Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: fhIxGWRHTLuYqB3eqSQfqhrBiXFp4lSWNIgqi9kcu3g=
Subject key identifier: 25:DB:E2:DB:1E:88:B0:72:7A:F8:05:27:85:5F:65:3C:50:74:92:C9
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019A500776B8170155A9A484CAC188DCB068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:57 +0000
Manifest this update: Tue 04 Nov 2025 18:00:57 +0000
Manifest next update: Wed 05 Nov 2025 18:00:57 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: NaeYSOS0f8FLgFfMU/iPCY7FF7SqNGEv2q1R2/yAVmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:76:b8:17:01:55:a9:a4:84:ca:c1:88:dc:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Nov 4 18:00:57 2025 GMT
Not After : Nov 5 18:00:57 2025 GMT
Subject: CN=25dbe2db1e88b0727af80527855f653c507492c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:bc:94:e7:61:f6:32:f8:92:1e:5c:35:ec:
0c:61:1b:ed:5f:15:cd:b3:61:92:ee:1a:ab:94:5e:
33:c0:89:ad:60:05:c2:65:cd:c1:db:85:66:9b:a4:
33:8c:17:c1:13:e3:13:c5:d7:2f:e0:51:8c:a7:93:
83:05:53:de:83:ee:ec:b3:d2:51:05:ad:ed:82:cb:
67:6c:50:87:7e:a9:a2:8a:d2:d9:84:3e:af:65:b7:
69:1b:b8:d4:41:8c:2e:96:1a:da:fa:12:bb:2d:6a:
63:88:e4:36:f3:2c:8d:21:ea:a1:55:d8:65:5f:e5:
e2:bb:e6:02:3d:1b:2b:a6:2a:d3:9a:19:9e:19:d3:
c5:1d:cc:39:d0:fc:fe:3d:ef:c2:7d:9f:b4:3e:4d:
28:1b:ba:f1:5e:6b:d4:a7:78:3a:f8:d4:44:79:f4:
dc:55:20:91:37:ea:c3:f5:2d:79:65:d1:f9:28:81:
65:e2:c5:09:33:18:41:41:a7:af:92:1b:81:4d:58:
d6:19:9d:49:d0:da:9e:f1:0c:89:72:2b:8d:65:5f:
80:d8:d4:25:90:13:57:2d:a7:1e:c7:ea:34:a7:92:
da:40:51:3b:95:d7:f6:e3:92:84:08:c5:d2:a7:75:
e1:17:d1:e7:f9:0e:99:8a:8c:f6:08:51:54:3d:86:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:E2:DB:1E:88:B0:72:7A:F8:05:27:85:5F:65:3C:50:74:92:C9
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ee:42:1c:c3:05:e8:90:b2:a9:f8:95:9f:f0:a8:58:00:19:
a1:5b:0d:ed:66:0a:cf:44:fd:20:7d:c4:99:f0:09:9d:24:f0:
d2:e4:e3:d6:02:7b:20:86:80:92:81:b7:02:38:d1:88:d4:c8:
76:94:14:07:a9:fa:52:21:1a:85:3b:ea:35:66:d6:69:dd:32:
63:da:9d:cc:94:a4:37:87:ba:ba:25:da:22:e4:7c:55:55:19:
80:be:97:4e:1c:2b:6f:32:0b:0f:20:e7:b8:8c:c0:de:30:41:
d6:4c:94:34:4b:9b:d2:24:30:a9:c7:32:4a:a2:d9:e4:78:2e:
9a:e7:7b:4e:62:e6:2d:00:5b:43:1e:00:4d:23:32:c4:10:09:
6c:ba:b3:61:c5:e7:f8:17:0f:7a:e6:64:3f:91:70:63:58:12:
11:10:cb:55:39:f7:ae:36:f7:42:fa:52:3e:b0:da:8b:19:81:
3b:b5:3d:6b:68:6b:c0:24:61:dd:5e:fd:f7:78:46:7d:2f:00:
c7:6a:28:2d:1c:ef:e8:a8:c2:c6:c3:70:67:61:dd:bb:a5:2e:
b9:75:ae:9e:59:7b:92:28:79:40:b4:c7:30:5c:bb:a6:d9:92:
85:8b:0d:db:dd:3d:ff:3e:d6:01:17:7a:24:a5:ab:de:51:ca:
84:c8:e6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:22 2025 by rpki-client