Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: AHOPptm5lZzcWg9M6nbeT33Ab+qJUN6cO11kE0s0c6s=
Subject key identifier: 75:C5:BF:0D:56:D7:AC:BD:96:50:77:79:AA:9E:6F:AD:12:08:84:29
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 019A29677A1E5B9799C3797778D6E74BE242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 06:00:38 +0000
Manifest this update: Tue 28 Oct 2025 06:00:38 +0000
Manifest next update: Wed 29 Oct 2025 06:00:38 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: y7xFhlIvfuV5vKERhVNNu60cEAI/KpTO51B+aLUvkLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:7a:1e:5b:97:99:c3:79:77:78:d6:e7:4b:e2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Oct 28 06:00:38 2025 GMT
Not After : Oct 29 06:00:38 2025 GMT
Subject: CN=75c5bf0d56d7acbd96507779aa9e6fad12088429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:7b:46:74:f6:89:a6:99:5e:18:17:25:11:
2b:83:08:3c:0c:91:71:bf:1a:dd:50:af:13:60:86:
ea:26:22:59:d6:96:4d:52:4f:df:a4:2f:e6:d2:ba:
f1:be:ab:fc:bc:b3:47:75:fc:fd:1a:17:95:f7:9a:
ed:11:4a:07:c5:ce:c3:ad:b7:c6:af:b9:62:86:0a:
73:f0:82:87:c7:82:ad:62:1f:a5:ab:0a:4c:02:4c:
07:81:0f:7d:42:43:39:d8:c8:fd:33:d4:2d:8d:2c:
d4:f4:cd:66:7c:a1:c7:b1:b7:c0:02:49:6e:1c:ad:
fb:ec:09:c6:c6:84:3c:03:5a:1e:4c:0b:5a:fa:b1:
af:dc:b0:59:52:df:11:88:5e:b8:05:b2:4e:e6:52:
f2:2e:3f:cd:d3:e4:fa:07:c7:05:3f:a7:78:49:7a:
e6:d5:69:05:86:a4:dc:36:b2:c3:a1:55:b8:62:19:
2a:68:bc:93:5e:f5:eb:e6:50:fe:a5:19:b6:8f:89:
92:d4:7a:04:d0:1b:bd:17:e2:bf:06:b9:17:92:e5:
f2:5e:0d:7b:94:4a:98:5f:6a:f4:c8:f9:22:10:96:
0b:3f:18:c3:c3:06:dc:41:14:95:e0:3d:94:ae:4e:
7e:83:6e:15:98:c9:d4:c9:61:f4:7b:24:5b:75:e4:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:BF:0D:56:D7:AC:BD:96:50:77:79:AA:9E:6F:AD:12:08:84:29
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:da:e4:d9:ad:e4:cc:a5:7c:92:fc:66:bb:59:a9:d3:3d:f7:
a0:42:4a:dd:3b:d9:19:00:1e:d8:0a:60:58:c3:a6:89:5a:fb:
e8:da:dc:04:b3:59:7b:5a:1d:74:7a:6c:a8:bb:66:e9:b8:fc:
5a:0c:47:42:82:bf:1e:26:a3:9c:3d:91:c5:24:46:23:1f:16:
93:ca:5e:35:f6:20:43:58:8a:21:b8:b3:b4:04:79:70:be:23:
95:e6:1e:44:f4:78:7b:89:d2:d2:b8:36:79:8f:15:15:76:6c:
37:c8:d3:14:13:a2:47:94:c7:07:98:26:7f:00:87:be:c6:5d:
30:03:86:2c:b6:82:3d:57:4f:d9:49:af:22:c4:68:ed:13:0d:
b5:64:59:2f:4e:9c:88:30:9b:72:44:00:39:2c:5b:30:5c:d4:
4f:76:e8:2e:37:0c:86:7d:2d:03:9c:06:3e:77:d9:47:8c:ce:
00:85:87:ee:e9:67:9a:8f:58:5b:05:cf:53:37:55:19:cf:0c:
a5:52:04:fd:66:0d:eb:5b:c2:36:cd:13:16:86:2a:0a:2c:df:
1b:4f:70:ff:24:f5:1a:4f:52:19:15:45:fd:ce:fb:5b:f0:54:
e6:fe:f2:bb:8d:8b:a3:ef:83:84:3f:8e:59:ca:c3:41:c0:e9:
b0:a1:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:40:21 2025 by rpki-client