Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: CUkXt6uAJcNanUdWgSEb3k5t3BKU2dOfr3+KrbcgknE=
Subject key identifier: CF:89:FF:F8:C6:C6:1F:50:BF:50:47:71:2E:32:6A:79:29:E3:41:4F
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01964CA256EE41FAF3ECE04EB9B9DC6EFBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 06:00:29 +0000
Manifest this update: Sat 19 Apr 2025 06:00:29 +0000
Manifest next update: Sun 20 Apr 2025 06:00:29 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: 2O9pS2Elr01+gh/+Y4AKB7qLiujWCEk15QaNhGTpOOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:56:ee:41:fa:f3:ec:e0:4e:b9:b9:dc:6e:fb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Apr 19 06:00:29 2025 GMT
Not After : Apr 20 06:00:29 2025 GMT
Subject: CN=cf89fff8c6c61f50bf5047712e326a7929e3414f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:2e:c3:9d:ee:20:8b:82:ea:3a:65:10:dd:
d6:40:b0:c6:c8:4e:c0:8b:23:74:25:d9:a0:fd:36:
a9:df:6e:e2:05:01:03:39:62:73:4a:96:28:8f:ce:
71:9b:68:60:c6:bb:10:39:1e:a1:5c:6b:a5:5b:04:
0f:23:17:47:1d:2c:c9:42:78:80:59:c3:d6:fc:ac:
12:dc:94:a0:e6:c9:f9:27:06:4d:d2:98:5a:3b:c0:
ea:c3:c0:a8:b3:74:1c:9f:a7:bc:fb:1b:91:bd:ef:
87:62:76:c1:bb:ef:91:d6:96:fd:58:dd:81:f1:63:
58:91:4c:00:49:1b:b8:f2:ad:f6:f6:08:29:56:20:
7f:12:60:b4:e6:5c:a1:6a:ad:48:c5:55:9b:d7:05:
c5:d2:80:cc:37:28:c7:ce:55:97:d6:a4:5e:ae:5b:
0b:69:64:96:aa:4f:dc:60:c1:1e:bc:34:51:60:60:
fa:4b:c7:02:b3:24:1f:f9:01:8a:f4:1b:ec:0a:d7:
23:d6:d6:fc:12:3a:56:91:4f:52:c2:51:de:0a:a2:
85:f2:1d:64:31:7d:d8:a2:0b:15:8a:2a:36:8d:26:
1d:bd:c6:fc:b3:40:27:ca:0d:ed:5c:00:89:cd:02:
2a:9d:24:d3:a7:7c:3b:c1:41:98:ea:c9:08:9a:e1:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:FF:F8:C6:C6:1F:50:BF:50:47:71:2E:32:6A:79:29:E3:41:4F
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:3d:a1:c1:e1:e6:51:79:c4:46:e8:aa:b1:2e:6f:ef:e1:
73:70:d2:de:06:b6:28:9f:48:09:09:44:ca:6b:fa:e0:5e:ab:
ad:d4:1e:f5:d9:a1:ca:3d:b5:5d:b5:b4:8f:16:e3:eb:6f:00:
1c:e1:b3:ef:64:9d:14:cd:48:ae:9e:c6:04:69:d2:c1:58:b1:
17:1b:76:b3:fe:2a:53:5b:72:4a:48:6c:4e:1a:36:f7:bb:43:
05:ad:b3:46:78:43:2d:e3:e7:1a:6c:1b:75:ff:ea:b4:e1:b4:
1b:46:21:98:8b:03:98:d6:c4:fd:e2:72:e5:93:1e:25:8b:74:
55:2c:b8:be:cb:09:f3:78:c2:8a:2f:43:d8:a3:67:be:84:93:
27:cb:83:8e:bb:9e:70:96:d9:8d:8f:c2:52:93:cb:5c:50:50:
6c:0a:ba:d5:07:64:f4:8b:74:5f:c5:9e:ec:f4:f8:ef:9d:60:
b7:e2:1a:b6:64:4e:8a:9f:59:80:40:e9:7c:7b:ba:22:35:29:
52:13:23:a8:98:ae:51:de:a2:46:fa:9b:7f:7f:67:bf:ee:7b:
7f:76:93:c4:0b:98:12:78:5c:3a:c6:76:c8:5e:5a:cd:db:71:
0c:80:f3:e4:8a:d3:2f:bf:3f:e4:0f:a2:88:11:95:7d:aa:19:
1a:a8:56:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMolbuQfrz7OBOubncbvupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA0MzRiZWJlNWRmYTYzZGRhNzhjMjRhNGViYzFkMmNk
NzM2OWQwHhcNMjUwNDE5MDYwMDI5WhcNMjUwNDIwMDYwMDI5WjAzMTEwLwYDVQQD
EyhjZjg5ZmZmOGM2YzYxZjUwYmY1MDQ3NzEyZTMyNmE3OTI5ZTM0MTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Yuw53uIIuC6jplEN3WQLDGyE7A
iyN0Jdmg/Tap327iBQEDOWJzSpYoj85xm2hgxrsQOR6hXGulWwQPIxdHHSzJQniA
WcPW/KwS3JSg5sn5JwZN0phaO8Dqw8Cos3Qcn6e8+xuRve+HYnbBu++R1pb9WN2B
8WNYkUwASRu48q329ggpViB/EmC05lyhaq1IxVWb1wXF0oDMNyjHzlWX1qRerlsL
aWSWqk/cYMEevDRRYGD6S8cCsyQf+QGK9BvsCtcj1tb8EjpWkU9SwlHeCqKF8h1k
MX3YogsViio2jSYdvcb8s0Anyg3tXACJzQIqnSTTp3w7wUGY6skImuFdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+J//jGxh9Qv1BHcS4yankp40FPMB8GA1UdIwQY
MBaAFKagQ0vr5d+mPdp4wkpOvB0s1zadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAt
OWNlNDc2N2RhMmMxLzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kODM5OGUtMjMyYy00NWMyLWI4ZTAtOWNlNDc2N2RhMmMx
LzEvcHFCRFMtdmwzNlk5Mm5qQ1NrNjhIU3pYTnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8s9ocHh
5lF5xEboqrEub+/hc3DS3ga2KJ9ICQlEymv64F6rrdQe9dmhyj21XbW0jxbj628A
HOGz72SdFM1Irp7GBGnSwVixFxt2s/4qU1tySkhsTho297tDBa2zRnhDLePnGmwb
df/qtOG0G0YhmIsDmNbE/eJy5ZMeJYt0VSy4vssJ83jCii9D2KNnvoSTJ8uDjrue
cJbZjY/CUpPLXFBQbAq61Qdk9It0X8We7PT4751gt+IatmROip9ZgEDpfHu6IjUp
UhMjqJiuUd6iRvqbf39nv+57f3aTxAuYEnhcOsZ2yF5azdtxDIDz5IrTL78/5A+i
iBGVfaoZGqhWcw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:09:02 2025 by rpki-client