Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
File: MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json)
Hash identifier: AvGrusyjNy2HXfg/RRyLbMAZE9ddRP5KGTREgTUX0t8=
Subject key identifier: 7C:1F:7C:28:47:3F:8A:EA:3B:7F:08:1A:19:48:E4:50:C3:76:FE:2D
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 019752D917FD8CC5D5BD2ACA323B72076ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 04:00:48 +0000
Manifest this update: Mon 09 Jun 2025 04:00:48 +0000
Manifest next update: Tue 10 Jun 2025 04:00:48 +0000
Files and hashes: 1: DStV17Hecan-6QQiecnzOLb7PtA.roa (hash: E6s1lLpFj1dG9iVyKbgkYVYs/gktTO6G9yKQPD1Kbsk=)
2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: nLMC+DdTgpp+I/RCZ3CtrGndP3uVSJ8TZOHoWJlhQ9g=)
3: OOR2C4NfwLbcE74byGedRUcg34A.roa (hash: tExNqyl7DFFkGILQ3eOlKSLeSHLrbYUZ9m6SSiTSCJM=)
4: daYV5svP14BSfH0S8i-aZ5WBv5M.roa (hash: Hs0nBQ6m77zflugmlg/FABCDAsXWbLjyitCeWa+v+ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:17:fd:8c:c5:d5:bd:2a:ca:32:3b:72:07:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Jun 9 04:00:48 2025 GMT
Not After : Jun 10 04:00:48 2025 GMT
Subject: CN=7c1f7c28473f8aea3b7f081a1948e450c376fe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:d3:68:17:89:a4:9a:ac:b4:68:70:b5:71:
5b:9a:f4:d3:fb:62:84:d4:48:b1:44:f6:ce:8a:71:
5c:c1:20:61:f4:d9:ff:46:6d:14:4b:eb:a7:f9:ba:
76:8e:47:c2:c5:a8:8f:b9:fa:40:a9:98:bc:87:ce:
51:4a:45:f4:29:b7:7c:f3:4f:44:d7:08:51:25:dd:
f7:49:af:a5:c9:cb:ca:58:97:95:32:af:d5:e8:55:
78:62:37:37:4d:c3:c2:09:c9:64:6d:b0:f7:6e:54:
4a:3a:3e:bd:fa:d1:46:41:84:0a:ff:fd:3c:89:5c:
7d:7b:2b:c6:02:0b:78:13:f8:5c:5a:5b:c4:08:96:
80:8c:b0:91:fb:49:e6:aa:cd:7e:0e:2e:35:15:a3:
26:ea:39:86:1b:9f:b4:0c:71:b2:86:3d:58:da:fd:
4d:de:a1:2f:62:e2:32:a8:c4:83:5d:65:2a:73:a3:
b4:48:78:0e:b4:8e:76:d3:cf:f9:6a:98:49:d0:81:
08:e6:05:0d:47:23:f0:9e:30:62:4b:9b:e7:55:6d:
81:0a:10:2f:e4:5f:83:1a:a9:71:ab:c1:e0:8d:8a:
02:ea:23:1c:3c:16:ed:c5:6f:4f:82:70:f3:36:35:
1a:12:6d:d1:7d:a1:6f:b1:97:80:52:e7:dd:38:e9:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:7C:28:47:3F:8A:EA:3B:7F:08:1A:19:48:E4:50:C3:76:FE:2D
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:15:9c:fb:a4:49:24:25:43:d9:6c:97:5a:7b:b5:a7:a1:81:
05:d8:3d:a3:d6:40:b9:f3:94:6c:da:0a:ef:8b:ac:85:56:89:
c4:85:a9:51:9b:05:3d:29:f0:a8:04:88:e0:7d:0e:55:44:6a:
76:24:ce:fa:91:fe:35:11:52:6c:bc:0e:12:f3:ab:f0:b6:65:
bb:fc:9f:bc:1b:da:2a:dc:f6:ff:52:24:37:2d:e4:f6:65:b6:
5b:08:d3:d2:57:ec:57:64:4c:46:08:e7:8f:28:da:a4:1d:13:
db:43:82:09:fc:ec:5e:16:f7:c2:76:77:9d:f6:5a:9d:c5:03:
84:a7:14:7b:fc:52:e0:8f:25:f9:17:b7:80:fa:3e:81:82:9a:
f4:a4:f0:6b:74:a2:db:41:c9:34:d3:24:29:9a:a5:88:21:50:
c0:8b:40:47:8a:f8:ba:2b:ab:6e:e8:47:ad:48:46:26:b9:28:
9d:69:23:da:cc:e5:42:71:14:c6:b4:bc:52:44:95:33:6d:ee:
db:8c:c6:13:38:57:a9:88:a5:6c:a3:98:98:23:d6:3e:68:f9:
ef:dd:5c:0b:6e:7b:32:15:60:06:d4:7e:66:a1:27:71:ca:0b:
09:83:9d:64:9a:ad:20:be:d3:64:3a:68:f3:12:de:96:fc:b4:
cf:70:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:36:10 2025 by rpki-client