Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: coM55GUNPmHyvz438E76J3yxB4EDs7P6WZ2EdiKYlFg=
Subject key identifier: 72:03:5C:6F:77:A7:73:6C:3E:E7:CA:C6:07:29:5E:28:86:46:12:6D
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019A51F57E82E0B26349A78A534E75B629A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 03:00:34 +0000
Manifest this update: Wed 05 Nov 2025 03:00:34 +0000
Manifest next update: Thu 06 Nov 2025 03:00:34 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: mycjv2TvssxNypGYlmcphezZH8g7cLB1mReVgyw6uNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:7e:82:e0:b2:63:49:a7:8a:53:4e:75:b6:29:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Nov 5 03:00:34 2025 GMT
Not After : Nov 6 03:00:34 2025 GMT
Subject: CN=72035c6f77a7736c3ee7cac607295e288646126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:78:f8:38:9f:ae:44:b4:5b:4c:7d:51:ed:
7e:7e:09:07:66:8d:94:38:7c:d0:8f:66:9e:3e:ad:
90:43:08:ff:45:bb:12:70:90:a6:35:c9:7c:0e:ec:
23:f0:51:17:5d:be:63:50:3c:bf:89:ce:a3:b5:1c:
8c:65:a6:25:cf:cd:08:3d:ca:b9:ac:12:b0:23:37:
12:7a:ed:18:58:93:1c:d8:e0:d0:c8:1f:99:97:08:
b8:eb:83:e8:fc:1c:1c:24:d2:82:34:32:a1:28:01:
86:65:13:2f:49:a2:ca:0b:1f:93:e3:5e:90:f7:41:
88:82:d4:b6:88:64:6a:dc:ea:f1:6d:7e:f6:ce:1f:
53:70:17:af:e1:83:3e:a4:fd:b6:80:4e:f1:78:55:
37:5e:bc:94:44:01:08:15:e4:55:39:71:f7:1d:f0:
4f:a9:19:93:4c:f5:65:bd:f9:c3:55:03:21:b2:b8:
e2:d7:c9:4d:5e:7c:80:29:2a:16:cf:95:88:5d:3e:
c1:9c:6e:6a:0d:d1:f5:fd:d3:74:ab:d5:05:dd:c0:
89:51:d1:86:ab:3c:b0:67:d9:7f:78:6c:dc:04:ff:
93:b1:62:98:54:df:2c:b9:a3:96:09:54:d7:88:4f:
93:5f:46:f9:7a:48:a1:7f:63:e2:83:47:e3:8b:2e:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:5C:6F:77:A7:73:6C:3E:E7:CA:C6:07:29:5E:28:86:46:12:6D
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b0:70:69:91:8e:2f:40:7c:0f:e9:5b:31:e1:6d:8d:06:2c:
72:55:00:9f:31:69:2c:ac:dd:6f:1e:3d:63:7e:50:75:8e:5b:
f4:2e:37:3e:19:7f:d7:ac:75:34:26:70:8f:c9:8d:1c:71:66:
ff:c8:38:23:ea:36:31:90:94:36:aa:b1:8c:a5:c1:1a:e2:7e:
99:4c:72:90:d7:54:01:6c:bd:8b:f8:4a:d2:13:17:c3:dd:5a:
96:20:52:73:91:6f:a5:f1:1f:73:53:03:d6:5f:9c:a3:27:b4:
cc:52:a8:af:00:26:62:44:a9:24:16:ae:9c:06:fb:4e:80:ea:
c5:ee:c2:ca:06:54:44:9e:71:40:80:9f:49:5f:cf:31:ca:be:
f8:9f:9b:5a:15:ed:94:a6:f2:ec:b6:f1:17:57:29:c7:4a:d1:
83:fd:5e:c1:95:95:46:d5:a7:64:c4:3c:e6:55:31:07:1e:cb:
3a:b1:3e:7a:a1:82:b6:d6:f4:03:01:38:14:a0:31:40:ba:85:
d4:84:94:90:4f:14:c4:86:20:df:5a:19:c8:e8:3a:43:aa:b4:
43:6c:1b:e3:a1:76:56:73:1d:84:1c:0a:e6:af:c3:ce:15:05:
29:73:22:4e:02:c6:e2:6b:3b:fa:8e:18:c9:ba:f0:77:fb:78:
e7:10:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:33:06 2025 by rpki-client