Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: Zh/zSaasp+KZlRGjW0PwCATuU6x/l1+WDtp46buek8s=
Subject key identifier: D0:C6:5B:CB:6C:FD:A1:E6:0D:B0:8C:84:F0:8D:C6:3B:50:7C:F7:ED
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 01969FACD8CF598BD2AE030482887F39860F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 09:00:27 +0000
Manifest this update: Mon 05 May 2025 09:00:27 +0000
Manifest next update: Tue 06 May 2025 09:00:27 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: PqkabaUGauJ4Gvy970pNNzMTns6wWVYRBYD7d1huiQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:d8:cf:59:8b:d2:ae:03:04:82:88:7f:39:86:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: May 5 09:00:27 2025 GMT
Not After : May 6 09:00:27 2025 GMT
Subject: CN=d0c65bcb6cfda1e60db08c84f08dc63b507cf7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:56:b4:1c:0a:62:80:2c:0e:59:78:ba:60:
96:96:f3:8a:b6:ec:cd:07:2b:22:36:10:69:e9:13:
53:dc:ee:6c:36:96:0f:04:cb:a0:ee:d0:70:5d:0f:
02:16:57:14:0f:fc:6f:f3:4b:82:87:3e:8c:e5:9f:
fb:2e:0d:b6:77:68:50:da:11:cb:ef:d6:54:10:69:
19:46:b9:27:a7:ef:b2:b1:87:bf:c1:8f:39:cc:66:
81:cc:d4:17:61:8d:c0:cd:b4:c1:df:1e:ff:c7:8f:
79:fe:3a:50:01:73:1c:c8:53:33:31:53:7f:fb:7f:
18:f6:c8:e4:3c:98:89:1d:3a:9a:f4:1d:33:0c:76:
e5:7f:a8:15:97:9f:b3:cd:fc:82:3c:97:14:16:1d:
73:31:60:dc:3d:5f:e8:8c:dc:9f:ee:13:b1:39:2d:
08:78:07:2b:1a:c4:f7:12:ef:e2:b4:bd:a2:6c:0a:
4a:6e:40:8a:3c:1b:cd:e4:85:ce:e5:9d:9d:0b:3c:
59:be:55:e5:db:97:8a:db:ab:a7:a7:b9:f6:31:c5:
2b:04:a1:52:8b:10:db:fa:85:54:eb:9d:49:52:16:
4c:64:4a:2b:d8:e1:07:b6:0d:d4:16:14:f6:5b:92:
89:46:b2:2f:60:8b:0f:cb:aa:0e:9c:c3:3a:f1:29:
fe:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C6:5B:CB:6C:FD:A1:E6:0D:B0:8C:84:F0:8D:C6:3B:50:7C:F7:ED
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:ef:e5:45:98:d9:e1:e5:4f:12:20:c5:24:28:c8:0f:0b:
48:73:32:13:e7:d0:08:9b:cc:b1:42:a3:0b:c7:24:26:a6:06:
ac:4c:56:19:06:5c:87:a8:0b:9b:bd:1a:df:ba:79:bd:76:71:
3d:a1:a2:72:ae:8a:f0:e3:b1:00:99:1d:54:70:4f:fe:8b:33:
db:e5:30:6b:9a:a0:f0:a8:e6:16:34:2e:a4:b9:8c:f9:c7:ca:
a3:c2:f4:18:82:9e:28:08:1b:b6:e8:6a:a9:1d:b0:54:bb:6e:
aa:55:b3:a7:70:d3:d9:4b:4e:f0:98:ac:d6:15:4a:10:ae:0d:
cd:be:81:82:dd:7b:f6:7e:e7:d5:1b:3d:44:e3:6f:1e:e2:c1:
55:5e:07:8f:9a:8e:75:83:31:ec:3e:40:a6:b6:c7:e6:51:03:
53:50:38:e7:c9:7a:d3:a6:0e:f6:2c:bb:b4:02:73:e5:7c:72:
db:5b:f9:84:fb:e1:c2:11:00:2b:a7:69:13:7c:4a:8a:fa:d5:
ba:02:09:ae:2c:c8:ba:5a:d0:e1:ca:b6:bb:7f:a5:6b:81:f4:
bc:bf:af:ba:62:22:72:7c:a4:1c:38:9b:71:bc:b1:26:2e:28:
a5:47:dc:ae:89:60:d8:0e:75:f7:2e:17:23:40:48:9d:d2:2d:
cd:45:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:58:44 2025 by rpki-client