Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
File: MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json)
Hash identifier: dC7qdku0zvjdnLX/uMOWzmfOsGOU9vuHHwcClbnxLT0=
Subject key identifier: 2C:09:2C:E4:2E:79:5F:72:E5:42:A3:DA:5F:D5:EE:4F:B8:08:4A:58
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 019A4F98E9E24CA4D44304CD034E5F727DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: DStV17Hecan-6QQiecnzOLb7PtA.roa (hash: E6s1lLpFj1dG9iVyKbgkYVYs/gktTO6G9yKQPD1Kbsk=)
2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: v1ffuUyljHk0UZqua1CfFU4mmho2c9iLagguyBayYj8=)
3: OOR2C4NfwLbcE74byGedRUcg34A.roa (hash: tExNqyl7DFFkGILQ3eOlKSLeSHLrbYUZ9m6SSiTSCJM=)
4: daYV5svP14BSfH0S8i-aZ5WBv5M.roa (hash: Hs0nBQ6m77zflugmlg/FABCDAsXWbLjyitCeWa+v+ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e9:e2:4c:a4:d4:43:04:cd:03:4e:5f:72:7d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=2c092ce42e795f72e542a3da5fd5ee4fb8084a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:44:6b:e8:13:2b:03:74:68:7d:17:56:2f:
91:6d:ce:44:2b:3e:f5:f9:fe:be:79:77:81:74:9b:
94:71:c2:8f:b2:f7:4a:0b:55:a0:fd:0c:70:f6:00:
37:bb:50:e6:1b:af:f1:91:01:c9:fd:1d:3f:be:85:
b1:b4:11:f4:55:9c:4c:91:57:d2:9e:24:7b:57:de:
2d:a0:1e:74:8a:7a:b9:bc:de:4d:43:6d:45:79:f0:
4f:a7:64:17:8e:6d:1d:02:dc:9c:e7:d5:d2:68:38:
d6:dd:32:ea:d4:8e:3b:7d:a3:ab:b8:53:c9:62:73:
af:73:33:d8:45:7c:ec:1d:f2:6d:18:54:85:bc:c3:
d6:5a:8e:17:8d:4b:89:77:e6:47:46:d9:60:ac:86:
13:a7:e8:90:20:51:7a:17:12:29:a1:23:cd:ab:4d:
41:eb:82:e6:f4:9e:94:14:97:ef:25:9d:3f:6a:e4:
8a:f4:3e:09:9a:3b:07:4a:5b:08:40:b1:cf:b8:83:
2d:d6:93:25:f4:86:af:a7:28:c9:32:f3:35:ca:9b:
a8:01:1d:64:04:57:66:bf:cc:78:ea:7f:61:2f:d1:
00:a6:d6:3a:d2:26:98:43:78:58:7e:a4:c8:4e:0a:
0b:4d:4b:cb:bc:9a:cb:0f:6b:37:c6:fb:67:02:82:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:2C:E4:2E:79:5F:72:E5:42:A3:DA:5F:D5:EE:4F:B8:08:4A:58
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2a:29:65:cc:7c:23:58:21:03:ba:6e:f1:76:5f:7a:30:d3:
dd:12:77:67:c6:f4:b7:9b:58:67:63:5e:bd:55:ca:fa:a9:a7:
fa:ba:f6:50:ff:12:d5:da:1a:4c:05:da:01:82:a9:9b:91:7a:
2e:35:6a:e9:d2:15:7b:7a:25:d3:8f:95:2c:d7:03:91:7f:63:
f8:ac:81:e0:ad:d5:f6:3c:91:aa:a2:b8:ba:10:96:ae:ef:ef:
4d:83:5f:82:8b:51:32:8a:43:4d:7b:4a:e9:88:ca:ff:fb:1c:
8f:3d:a7:90:fd:06:f7:c0:2b:af:f6:40:cb:1a:1e:db:c3:f5:
ca:e7:ac:55:ff:37:2b:f7:94:08:d5:f6:11:f0:ef:b8:6e:16:
9c:5a:77:07:01:89:9e:c3:02:e7:92:c2:12:fa:ee:60:ec:ea:
eb:91:90:5b:22:8d:58:1f:63:16:9d:79:b7:76:db:5d:d6:c4:
38:01:0e:2f:47:ee:fc:be:f3:45:18:0f:be:ee:09:62:3f:c2:
f6:06:54:e8:1b:a1:f8:a6:74:06:b4:c4:ed:29:77:19:07:45:
09:49:62:cb:0e:38:c8:c2:9a:02:47:7d:38:28:1c:82:af:4e:
c1:36:ca:df:b6:71:ae:86:63:e8:b8:ae:e2:82:81:a5:d9:53:
d7:1e:cf:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmOniTKTUQwTNA05fcn2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTNkYTZkMGZhZmQyN2QwMWI3NDcwM2JiMzlkOGMxMTVl
ODY0MTIwHhcNMjUxMTA0MTYwMDEyWhcNMjUxMTA1MTYwMDEyWjAzMTEwLwYDVQQD
EygyYzA5MmNlNDJlNzk1ZjcyZTU0MmEzZGE1ZmQ1ZWU0ZmI4MDg0YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0tEa+gTKwN0aH0XVi+Rbc5EKz71
+f6+eXeBdJuUccKPsvdKC1Wg/Qxw9gA3u1DmG6/xkQHJ/R0/voWxtBH0VZxMkVfS
niR7V94toB50inq5vN5NQ21FefBPp2QXjm0dAtyc59XSaDjW3TLq1I47faOruFPJ
YnOvczPYRXzsHfJtGFSFvMPWWo4XjUuJd+ZHRtlgrIYTp+iQIFF6FxIpoSPNq01B
64Lm9J6UFJfvJZ0/auSK9D4JmjsHSlsIQLHPuIMt1pMl9IavpyjJMvM1ypuoAR1k
BFdmv8x46n9hL9EAptY60iaYQ3hYfqTITgoLTUvLvJrLD2s3xvtnAoI9dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwJLOQueV9y5UKj2l/V7k+4CEpYMB8GA1UdIwQY
MBaAFDGj2m0Pr9J9AbdHA7s52MEV6GQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYt
NmNkNGM5ODBhNTIzLzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYtNmNkNGM5ODBhNTIz
LzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyopZcx8
I1ghA7pu8XZfejDT3RJ3Z8b0t5tYZ2NevVXK+qmn+rr2UP8S1doaTAXaAYKpm5F6
LjVq6dIVe3ol04+VLNcDkX9j+KyB4K3V9jyRqqK4uhCWru/vTYNfgotRMopDTXtK
6YjK//scjz2nkP0G98Arr/ZAyxoe28P1yuesVf83K/eUCNX2EfDvuG4WnFp3BwGJ
nsMC55LCEvruYOzq65GQWyKNWB9jFp15t3bbXdbEOAEOL0fu/L7zRRgPvu4JYj/C
9gZU6Buh+KZ0BrTE7Sl3GQdFCUliyw44yMKaAkd9OCgcgq9OwTbK37ZxroZj6Liu
4oKBpdlT1x7PmQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:51 2025 by rpki-client