Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: +iVzdJCw1dWcfMy8gTpWklA/Y1uD3677wVH9rt3PvBU=
Subject key identifier: 07:31:49:0D:38:DF:2B:50:6F:AA:07:2F:EB:B9:86:76:6A:43:74:D6
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01987ABFCE1DB68684F5B695D52CB51FE9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 15:00:47 +0000
Manifest this update: Tue 05 Aug 2025 15:00:47 +0000
Manifest next update: Wed 06 Aug 2025 15:00:47 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: QhWxyfmwAofDPV1ZbzbvzhiXHl/zrSoL0XwWlieIwFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:ce:1d:b6:86:84:f5:b6:95:d5:2c:b5:1f:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Aug 5 15:00:47 2025 GMT
Not After : Aug 6 15:00:47 2025 GMT
Subject: CN=0731490d38df2b506faa072febb986766a4374d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:be:57:f7:eb:fe:8b:54:c9:86:6c:ce:63:
9a:40:4f:e9:1e:a0:86:f2:fd:99:e5:8e:dd:21:59:
9f:9a:a8:8b:c3:f7:0b:99:9a:dc:d3:75:f6:12:84:
d4:3c:b1:6a:31:68:28:10:e7:31:d3:6a:22:dc:26:
55:b6:cb:c3:db:d8:7f:15:87:ae:35:db:64:32:8b:
45:2a:43:1a:14:cb:d8:12:12:8f:2d:f1:6c:84:5e:
62:bc:6a:5d:0c:2d:43:86:6f:04:81:50:41:85:2e:
71:84:e7:63:8f:1d:c2:5a:2e:56:9a:fc:4b:7b:33:
f4:f4:29:db:12:b3:3e:c2:19:b0:20:89:89:f6:4f:
dc:d0:fb:f1:c6:78:7f:8d:81:60:29:bd:23:50:d4:
a2:e9:ba:dc:ed:8c:f8:e8:40:60:e9:42:0d:24:b5:
23:e6:22:f1:71:82:59:4d:e5:a7:9e:94:eb:69:a9:
28:d5:3b:eb:b8:84:de:05:40:cf:cf:cf:6a:f6:87:
3f:db:c2:31:ec:d6:f3:f2:53:71:c7:b9:5f:70:45:
36:ed:14:33:27:c9:15:46:2c:d2:12:91:19:12:43:
40:93:e4:42:75:0d:66:5c:73:a1:4d:4b:98:64:8c:
77:9a:e5:05:b6:4e:ed:f2:77:47:98:53:59:e1:a4:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:31:49:0D:38:DF:2B:50:6F:AA:07:2F:EB:B9:86:76:6A:43:74:D6
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:91:c4:7e:89:a9:07:33:14:ba:fb:0a:f0:0b:01:15:ae:
ec:a0:09:cb:a3:66:3b:95:c1:25:34:6b:d8:ba:80:15:36:61:
b4:62:bf:b3:33:8e:0a:d5:16:da:16:5f:9e:b0:c2:4e:41:4b:
d4:b5:2f:37:5b:61:c8:43:3a:3f:f6:12:cd:70:24:61:9f:77:
47:ec:34:7e:1d:f9:ce:d8:d8:14:72:14:c2:54:a9:0e:75:a0:
3a:83:16:43:29:b7:35:c6:cb:41:7f:08:c4:73:bb:7d:90:f8:
8b:28:83:82:c8:67:ff:95:47:4f:37:44:c6:f2:68:11:c6:e6:
41:19:3d:f2:ec:d0:06:33:6b:b3:dc:a5:c8:ed:0d:7c:aa:61:
6a:1b:bf:20:8b:e3:a4:50:29:29:00:d2:88:bf:7c:9a:e1:18:
fd:13:09:9c:79:24:21:e7:a1:d6:2a:2f:6d:ad:9b:7f:52:b5:
1f:d0:86:36:ba:37:22:bb:e4:c0:99:59:b7:fa:0d:2f:cd:7d:
9b:47:fa:b5:81:66:5e:7f:11:13:aa:70:b0:53:c4:25:fd:dc:
2a:36:59:6b:c1:39:3c:f0:20:c5:44:47:aa:51:9a:26:97:bf:
ee:27:62:f1:44:3a:61:40:61:78:91:28:d4:7d:5a:97:c6:dc:
25:c7:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:12 2025 by rpki-client