Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: 1jIrMgMuO5aiM/GmrZtali/qmg3Yf2EqXsYe5fDbOaE=
Subject key identifier: 9A:43:E8:D1:E6:9E:99:FA:68:87:2D:05:6B:1D:A8:94:2A:94:CA:3E
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 019921B25156E964DDCE6A1282B0708DC9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 01:02:38 +0000
Manifest this update: Sun 07 Sep 2025 01:02:38 +0000
Manifest next update: Mon 08 Sep 2025 01:02:38 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: VQinuENjh9COZvG5PCdli0Md4dai4bUrha1P0wBw+ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:51:56:e9:64:dd:ce:6a:12:82:b0:70:8d:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Sep 7 01:02:38 2025 GMT
Not After : Sep 8 01:02:38 2025 GMT
Subject: CN=9a43e8d1e69e99fa68872d056b1da8942a94ca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:d7:12:db:76:12:8c:30:6b:d4:70:8f:ee:
5b:b1:f6:29:ad:90:2a:0a:4f:71:b9:1c:b3:0e:07:
b1:d0:fe:1b:c6:77:2d:c9:3d:39:98:ce:21:50:6b:
62:9e:20:98:97:dc:87:73:c4:d0:97:fb:4d:4e:04:
62:ee:ae:13:bb:c1:31:86:47:7c:57:7a:33:52:a4:
a7:62:e1:9d:22:a7:b4:45:2b:b7:68:6e:25:fe:36:
10:b2:f7:16:7c:5a:51:a1:69:ae:a7:f3:d6:31:2f:
c2:cc:ab:bb:21:eb:04:66:84:7b:cd:90:f9:00:07:
02:1c:d5:e4:4f:2a:57:fa:10:72:2f:80:54:a0:01:
72:a7:d9:b7:d5:76:53:f4:08:96:69:9a:96:36:12:
c8:08:b5:ad:da:14:10:b4:3c:b1:59:68:75:6c:fc:
34:3a:14:e7:3a:35:6d:d6:a6:39:1e:c0:4d:74:96:
09:e5:85:31:ae:58:75:8a:3f:ed:2d:6a:78:5e:31:
f3:1e:33:da:0f:38:dd:e8:77:62:eb:ed:3e:cd:8d:
ec:03:e0:1b:eb:53:1c:a2:c0:65:91:73:bf:62:7b:
12:21:14:13:83:0a:f0:b8:57:83:5f:5f:c8:b7:59:
4b:d0:b9:cf:e4:cc:c5:f6:62:8b:53:00:61:83:55:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:E8:D1:E6:9E:99:FA:68:87:2D:05:6B:1D:A8:94:2A:94:CA:3E
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:07:84:76:14:d1:3c:9e:dd:18:1a:ca:b1:85:25:12:33:b5:
f5:c2:57:a5:6d:9f:cf:5e:9a:ce:24:e5:b7:38:23:b4:7e:4a:
9c:d7:09:f1:75:0a:30:4b:40:c6:74:78:06:7f:9c:4c:1f:4d:
52:0a:2a:49:ed:5d:6c:37:d1:72:7d:3d:23:6c:e4:f2:9f:c5:
44:8f:4a:d7:68:c9:31:8f:9f:34:db:79:f3:96:4a:f9:1a:39:
44:b7:16:2d:12:53:a6:e8:e4:c8:bf:10:c8:ad:6d:33:d6:ec:
9b:d1:8c:b0:c3:36:65:24:2e:af:70:0c:b5:98:94:f7:ba:84:
7a:a2:33:15:21:80:10:e3:0a:e6:fa:fb:5a:47:69:bf:40:97:
21:e1:be:a8:ff:df:05:29:00:63:d7:c9:d3:69:62:bb:94:51:
07:40:2f:d3:7a:af:16:26:19:df:56:57:fa:53:23:9b:18:53:
51:6e:08:fd:04:cf:c0:ff:4c:a9:d9:04:32:74:7d:32:93:c0:
aa:af:29:ef:fe:b6:68:da:24:1a:8f:2f:c3:60:3b:f5:66:ed:
72:c7:10:5c:73:2b:f0:71:22:de:72:46:26:75:9c:df:f9:30:
14:d2:c1:26:b5:07:c1:86:a6:8d:97:da:50:67:75:93:b2:d1:
7f:82:25:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:37 2025 by rpki-client