Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: qyH/d9kIA4e350GO9gqBNjGq1RA1RIWY9w3+JwiVxLY=
Subject key identifier: 23:F9:FA:4B:5A:6D:E5:7A:DB:F9:AA:C0:C9:0B:BB:B5:48:24:36:15
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 01967868B51D65FA5F17E5C893BBCE78589A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:49 +0000
Manifest this update: Sun 27 Apr 2025 18:00:49 +0000
Manifest next update: Mon 28 Apr 2025 18:00:49 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: j/MvxxT1mVF6ju7e/hfUXCJr3LhGN9I20Ijc1auCqD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:b5:1d:65:fa:5f:17:e5:c8:93:bb:ce:78:58:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Apr 27 18:00:49 2025 GMT
Not After : Apr 28 18:00:49 2025 GMT
Subject: CN=23f9fa4b5a6de57adbf9aac0c90bbbb548243615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:99:de:bf:71:87:59:bf:c9:6a:3b:29:8c:
7f:81:f5:e0:25:54:18:bf:9a:80:ad:52:01:81:59:
77:fc:fb:d6:c6:8b:31:ee:69:df:7e:fa:55:e6:b3:
3c:12:ef:41:f5:5a:a0:1b:d1:ec:b2:f9:97:cf:55:
c8:c1:22:ab:22:2b:93:a8:fd:c3:14:0f:c9:00:a0:
0e:5b:46:7f:e9:24:3f:c0:2f:13:e0:9b:36:06:5f:
85:20:88:f6:51:ca:c6:27:61:0c:d9:7d:f9:bd:7a:
a9:99:1b:ea:fb:cd:5f:36:66:54:dd:c9:57:9d:c6:
f7:9f:ad:5c:e6:fd:61:c1:f5:59:2f:c7:fe:87:79:
19:11:a5:49:b3:0f:93:d2:bc:21:0b:dd:7f:c3:d9:
45:8e:0a:f4:98:3c:b4:e4:f8:87:61:8d:58:d0:45:
29:50:6a:ed:ff:50:00:91:de:94:bd:a6:47:05:0f:
b8:9b:fc:7b:29:63:95:2a:be:da:2f:96:81:b0:a0:
34:cd:cd:c7:1d:cd:05:3e:01:0c:f7:53:0d:58:33:
5c:02:66:1f:40:2b:e9:61:88:09:12:21:47:03:ed:
ba:83:3e:89:d9:ed:7f:0b:41:2a:20:ba:45:74:95:
0f:dc:87:88:9f:32:87:30:6b:d1:0f:c7:1f:73:09:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:FA:4B:5A:6D:E5:7A:DB:F9:AA:C0:C9:0B:BB:B5:48:24:36:15
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a6:a6:24:8c:aa:f8:c6:90:1a:ef:bc:b1:65:11:1c:48:9c:
ac:1d:84:ba:d6:61:d6:0f:7a:fc:20:57:48:3a:a3:cb:cd:fe:
16:21:0a:93:a0:b1:a3:93:ac:00:c7:a1:3d:37:47:7f:97:5c:
e1:c7:d6:10:ba:e1:2d:c4:1f:71:d6:22:ea:66:a5:50:91:ea:
9b:80:b5:24:3e:06:5f:f9:60:59:f0:4c:91:22:a1:f5:55:9a:
3d:9f:23:be:00:ee:ed:20:94:ce:a6:54:e0:4c:e6:de:2d:2a:
34:7f:17:67:15:f0:51:6d:e2:90:ca:c8:f1:76:13:29:6a:09:
29:db:9a:9c:df:0c:d3:d3:3b:a1:c8:f0:48:5f:38:71:50:62:
4f:2b:62:98:83:48:dc:21:8f:1b:53:e0:2c:32:28:50:48:ed:
91:95:72:6a:05:97:c8:e3:3c:15:f6:ba:06:8d:bd:2b:42:62:
48:77:95:01:5c:98:28:b1:a4:03:49:2d:da:3f:5e:b4:8b:15:
fd:eb:71:32:be:25:0b:d8:cf:84:e1:f6:0a:29:43:b6:b7:28:
c0:6e:8a:03:0c:23:d0:68:ae:5a:ab:db:1c:cd:59:3c:3a:ef:
13:07:c5:70:9b:dc:f0:6c:7d:bb:48:bc:ad:65:28:76:8c:33:
e6:86:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:52 2025 by rpki-client