Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: JRWs2xjTP3jaK5d3YNjw6+x1tlt73O5PPZQgNV2V4hk=
Subject key identifier: AA:05:28:0F:7F:CD:F5:E2:08:72:05:A3:17:A2:60:14:61:D6:80:7A
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01993047C74F63E2181E376A9D18491379D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 21:00:34 +0000
Manifest this update: Tue 09 Sep 2025 21:00:34 +0000
Manifest next update: Wed 10 Sep 2025 21:00:34 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: 7nWmnMIQWALDwpAyDFnhcuXRalfy/YCU/V3iQx2Brhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:c7:4f:63:e2:18:1e:37:6a:9d:18:49:13:79:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Sep 9 21:00:34 2025 GMT
Not After : Sep 10 21:00:34 2025 GMT
Subject: CN=aa05280f7fcdf5e2087205a317a2601461d6807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b5:62:94:96:5a:96:3a:fd:01:2f:5c:e5:dc:
e1:cb:4f:2d:70:51:cc:fd:40:07:8b:58:b4:35:17:
49:2c:b3:c9:91:64:37:d9:66:05:5e:b2:f7:65:ae:
76:c5:b7:46:0a:5a:0d:7a:9b:3a:c8:6e:3f:11:b3:
7a:a5:e2:8a:d6:fb:ff:18:10:d9:80:0e:e5:2b:c2:
16:64:da:33:f0:7c:db:bb:b6:bb:49:43:d9:e2:b1:
d1:37:fc:7d:75:53:8a:a5:8f:24:4f:4d:ba:f1:a4:
b9:dd:e5:46:6d:fd:f7:80:ce:90:e6:13:f0:d2:ba:
25:9d:f2:65:08:f6:61:0b:1d:87:3a:bb:29:b5:66:
a3:6d:33:c3:e6:1b:aa:81:1f:2d:0c:c1:43:71:00:
4d:50:b0:03:a4:a4:1c:65:e0:e9:17:7d:50:b5:06:
fc:88:15:8b:b9:07:5c:ec:db:c6:78:1f:88:bb:f7:
d2:d1:f0:fa:84:42:b8:8b:01:ad:f5:2d:a7:eb:f9:
73:ec:d8:d7:45:9a:e1:1f:d1:bc:11:7e:c5:3e:c4:
9a:13:3a:e4:85:05:5e:7a:30:f0:5a:78:b1:84:7c:
d4:59:fe:2d:b1:b7:e1:e3:ce:f8:15:0e:7a:cf:3e:
16:c4:a1:02:b1:e7:61:f0:68:05:10:f1:bd:56:2d:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:28:0F:7F:CD:F5:E2:08:72:05:A3:17:A2:60:14:61:D6:80:7A
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:64:e0:c4:24:7a:94:e0:3c:35:16:82:6c:43:9e:2d:b7:c4:
bf:e5:7a:48:d6:fd:3d:3e:3b:96:a6:6f:64:32:35:d3:7d:d5:
41:19:92:eb:df:db:f7:16:4f:9d:5e:01:8f:72:c2:50:d7:3e:
3c:6c:7e:ab:4c:44:be:0b:70:43:a4:3b:4e:90:31:2c:bf:24:
c1:e1:3c:be:03:ec:a3:41:6c:ca:4f:66:eb:b0:ad:d7:72:bf:
f8:25:81:55:2e:0e:e9:ac:34:0c:12:b5:ff:99:03:30:9d:6d:
90:26:80:e0:65:78:02:1d:3c:5c:5b:ff:26:36:a2:7a:86:c0:
4c:34:89:de:5a:1b:83:12:07:62:3a:1a:a9:19:23:0d:50:c7:
4b:b4:b6:04:6a:b7:b6:02:ee:a8:7d:71:09:ac:3c:19:76:f1:
93:a5:86:40:09:e2:76:68:59:4c:65:fc:2d:f3:c7:8e:f2:7f:
0c:43:0d:e3:25:13:15:24:e0:0c:cf:9f:7a:ed:ab:11:c2:bc:
14:7e:3f:cb:c0:9a:40:e2:16:29:97:97:ed:23:11:75:1f:c2:
4d:e1:76:d0:e9:9b:be:4b:fd:a3:2e:bb:e8:5e:3b:98:de:d5:
7b:f9:80:b6:6c:44:30:c1:f6:56:ee:7a:70:b1:89:54:db:d8:
2f:6d:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:29:43 2025 by rpki-client