Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
File: pqBDS-vl36Y92njCSk68HSzXNp0.mft (raw, json)
Hash identifier: 8co5w6Sow/M47L03OzW5HKjE2ImHulwxJLjl7J+JlxE=
Subject key identifier: 9F:E8:D1:D7:23:01:2E:B8:53:B7:AF:8C:CA:AD:00:D0:AF:EA:9A:AC
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 0199FEEC1C665624954240B4CF5938081CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 00:01:50 +0000
Manifest this update: Mon 20 Oct 2025 00:01:50 +0000
Manifest next update: Tue 21 Oct 2025 00:01:50 +0000
Files and hashes: 1: 8jaabtKt3B64O7Z2cD2P_cn36ME.roa (hash: hA6VvwDoMvvU+bfDreCFYdMS4Bl2OLX9LNxGEuC9A38=)
2: dSTjA4CnAf21IxP4xXjk_ja4N-Q.roa (hash: 907V1dpHSKLMVnsiYxdzmGC4efZZA0x8Cd4YjFYyRYo=)
3: gphYNlaKSqs8MdlhG8H0chnyKOs.roa (hash: 0EPc4IXSNyNWO/2+i7Jo3eJfrlSwrQY4BXEdm65EH4Q=)
4: pqBDS-vl36Y92njCSk68HSzXNp0.crl (hash: Ku5Kz9HbD4/woCs1OVwS9z4aSee9C79iYSo8hVg52WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:1c:66:56:24:95:42:40:b4:cf:59:38:08:1c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Oct 20 00:01:50 2025 GMT
Not After : Oct 21 00:01:50 2025 GMT
Subject: CN=9fe8d1d723012eb853b7af8ccaad00d0afea9aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:0d:fd:ce:72:b7:17:f5:71:72:eb:55:59:
d9:d4:46:c7:f5:80:a1:9a:4a:8f:6e:c2:94:87:ef:
ac:c9:c3:f0:63:ca:d0:03:2a:34:bb:85:29:97:9a:
12:16:e4:ee:a1:e6:02:01:ec:7e:17:9b:6e:d5:98:
bd:b7:05:68:c7:19:75:14:79:8e:b6:82:06:95:5d:
7d:d2:5e:21:24:4a:20:b8:f1:e1:cc:fe:36:98:b3:
e9:d2:de:20:64:66:51:c9:6b:8d:88:a6:1a:86:20:
8a:72:d9:28:28:3d:14:94:95:54:83:c6:cb:05:8e:
55:12:ab:87:67:b1:ef:61:3f:8e:7d:b5:53:28:5a:
a6:ee:14:19:03:9c:3f:4f:86:fc:10:60:07:1b:1a:
c0:16:36:9c:2e:10:44:2d:af:8b:c0:6f:12:c9:ca:
93:1d:7d:08:81:1f:91:4b:d8:6e:b8:71:74:2e:0b:
39:42:2d:58:6b:da:05:d5:72:53:e2:01:c7:1f:b0:
3f:9b:16:a2:e7:3d:f0:d9:5a:8c:a2:ed:e1:d0:48:
91:a8:9f:f1:39:3d:08:b3:1f:7a:79:ad:a4:5f:b6:
e3:38:12:c4:6c:9c:91:4f:20:38:96:35:0e:fe:4a:
4c:cb:38:e8:79:85:8b:32:df:8b:2c:fa:8e:0d:1b:
ac:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:D1:D7:23:01:2E:B8:53:B7:AF:8C:CA:AD:00:D0:AF:EA:9A:AC
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e2:12:3d:aa:fa:01:32:c3:ad:81:0a:71:73:8f:e0:2d:85:
5f:ae:55:b0:36:47:51:6b:b7:9c:6a:75:1e:ee:97:21:fb:5b:
73:2d:f9:9c:ac:b3:c1:63:3e:13:83:6e:5f:cd:ea:c1:cd:b6:
81:0f:99:9e:78:7c:65:ce:cb:04:69:ee:f9:ec:0f:64:ff:7b:
16:2d:28:81:ec:1a:e3:97:fb:3f:42:30:4a:10:5e:be:bb:61:
c3:6f:74:bf:91:d7:76:ad:3f:63:52:cf:c9:d5:1b:2f:78:46:
9c:b2:24:e8:70:00:cd:8a:56:6c:45:51:77:ab:b6:78:9b:45:
1f:90:f9:bc:70:07:9a:35:ad:75:71:b5:00:02:f5:4c:67:e6:
bb:80:ee:79:fb:0c:18:bb:d8:6b:c3:d5:f8:d0:3c:49:cf:5b:
c0:bb:b5:51:33:2b:c4:29:9c:14:6e:31:e4:d3:4a:26:8e:8f:
77:48:dd:0a:a1:cb:c7:01:2c:3c:7f:05:2a:3f:6e:15:c2:0d:
99:5f:96:17:0c:47:2b:ae:84:b3:d2:7a:f6:8c:6e:da:a1:7e:
55:9d:8b:b1:af:29:53:6c:aa:6f:93:1b:40:ea:1d:f3:74:41:
cf:cc:fd:ed:ea:15:04:7a:e4:01:b2:fd:9a:a7:52:f2:6e:1b:
64:94:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:13:11 2025 by rpki-client