Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: dABAaw4SCc3qJxjcd/65Q3y/dZUr4t4QlxmQOtVX1tI=
Subject key identifier: D3:E8:B1:3E:74:7D:4E:1B:62:9F:F2:1A:50:98:81:6A:41:F5:C8:0B
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0197499EEC7D7F498F6DEB38ECB3CDFEEDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 09:00:41 +0000
Manifest this update: Sat 07 Jun 2025 09:00:41 +0000
Manifest next update: Sun 08 Jun 2025 09:00:41 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: UHNX7NT4m/HNg7WQ80ELfUpk6r3lT2AHKDaseeI25ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:ec:7d:7f:49:8f:6d:eb:38:ec:b3:cd:fe:ed:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Jun 7 09:00:41 2025 GMT
Not After : Jun 8 09:00:41 2025 GMT
Subject: CN=d3e8b13e747d4e1b629ff21a5098816a41f5c80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:f8:26:e1:c2:44:50:fa:0f:46:0d:30:44:
19:ca:25:2a:50:6a:15:a8:ae:9b:a9:8c:e5:10:f0:
45:d0:ce:06:8c:c1:d2:b9:c7:29:b6:38:98:ca:53:
8a:ba:a4:5b:4a:5a:13:e6:2c:98:74:2b:66:7d:76:
74:89:95:bc:33:28:9a:3f:5a:e0:48:b8:48:b6:d4:
8b:d8:19:0b:20:cd:22:38:01:29:e6:ae:19:c6:c2:
54:a1:63:ff:3f:35:75:ad:c6:f4:71:26:8f:9d:6a:
5d:b8:4d:f1:e1:18:ff:9b:b5:11:18:4e:49:f5:1d:
f4:87:e6:96:ae:e6:37:36:6b:6e:78:ed:3f:56:c4:
66:e9:f8:d5:a4:82:c6:dc:44:12:6d:90:98:17:c7:
df:3c:98:c7:57:55:e8:1f:7f:d7:29:58:44:8f:46:
ef:fd:f0:78:5b:92:32:76:8a:1d:7d:b4:ac:3e:1a:
e8:a5:ee:d6:dd:38:11:37:fd:bb:78:06:2d:5b:ae:
8e:93:d1:35:ea:c3:03:a9:c1:27:55:61:7d:d2:fe:
7e:08:d6:74:8a:cd:53:3e:29:06:fb:80:bf:60:bd:
3a:76:5f:3b:ed:5d:73:24:c0:6c:b8:2d:04:5f:76:
41:38:59:b2:4c:eb:1f:35:b6:1b:ea:a1:e4:33:bd:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:B1:3E:74:7D:4E:1B:62:9F:F2:1A:50:98:81:6A:41:F5:C8:0B
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c0:a4:c3:b6:fa:44:d0:9d:e1:fb:5c:d9:71:30:26:05:23:
d6:15:d5:4b:db:8f:22:54:39:88:3e:58:60:a2:5b:0a:2e:07:
5e:88:d9:21:26:72:fc:c6:93:56:64:ba:3a:cc:60:ed:e8:9a:
96:13:f1:59:33:59:84:ac:01:6c:9b:2e:d4:d5:98:66:2e:82:
06:46:1c:e2:f3:5e:b0:e7:b9:00:93:2d:f5:aa:bb:fb:6d:bc:
00:cf:1e:0a:7a:86:25:75:a9:3e:ae:40:c8:e8:be:55:96:42:
29:b5:57:d1:94:8f:d1:0a:4b:c2:4f:38:e3:92:fc:b8:16:11:
a8:30:36:03:cd:c4:d4:a3:1b:87:b2:d9:3b:cf:8a:ed:32:e7:
1c:69:a4:50:c7:78:6f:d9:ac:11:d1:fb:df:d4:07:36:44:62:
0e:87:5a:18:6d:58:54:d5:fb:bc:7a:1a:06:db:82:c9:e2:e1:
a7:ec:e0:4d:c2:29:8c:48:8f:07:47:09:5a:91:74:15:53:26:
e7:72:5a:0d:de:78:35:02:61:4a:78:47:e5:64:66:31:0a:c1:
89:84:60:8c:27:9a:77:b9:7a:9a:30:90:f4:22:85:1c:f4:b2:
d6:41:e6:2d:38:b9:aa:e1:f3:1f:52:a5:62:6f:b6:48:ad:9c:
19:29:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:28 2025 by rpki-client