Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: O4YOKznQMM0ZkQdUyZrQtMK/QzbEqoUZdW8noLxhIf8=
Subject key identifier: 41:59:79:9F:18:40:2F:A2:20:F8:CD:EE:12:DF:98:BC:F7:65:E2:BD
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 0198D65F247C105174755F155B3D362584AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0A58
Signing time: Sat 23 Aug 2025 10:00:16 +0000
Manifest this update: Sat 23 Aug 2025 10:00:16 +0000
Manifest next update: Sun 24 Aug 2025 10:00:16 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: fWO2Q+4auI5wHMb1BNc3zcFyNYteURFT7NUZ2YgWBjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:24:7c:10:51:74:75:5f:15:5b:3d:36:25:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Aug 23 10:00:16 2025 GMT
Not After : Aug 24 10:00:16 2025 GMT
Subject: CN=4159799f18402fa220f8cdee12df98bcf765e2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ab:d4:ed:b4:90:f2:85:0b:25:65:53:35:63:
29:a6:87:f5:d5:b6:c3:35:4f:60:51:6e:be:7c:13:
bb:d5:0c:a0:90:e9:9c:44:39:18:ba:bb:1e:62:5c:
19:90:c4:e1:ed:ee:af:5e:3c:e7:aa:f8:91:a6:ea:
3a:29:9a:36:f7:07:80:f0:c5:cd:df:b5:cd:5d:27:
d5:93:1b:72:fa:dc:70:d7:b1:8d:c3:8b:ec:86:a6:
c3:a8:2f:fd:6f:63:a2:8f:b6:f8:32:90:73:f5:4c:
e6:78:05:6a:00:b4:eb:ac:33:ad:5e:46:39:bc:06:
4f:c0:f9:64:28:6c:5e:32:bb:1f:4f:ce:b9:94:73:
64:d1:22:4a:92:2a:bd:5f:53:7b:44:5e:58:e8:79:
79:03:a1:09:fc:ad:19:f0:96:ff:76:b4:49:f7:c1:
07:13:2f:9f:7b:33:16:31:86:f0:fa:dd:a3:07:d6:
4c:7c:ee:70:ea:66:8d:82:69:2c:5e:b1:60:85:f6:
73:96:eb:5a:93:39:d6:56:72:aa:a4:03:d1:c5:d2:
30:b3:4b:28:94:0e:0a:0d:53:0d:14:ba:d1:d3:57:
5c:d5:c3:89:92:97:f9:06:44:f6:6a:9c:aa:7a:43:
06:6a:bc:2c:ef:61:2b:51:a9:d2:f2:d7:1c:af:1d:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:79:9F:18:40:2F:A2:20:F8:CD:EE:12:DF:98:BC:F7:65:E2:BD
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9f:22:14:c6:05:5e:7c:b6:b1:8a:f0:62:79:28:eb:3a:a9:
25:8c:24:bb:dd:db:3e:9d:e8:30:2a:18:01:fa:8d:e6:3a:59:
51:60:bf:d1:2e:6d:10:b9:a3:e6:59:6d:4b:21:6f:2f:27:4e:
c8:e7:1d:16:32:bb:29:05:5b:03:f5:4b:49:31:86:b6:91:35:
bc:d5:89:0c:f8:53:0b:fc:4c:40:9c:06:23:16:45:93:4a:e5:
3f:2d:37:80:7d:67:35:57:50:b4:29:d8:34:31:ca:6c:4d:b4:
25:23:bd:a8:2b:11:16:7d:48:3e:a5:b4:39:40:fa:78:3d:b5:
5a:71:24:6e:08:3a:41:77:8d:f9:88:76:66:07:15:45:1a:5c:
45:3c:fe:45:56:d8:df:94:6a:64:ba:63:a2:0c:ba:c9:66:3b:
17:b9:ba:ee:3c:57:e3:88:af:f6:86:e2:53:ad:fd:03:ce:f3:
ba:0f:49:64:3f:83:af:5a:90:59:25:4e:e9:d1:3c:48:85:a2:
c5:8b:b8:ef:d6:f1:6e:c8:83:e6:c2:4d:46:25:7c:15:e8:38:
f0:38:94:a7:5d:06:c7:e5:aa:65:b5:1f:63:16:3c:1e:4c:5f:
d3:69:cc:93:25:49:2a:01:c2:ff:b9:ab:f3:79:e9:59:55:4a:
95:b6:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:31 2025 by rpki-client