Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: fuOEQUBb5l2qnITGdN9gganYYPUY0W6yr2BJYzaDhCQ=
Subject key identifier: EC:E8:23:A5:7E:56:98:73:3E:D3:23:26:0F:E8:2A:5D:FA:24:01:21
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 0197C9F16BF74E779F354CB55AA276A189B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 09CD
Signing time: Wed 02 Jul 2025 07:02:11 +0000
Manifest this update: Wed 02 Jul 2025 07:02:11 +0000
Manifest next update: Thu 03 Jul 2025 07:02:11 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: ENkvux2ykLGQTxdHMsNcCwAblThmAAXK+A1hRm2ff8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:6b:f7:4e:77:9f:35:4c:b5:5a:a2:76:a1:89:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Jul 2 07:02:11 2025 GMT
Not After : Jul 3 07:02:11 2025 GMT
Subject: CN=ece823a57e5698733ed323260fe82a5dfa240121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:ac:6f:4f:c8:38:03:1b:5d:b6:cb:3f:48:
19:70:65:01:2c:60:a1:63:04:b1:23:9c:c2:55:44:
0c:4e:dd:2c:77:40:8c:8e:26:9b:64:d7:bf:95:db:
56:bb:8e:44:62:c1:8a:69:13:01:2a:29:29:b3:6c:
36:92:4a:fe:f2:31:e0:e7:d8:6d:32:3e:a4:4c:94:
02:0e:80:ab:23:1d:1f:fc:43:ed:d1:a0:73:63:c1:
cf:29:54:52:54:6b:38:2f:da:00:ab:a0:a3:68:99:
9a:46:58:90:49:87:0e:bf:55:69:f1:b9:bb:69:8d:
62:32:c9:f4:79:40:8b:63:bf:f1:d5:7b:79:84:82:
a7:b6:1b:7e:f9:18:00:fc:5d:10:8d:95:f4:ca:c3:
80:dd:1f:e7:fd:46:b5:0c:19:a9:13:df:33:db:ab:
ad:99:f9:07:1d:1b:a7:4e:43:d7:78:54:a0:5f:42:
61:fb:f0:a1:f6:09:a9:be:7c:2f:22:97:fd:fb:63:
93:52:f0:44:b7:95:6f:f4:0c:14:e6:cd:52:53:34:
f4:f1:73:33:c1:9c:dc:90:f0:0a:73:d1:2e:db:56:
a3:2a:4d:01:55:b9:85:95:55:df:ab:f6:98:4c:37:
5e:07:0b:6c:59:c1:da:5f:8e:2d:65:e4:7e:47:57:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:23:A5:7E:56:98:73:3E:D3:23:26:0F:E8:2A:5D:FA:24:01:21
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:93:d3:38:e2:d8:14:81:8d:7f:31:21:10:d0:b8:0b:4b:
0b:72:54:5b:aa:29:bb:b2:92:9b:e7:60:2c:0a:95:9b:8a:a3:
fe:1c:1c:17:04:19:d1:85:64:d0:a5:c0:b5:7e:ff:11:54:ff:
08:09:8e:fd:41:ed:a2:5a:c5:8d:0d:33:e7:92:9a:5b:77:bf:
46:2b:87:67:f9:5a:fb:6e:35:f4:59:8d:a5:ab:27:f0:67:ac:
b6:de:9f:6f:94:74:ff:4f:20:55:66:ee:83:e9:04:50:fa:a8:
b7:c2:24:66:e7:49:25:88:8f:9f:5c:a3:72:4c:8c:1d:ec:72:
53:ef:a8:2d:63:2a:d7:c4:35:80:12:09:9d:93:5d:c7:c0:27:
dd:ed:25:e4:45:9c:db:44:5d:42:67:60:bd:3e:73:10:cc:e0:
42:bb:08:17:55:f4:2a:be:7e:cd:1c:38:24:6a:1a:93:7d:01:
bf:b6:03:80:93:73:c5:43:bb:23:22:ac:5b:52:b1:da:b0:b7:
71:a8:14:07:2d:80:fa:eb:c0:b7:ed:56:7a:51:41:21:0a:84:
4c:c3:1a:20:0d:f7:67:db:b1:7a:0d:79:31:e9:a2:60:80:b0:
20:31:c3:cc:ee:74:54:21:93:8f:c8:f9:a2:9a:81:8f:73:1d:
6f:dc:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:13:11 2025 by rpki-client