Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: KyvHByCjBUiJwVbsZa7MXDfwAPKAALIUfoaTLadkDbo=
Subject key identifier: 0D:26:F6:4B:71:59:95:CB:DF:D3:76:FC:0D:8E:18:DD:4A:BE:D0:0F
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0198D583879081CD38462DAC9A79A75E2CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: v2ExhnNlp8UU7RWuiDV5wK6aBierQLdW2gECMPtfE5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:87:90:81:cd:38:46:2d:ac:9a:79:a7:5e:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=0d26f64b715995cbdfd376fc0d8e18dd4abed00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:97:31:bb:1a:c8:27:48:af:b2:ff:9f:d5:
e0:51:5f:68:86:c2:be:9a:1b:a0:82:5f:b7:32:13:
16:58:d2:5d:05:93:25:84:dd:7d:3f:ed:f0:2e:45:
1f:b3:d1:cb:f5:97:f6:a2:56:65:39:3e:7e:15:63:
37:22:5b:7c:ff:37:3c:bc:70:9f:7b:c4:2f:86:c5:
f6:3c:48:c2:f1:5d:63:c8:32:b0:ea:dc:30:fd:e9:
44:8e:d7:b7:e5:a7:bf:34:30:44:dd:8a:45:ad:e7:
11:88:d2:fa:d7:f2:6f:a7:1d:5e:c6:c9:8f:b9:da:
dd:b0:48:32:f3:e3:82:44:c4:3f:45:9f:8c:99:d9:
44:41:6d:9e:50:17:95:4c:98:ef:f6:94:48:81:c3:
c2:0e:d3:bd:6a:30:bf:e7:6a:bc:8b:47:80:cc:68:
d0:32:b1:08:e1:f7:cb:5b:94:36:bf:5e:d7:cc:68:
02:30:2d:ba:69:52:03:11:1d:ea:ba:a2:c7:1d:41:
5f:1d:88:8f:2b:03:b8:66:f1:6a:16:46:58:85:62:
91:78:7d:8a:3b:4a:2c:2c:c4:87:62:f4:f4:da:8d:
97:99:ca:44:92:bf:e5:a7:65:93:5f:e1:cc:bf:c0:
dc:1d:39:7e:b4:35:b4:84:f3:80:05:28:e4:e9:b9:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:F6:4B:71:59:95:CB:DF:D3:76:FC:0D:8E:18:DD:4A:BE:D0:0F
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5f:c1:b5:6b:b3:66:88:13:6f:48:ac:da:7e:56:d0:f1:87:
b8:2e:3a:3d:b1:26:78:6a:56:24:b8:00:1b:20:69:86:a8:9a:
d6:cf:44:74:9d:cf:76:39:1b:c8:73:d5:c7:fd:03:aa:4b:25:
a2:1c:06:ac:11:b2:51:db:9e:27:d6:e8:fd:d3:d1:2c:6a:87:
df:c2:41:4e:d5:8b:cd:e6:4f:bb:73:64:76:5a:06:bf:f1:08:
0c:14:ca:5c:0e:52:9c:40:f9:6b:95:1f:4b:76:56:b1:86:c1:
9a:0c:8c:a2:0b:98:4c:9e:a0:71:f9:6e:c8:8b:c1:74:04:74:
85:27:93:84:5f:ba:b2:38:1b:b8:32:2b:e0:6f:3b:1a:6c:f4:
49:12:0d:8c:ee:d8:e1:90:be:5e:fe:c3:b5:29:d7:11:7e:24:
b8:08:35:9a:e6:bd:62:44:6b:28:ba:7c:89:06:c0:02:b7:29:
50:4c:0f:78:85:9a:47:88:1a:61:ea:33:ce:a1:d6:66:93:6e:
c2:3f:15:f5:f1:7c:d7:e6:91:f9:df:6c:8a:71:9d:5c:34:18:
b6:3d:46:f2:df:80:c2:b0:a7:5f:59:96:74:44:b3:ea:c9:bb:
be:3b:20:72:83:98:76:09:e2:d5:ef:88:e3:7f:8b:4e:e5:a0:
32:37:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:15 2025 by rpki-client