Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: HNFVSIn8/oNv6vus4Pp0rjU1flRuCLpsmJFgvqVywr4=
Subject key identifier: DA:70:0E:AD:42:BE:AA:03:C5:32:15:43:61:D8:25:14:EC:2C:25:92
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 0198744FE17A004583A4B8A37ED96542BE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: X80KrwrghNvN4pU0fXbrW2dz+wFW2C8H2v9ZcrFpqfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e1:7a:00:45:83:a4:b8:a3:7e:d9:65:42:be:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=da700ead42beaa03c532154361d82514ec2c2592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:99:65:46:56:5c:d1:36:9a:3a:87:ae:8d:
4d:5c:ca:7f:9f:d0:cd:60:f6:6a:2a:38:87:35:e8:
06:2d:9d:2b:eb:c2:53:52:a2:aa:44:b1:6d:00:29:
6b:9b:d5:d2:7e:44:97:0a:b2:99:32:23:3d:5d:19:
86:6b:3e:95:54:a7:af:19:8a:2f:36:a5:98:67:06:
be:f1:88:11:9a:45:dd:29:6b:6a:2c:0f:30:08:73:
7d:64:e5:0e:34:63:6b:a9:a8:02:63:b6:38:d7:6f:
90:dc:a5:00:b7:93:6d:c8:a9:12:cd:0d:4b:bd:7b:
53:3f:9d:75:ff:cb:39:e2:d8:b3:5b:79:00:14:b0:
21:87:20:6b:49:03:e1:4b:44:e4:e9:3a:98:89:d8:
e9:6c:69:81:01:47:31:42:72:28:13:97:3d:82:c2:
ae:06:1b:46:b4:6f:bf:0f:31:e3:e0:76:88:51:f1:
93:90:50:52:a0:ce:67:ba:64:5e:55:46:4e:eb:a5:
53:20:4f:72:f9:0b:16:6b:1e:ae:1d:72:55:ee:09:
fc:bf:51:5e:c5:dd:ec:d4:5e:ed:bc:39:f1:f0:0d:
74:16:e6:57:ce:d3:e6:0e:ad:cf:53:bc:0f:69:81:
2a:2c:a6:e4:ba:41:bb:cd:39:14:6b:07:64:6c:e1:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:0E:AD:42:BE:AA:03:C5:32:15:43:61:D8:25:14:EC:2C:25:92
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:35:cb:3a:5d:75:a0:aa:23:c2:2e:68:76:21:2d:d4:50:7b:
72:75:bd:b9:fa:87:03:0d:01:04:aa:1d:59:1b:0c:50:0a:29:
7a:18:5f:ab:a9:67:9c:e9:b1:2f:4c:78:1c:bf:db:c6:5b:0a:
02:03:4f:4f:f5:f3:a3:91:69:18:70:71:92:43:3c:69:eb:0d:
c8:de:ff:30:7e:7c:44:43:66:e6:ca:a9:f2:5b:43:e7:b7:20:
ae:0d:1b:ae:00:fd:66:f1:8f:d3:86:67:30:10:36:a2:b5:9d:
7f:53:e1:53:64:3e:ca:ce:91:5e:a0:f4:a0:56:7f:a1:09:3b:
38:ac:79:48:c8:f3:64:0c:ce:d3:4d:67:5e:72:99:c9:af:16:
e8:05:e7:37:05:93:0f:c8:80:a5:40:0a:08:73:82:87:2e:4e:
82:eb:54:ad:cc:b4:cf:a3:47:16:5e:e0:35:d2:4c:25:30:d7:
09:18:e2:1d:9f:3e:27:d7:8a:e3:aa:c5:f9:5a:da:bb:77:94:
62:e1:ab:51:1f:22:b9:25:83:25:51:00:1e:7f:0c:66:af:f1:
f5:48:ef:04:d9:b4:fa:0d:42:24:cb:bd:0d:17:c0:a7:e0:a2:
08:d9:c9:6d:e9:dc:31:d5:e7:6e:30:69:d2:21:35:a9:ae:4d:
60:67:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:59 2025 by rpki-client