Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
File: MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json)
Hash identifier: toouMpfRFoOAbV4yJn+n7Y4QsI3/n8+dwZNdiInd/+A=
Subject key identifier: A4:13:B0:94:18:71:2A:03:4A:01:A7:8C:A9:E6:69:69:FF:ED:C8:84
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 019A4DAA6908836FEAF692B02467AC4C3472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:04 +0000
Manifest this update: Tue 04 Nov 2025 07:00:04 +0000
Manifest next update: Wed 05 Nov 2025 07:00:04 +0000
Files and hashes: 1: DStV17Hecan-6QQiecnzOLb7PtA.roa (hash: E6s1lLpFj1dG9iVyKbgkYVYs/gktTO6G9yKQPD1Kbsk=)
2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: Pq3f59HU+re6/caQnIhgp/72bITTDv+erwMo9aF7oU8=)
3: OOR2C4NfwLbcE74byGedRUcg34A.roa (hash: tExNqyl7DFFkGILQ3eOlKSLeSHLrbYUZ9m6SSiTSCJM=)
4: daYV5svP14BSfH0S8i-aZ5WBv5M.roa (hash: Hs0nBQ6m77zflugmlg/FABCDAsXWbLjyitCeWa+v+ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:69:08:83:6f:ea:f6:92:b0:24:67:ac:4c:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Nov 4 07:00:04 2025 GMT
Not After : Nov 5 07:00:04 2025 GMT
Subject: CN=a413b09418712a034a01a78ca9e66969ffedc884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:8e:8d:af:66:ef:f3:e7:dd:df:47:fa:8f:
dd:c0:f7:e6:eb:bd:0d:be:fc:ac:f2:00:34:33:66:
18:d5:ff:df:27:92:38:c6:f5:87:38:2a:b4:d6:24:
64:e2:98:4d:23:66:30:9a:2d:cb:5a:d0:c3:e4:d7:
10:0e:e8:8a:4c:5a:5f:b4:2e:8f:34:8e:6c:fa:33:
93:54:36:11:56:29:ce:35:60:3f:bd:37:6b:5d:65:
d0:b4:7f:e7:4d:c0:64:28:7d:bc:bd:53:e9:61:1d:
74:bd:22:30:a8:8b:7e:0e:a4:ee:85:a4:bf:10:34:
7c:6f:71:81:48:83:65:38:a6:78:70:2d:e7:91:2e:
c4:f6:05:6b:6f:ba:6d:d5:da:64:d2:81:73:d6:2b:
e9:9b:04:59:80:9e:5f:cf:b5:55:a8:20:68:91:e4:
ad:2b:12:9d:53:d0:7a:f4:ea:82:ad:47:8e:d8:0c:
37:0a:1f:c8:70:9a:61:eb:93:25:22:9d:66:fc:4d:
f3:0e:b5:5d:bf:c2:60:b3:de:4d:33:bd:7b:76:12:
bd:7d:b5:f0:20:bc:66:b8:1e:12:a0:9b:b0:bf:97:
2f:83:ab:7f:d4:76:d1:ec:df:7a:11:c7:6b:fa:c3:
fc:0c:88:40:40:3c:79:f1:74:18:04:a0:eb:6b:4f:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:B0:94:18:71:2A:03:4A:01:A7:8C:A9:E6:69:69:FF:ED:C8:84
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:50:88:58:d1:58:71:06:05:7e:02:d3:70:6a:12:3b:f0:
3c:0f:74:69:51:03:04:3d:10:73:b7:5b:93:98:8e:f6:43:11:
4d:32:53:67:37:73:95:b5:f5:1b:ed:a8:8a:c6:cf:57:e5:06:
85:f0:83:a8:08:14:bc:93:fd:44:f4:5e:39:04:8f:50:e5:b6:
e3:80:b9:86:05:84:9b:1a:1c:67:61:0a:55:14:54:61:2f:4f:
59:ed:0b:6b:bf:8a:2f:48:c9:d3:84:a8:2f:2c:6c:e8:7a:f5:
32:fb:4f:53:2d:41:9c:2f:25:3b:3b:b8:58:e0:34:c3:4d:28:
f4:51:6b:bd:5e:b1:cc:67:63:bc:c1:84:87:5c:e7:6e:c9:63:
5c:8e:0a:ae:14:c7:60:d3:b4:2a:d8:0e:ee:42:55:d0:05:b8:
8f:e7:ec:9d:b7:f1:b9:af:52:31:5c:1a:53:67:4f:e6:c9:61:
9d:4c:55:be:f7:86:b9:80:af:48:52:b9:5b:de:d8:93:f3:52:
67:0f:a2:bc:54:30:10:8e:88:db:9c:34:63:32:8b:48:37:3a:
b8:5c:89:1e:7a:1b:bd:52:83:d5:cc:34:5a:c3:e9:4f:df:39:
c2:73:9d:d4:b4:27:fd:98:db:30:09:3f:cd:74:ad:2d:16:1e:
04:6d:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:03:33 2025 by rpki-client