Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json)
Hash identifier: 9b8wRgjxzPumlzkJpqWb3WEv11nrz7L6xTK1XqoTFq4=
Subject key identifier: E7:C8:EC:04:79:78:2A:04:ED:52:2B:A0:5C:D9:2F:9E:2B:9F:F9:C9
Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Certificate serial: 0199FFC8B779B88898C2E42E15649B3B6D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
Manifest number: 0AF2
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: KLN2YwTYjPNIaJl1unk5vIz6vqg.roa (hash: MhUIVJHps0H9qbSh6FLkKXTFhSCbjnKxeUmu3XhAiqM=)
2: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: cQmFtNWCA8CcC17CPcfvfVpNSimHW+Qssu+lJLBslFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b7:79:b8:88:98:c2:e4:2e:15:64:9b:3b:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=e7c8ec0479782a04ed522ba05cd92f9e2b9ff9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:95:ed:56:99:2d:be:56:54:8f:8c:bf:70:
fd:61:be:03:a0:7e:15:0e:f7:ee:07:eb:73:ce:07:
5b:45:e6:7f:2b:e5:b1:a2:91:05:ed:96:16:4f:7b:
77:b6:58:28:c2:6c:69:b0:54:2d:a8:33:2f:7c:31:
19:e0:51:c4:17:ce:b9:ca:75:06:45:2e:64:54:1c:
cc:76:24:a0:08:8d:dc:a9:56:47:8d:9b:c0:19:09:
e0:db:f3:e8:ad:57:a0:b2:79:fd:18:47:d9:1f:d7:
5e:21:df:e1:3b:13:ae:ce:63:7c:60:df:4b:89:77:
a8:91:d5:c5:39:38:44:61:ff:49:c1:58:56:74:58:
6a:1d:71:cd:97:cb:bf:f7:a4:58:2b:13:48:6d:a8:
17:de:c0:56:89:7f:30:2c:07:56:9e:4b:e3:db:98:
8d:e8:3b:85:bc:b5:ea:69:b6:48:02:d0:13:58:ce:
39:39:8a:34:81:f5:32:52:c1:11:63:5b:9d:52:fe:
28:13:96:69:98:f3:33:31:75:dd:cf:2c:ec:c5:a0:
8e:c9:12:fd:51:4b:3f:06:10:4d:bc:d5:63:51:03:
16:33:30:03:8b:ec:5c:c5:4d:45:7e:ca:c9:65:9d:
cb:37:12:eb:01:79:1a:6a:14:ee:33:82:b1:a4:b7:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:EC:04:79:78:2A:04:ED:52:2B:A0:5C:D9:2F:9E:2B:9F:F9:C9
X509v3 Authority Key Identifier:
keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a6:62:6f:5e:45:89:46:eb:e0:ad:6d:45:0a:19:67:68:44:
89:e8:28:5f:3e:76:74:11:cc:3f:86:d3:92:3d:9b:6d:eb:69:
10:77:56:4b:16:b2:f5:9f:be:4a:8d:4d:2a:04:c4:9b:a3:13:
1f:bb:67:8c:d2:ec:38:86:87:4c:b3:c4:1a:79:05:de:b7:63:
49:e0:88:8c:8a:65:54:9a:f0:cd:d3:f9:37:dd:2d:6d:20:be:
2c:26:47:1d:09:89:15:3c:6a:3d:22:a9:ad:d3:2f:e0:91:a4:
17:15:69:ad:0a:0d:ef:c8:1e:ad:04:c5:bd:ab:a7:38:54:06:
e9:f0:6f:e8:d0:68:2a:da:2f:24:82:49:b7:7d:de:ac:87:e7:
11:b1:09:b3:f9:7d:50:a4:2f:4a:9e:6e:2d:b6:76:7f:bb:29:
d8:60:18:8c:c5:5f:d8:27:db:0c:ac:76:41:a2:fe:b6:f0:58:
29:b1:d6:31:67:95:fd:0f:90:f6:6e:63:ef:c1:e4:d3:ad:6c:
63:a2:ba:9e:a8:ff:18:bf:3f:bd:c9:7e:af:47:89:20:31:6a:
7b:95:de:66:f2:7d:8a:2c:fe:db:98:9b:32:27:9e:6e:0f:28:
ee:82:dd:91:a0:22:b0:87:01:91:fa:42:26:1a:42:02:ec:42:
02:20:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:45 2025 by rpki-client