signing time: Thu 01 May 2025 09:00:40 +0000
Manifest this update: Thu 01 May 2025 09:00:40 +0000
Manifest next update: Fri 02 May 2025 09:00:40 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: xyS09CV3H23XoVnk+zCCOA//8SDkRu4ovw28EacysAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:9c:d6:ee:ac:06:8f:5e:bd:fd:a8:81:df:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: May 1 09:00:40 2025 GMT
Not After : May 2 09:00:40 2025 GMT
Subject: CN=abd4f6edc876e6f49c2c9fa406aab30a9b901e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:71:a8:12:c2:c1:2a:e8:a2:ce:7d:c5:79:
62:f2:c3:86:cd:28:40:97:ee:7e:e9:de:74:0e:43:
c5:de:87:2a:51:0e:e8:94:67:68:6b:bb:b6:c9:97:
87:13:d2:7e:90:88:82:8a:7d:35:a9:20:8e:3a:29:
bd:14:a1:df:ce:c4:8d:91:23:e3:4b:ce:b3:f5:59:
e6:d2:53:2c:b5:47:48:e4:38:93:80:a5:79:b7:5d:
eb:44:28:dd:ff:10:93:f9:62:39:df:70:2c:cf:c6:
ee:dd:a2:db:41:25:93:b9:fd:51:91:6f:5c:84:3c:
fa:32:b0:86:36:16:61:6e:3b:6a:6c:21:77:6d:87:
68:56:64:38:d4:4b:ee:3f:f7:ef:49:d6:67:1d:af:
f2:f2:20:dd:32:de:1f:14:64:2c:a1:02:fd:9d:bb:
3a:15:e5:f1:c0:41:54:de:65:84:5b:1d:3c:23:f9:
0d:12:62:4b:58:fa:00:cd:85:4a:dc:a2:c0:2c:4f:
d8:64:94:bb:06:2c:9c:9f:c2:b9:e0:f1:ee:c8:bb:
95:e3:7b:7e:78:46:0f:aa:9d:a9:b7:9b:bf:b4:1d:
e9:e0:94:57:22:d0:16:3f:8f:7d:3b:9e:9b:21:7c:
a2:42:dd:1c:7e:06:71:12:ef:45:be:14:02:30:93:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:F6:ED:C8:76:E6:F4:9C:2C:9F:A4:06:AA:B3:0A:9B:90:1E:75
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:df:a0:d3:0b:41:bd:72:a4:f0:b9:ec:39:65:28:6f:15:
1c:44:e1:54:69:5e:f6:72:5f:3e:4b:90:47:46:f8:e6:c5:8b:
c2:73:5a:14:55:a5:db:86:e2:1a:82:b9:86:66:90:a8:ec:5b:
73:1e:2c:43:e8:47:fb:5c:88:0c:c2:e9:71:91:b0:d3:2b:dd:
01:73:74:98:9a:fe:e9:0a:bf:c9:21:df:7d:29:a5:71:8b:0b:
2a:78:ad:b6:1e:de:d9:8a:d7:34:53:f3:ab:d9:29:80:a4:e6:
08:5d:f6:e4:28:b4:71:36:b7:5e:99:49:a9:e1:d6:35:0b:e4:
e8:a3:e6:88:a9:ec:d3:fe:b6:2e:b3:73:2c:eb:ba:7f:33:d8:
42:3c:83:8c:32:ca:0a:0c:41:6d:0f:2f:21:13:63:f2:ba:2f:
a9:a6:e1:5c:b9:d2:7e:c8:02:1d:6b:8a:91:19:3f:0a:db:7c:
6e:f2:55:b0:db:2d:cf:5c:89:cc:b4:db:00:a7:6a:91:83:ba:
2f:49:19:55:40:44:89:d7:73:b7:e0:17:ea:ac:c2:31:bf:18:
0a:b4:46:8a:59:78:b8:f9:3b:d7:e8:4a:90:f2:7a:86:c8:0c:
0e:3f:e5:9b:9d:48:41:2b:7e:02:33:74:f4:b7:e9:7f:ad:f5:
cd:1e:12:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLE5zW7qwGj169/aiB31EsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNjQwMGQ3MWQ3ZWRlYjBlYjMwNWQ0OTgyZWNmNTIwYjBm
NDRlNzcwHhcNMjUwNTAxMDkwMDQwWhcNMjUwNTAyMDkwMDQwWjAzMTEwLwYDVQQD
EyhhYmQ0ZjZlZGM4NzZlNmY0OWMyYzlmYTQwNmFhYjMwYTliOTAxZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FpxqBLCwSroos59xXli8sOGzShA
l+5+6d50DkPF3ocqUQ7olGdoa7u2yZeHE9J+kIiCin01qSCOOim9FKHfzsSNkSPj
S86z9Vnm0lMstUdI5DiTgKV5t13rRCjd/xCT+WI533Asz8bu3aLbQSWTuf1RkW9c
hDz6MrCGNhZhbjtqbCF3bYdoVmQ41EvuP/fvSdZnHa/y8iDdMt4fFGQsoQL9nbs6
FeXxwEFU3mWEWx08I/kNEmJLWPoAzYVK3KLALE/YZJS7Biycn8K54PHuyLuV43t+
eEYPqp2pt5u/tB3p4JRXItAWP499O56bIXyiQt0cfgZxEu9FvhQCMJOKgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvU9u3Idub0nCyfpAaqswqbkB51MB8GA1UdIwQY
MBaAFEBkANcdft6w6zBdSYLs9SCw9E53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMDc1MWQtZDdiMy00NzAxLWEzMjYt
MjE0ODA4MmMzNTMzLzEvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mMDc1MWQtZDdiMy00NzAxLWEzMjYtMjE0ODA4MmMzNTMz
LzEvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOTfoNML
Qb1ypPC57DllKG8VHEThVGle9nJfPkuQR0b45sWLwnNaFFWl24biGoK5hmaQqOxb
cx4sQ+hH+1yIDMLpcZGw0yvdAXN0mJr+6Qq/ySHffSmlcYsLKnitth7e2YrXNFPz
q9kpgKTmCF325Ci0cTa3XplJqeHWNQvk6KPmiKns0/62LrNzLOu6fzPYQjyDjDLK
CgxBbQ8vIRNj8rovqabhXLnSfsgCHWuKkRk/Ctt8bvJVsNstz1yJzLTbAKdqkYO6
L0kZVUBEiddzt+AX6qzCMb8YCrRGill4uPk71+hKkPJ6hsgMDj/lm51IQSt+AjN0
9Lfpf631zR4SHg==
-----END CERTIFICATE-----
Generated at Thu May 1 13:41:52 2025 by rpki-client