Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: 3uKTz6QGKU7jBN5Ktc7OwIj5Qo4BpLcY9Smf1lyNq5U=
Subject key identifier: FB:F2:92:20:B3:45:70:E9:A7:76:AD:89:BC:70:9C:A6:DE:92:23:F8
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0197703EB9AA491180BCED2E759D5F75D578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 21:00:48 +0000
Manifest this update: Sat 14 Jun 2025 21:00:48 +0000
Manifest next update: Sun 15 Jun 2025 21:00:48 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: 3TFrJh3sVFo0Y491hX9nIwRHGAkQlwVCculMlQ6+3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:b9:aa:49:11:80:bc:ed:2e:75:9d:5f:75:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jun 14 21:00:48 2025 GMT
Not After : Jun 15 21:00:48 2025 GMT
Subject: CN=fbf29220b34570e9a776ad89bc709ca6de9223f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:29:9e:c6:f8:0f:e9:d4:97:00:8e:27:ea:
e4:fa:69:8e:c9:04:9e:24:b8:9f:a8:14:38:ad:5f:
94:6d:ca:91:de:94:a1:7b:81:9d:2b:78:3b:ef:0c:
0e:5c:81:30:96:b4:79:35:02:c1:6d:4a:8c:f6:7f:
4a:e4:0e:be:fc:c1:d5:1b:f4:e4:bf:6e:f4:ea:7c:
f6:5c:f4:41:cf:e0:a5:aa:7c:f8:7b:b8:df:06:df:
2c:b0:02:0d:2b:b4:e8:d2:01:57:0e:eb:48:14:8d:
a5:be:41:49:01:0a:a1:9d:c6:9d:52:d7:02:19:06:
04:a6:56:5e:e0:9e:43:ad:e7:8b:5c:f6:d1:a5:1f:
d0:f9:ad:7f:4c:08:38:8b:16:ff:70:6c:af:d8:30:
50:98:36:14:50:91:5a:77:1b:d3:2e:a9:41:8c:bc:
6e:d6:e2:14:32:30:06:49:31:8d:44:d9:b8:5a:7a:
4f:6f:6b:9b:c7:6d:44:09:81:45:93:47:b2:6f:72:
91:0d:61:c5:ce:41:d3:a6:66:46:4a:c3:99:b8:ea:
8e:d7:f5:bd:34:6b:29:da:bd:97:3f:d2:68:06:c9:
e9:88:45:0a:32:6b:c7:30:1e:52:1d:b2:81:63:3e:
46:89:59:8e:61:59:44:f8:96:54:26:17:99:2e:d8:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F2:92:20:B3:45:70:E9:A7:76:AD:89:BC:70:9C:A6:DE:92:23:F8
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:50:3d:20:c9:72:73:a7:97:b0:86:74:72:41:c1:18:3b:
c3:11:7a:20:e8:36:c8:9e:da:6b:20:19:81:26:cb:9e:44:5a:
07:96:41:5b:58:85:0c:5e:8f:76:7b:58:8c:ae:d2:b6:da:9a:
50:52:75:97:d5:30:60:6c:27:82:e2:82:d5:5c:17:81:74:a0:
a0:5a:aa:77:89:df:e2:98:aa:9f:27:93:52:24:e2:ae:7c:8f:
aa:fd:cf:d4:df:39:b1:4e:5a:1b:a6:36:6b:2f:94:b9:86:09:
8e:bc:a1:91:b8:33:89:31:44:ce:9a:28:7f:eb:8a:60:6b:3c:
9e:a1:64:ad:36:9d:62:a4:7e:d6:67:d4:75:41:9b:a7:e0:e5:
7e:92:cf:ef:0a:f1:5c:38:fe:99:97:19:0f:c4:7d:d3:2b:37:
d9:0e:b9:28:44:d5:84:07:b0:df:fb:89:8e:4a:32:b5:7c:9e:
b7:46:3a:74:6a:3a:c9:96:2c:78:3f:41:18:a1:c6:84:65:c1:
43:95:e8:aa:79:f7:a4:e7:d7:f5:ec:23:ed:dc:df:ab:d6:ef:
13:d9:53:6f:9f:65:2f:53:65:ad:95:c6:14:98:73:ff:a6:79:
fe:52:3a:85:4f:5a:a3:64:81:75:e2:e3:51:f1:f2:99:a7:53:
24:2f:9e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPrmqSRGAvO0udZ1fddV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjUwNjE0MjEwMDQ4WhcNMjUwNjE1MjEwMDQ4WjAzMTEwLwYDVQQD
EyhmYmYyOTIyMGIzNDU3MGU5YTc3NmFkODliYzcwOWNhNmRlOTIyM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIMpnsb4D+nUlwCOJ+rk+mmOyQSe
JLifqBQ4rV+UbcqR3pShe4GdK3g77wwOXIEwlrR5NQLBbUqM9n9K5A6+/MHVG/Tk
v2706nz2XPRBz+Clqnz4e7jfBt8ssAINK7To0gFXDutIFI2lvkFJAQqhncadUtcC
GQYEplZe4J5DreeLXPbRpR/Q+a1/TAg4ixb/cGyv2DBQmDYUUJFadxvTLqlBjLxu
1uIUMjAGSTGNRNm4WnpPb2ubx21ECYFFk0eyb3KRDWHFzkHTpmZGSsOZuOqO1/W9
NGsp2r2XP9JoBsnpiEUKMmvHMB5SHbKBYz5GiVmOYVlE+JZUJheZLtj0DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvykiCzRXDpp3atibxwnKbekiP4MB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsJQPSDJ
cnOnl7CGdHJBwRg7wxF6IOg2yJ7aayAZgSbLnkRaB5ZBW1iFDF6PdntYjK7Sttqa
UFJ1l9UwYGwnguKC1VwXgXSgoFqqd4nf4piqnyeTUiTirnyPqv3P1N85sU5aG6Y2
ay+UuYYJjryhkbgziTFEzpoof+uKYGs8nqFkrTadYqR+1mfUdUGbp+DlfpLP7wrx
XDj+mZcZD8R90ys32Q65KETVhAew3/uJjkoytXyet0Y6dGo6yZYseD9BGKHGhGXB
Q5Xoqnn3pOfX9ewj7dzfq9bvE9lTb59lL1NlrZXGFJhz/6Z5/lI6hU9ao2SBdeLj
UfHymadTJC+eZw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:56:08 2025 by rpki-client