Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: s9T5tvGDLQth/ii9TGzTjiAV8gU0Wtoo1XnuEkL6+lY=
Subject key identifier: B2:5B:61:F1:F5:AA:51:F2:78:43:FC:4F:55:E4:7A:4C:25:07:6E:51
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 0196A8AFFFEF337CB87C2B2B9A99570CF8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 03:00:28 +0000
Manifest this update: Wed 07 May 2025 03:00:28 +0000
Manifest next update: Thu 08 May 2025 03:00:28 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: 8ArcX2u9iunrfVAnaVdKu93JIh68OtNylq3ILXnuK18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:af:ff:ef:33:7c:b8:7c:2b:2b:9a:99:57:0c:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: May 7 03:00:28 2025 GMT
Not After : May 8 03:00:28 2025 GMT
Subject: CN=b25b61f1f5aa51f27843fc4f55e47a4c25076e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:d9:11:81:c8:79:60:e2:cb:59:3c:9a:d7:
27:a7:5b:89:17:f2:9d:12:26:0b:a3:21:2f:97:cc:
5b:51:4e:55:fc:40:d0:15:60:27:fc:5a:bb:f8:f6:
c1:5b:e4:a0:74:a4:de:c7:75:58:d2:ff:56:69:d9:
9e:4e:ee:5d:fe:15:b5:c3:f9:d7:d7:85:91:d7:31:
0c:64:f7:fe:b2:fa:14:41:43:0b:6f:6a:b8:79:93:
7e:e2:d8:8e:ba:a3:43:e8:7f:19:bd:24:7c:ea:a1:
31:27:93:36:f4:db:cc:07:e0:eb:cd:de:27:1c:b2:
58:ff:18:f1:24:a8:0a:8c:85:ca:d7:6f:ac:d3:a3:
4c:b1:29:ab:4d:9e:1d:c9:a6:33:c4:90:6c:d6:4a:
bf:e3:6b:9a:b8:8c:32:87:73:82:af:59:77:4c:dd:
0b:bd:99:0a:48:12:3e:9d:1f:85:70:02:1c:25:6d:
4d:6c:c9:19:dc:be:fe:5f:cc:59:f9:c3:81:a3:b9:
a8:49:4e:de:59:b3:5e:cb:6e:67:c2:31:52:71:8e:
4e:aa:59:24:cd:a0:17:30:17:34:e7:dc:42:89:20:
b0:60:c8:65:bb:b3:c3:ae:a0:c9:99:24:29:d7:cf:
ae:93:12:4b:81:c3:c9:1c:39:a2:24:8a:3a:8d:56:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:61:F1:F5:AA:51:F2:78:43:FC:4F:55:E4:7A:4C:25:07:6E:51
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:81:82:e2:7d:02:fa:be:ba:40:e0:9b:e6:55:d6:dd:f3:
e0:e6:32:70:05:9c:2e:65:29:db:a3:4e:42:9a:bb:b8:97:d3:
d0:9b:b9:6f:72:d2:14:71:0e:e2:c9:39:f3:ad:14:c0:df:95:
bc:e6:70:44:9b:bb:5c:46:dd:c9:b7:79:3c:f3:61:e5:40:2e:
c7:25:4d:c3:95:ec:5a:ba:86:05:cc:82:0d:9e:9f:9f:f0:0f:
5c:2f:e4:e7:d9:62:39:f6:c2:74:26:58:f6:12:88:a7:71:f8:
d5:8f:bd:25:9f:77:bd:9f:71:6f:be:e0:34:0c:10:7a:b3:1e:
ae:df:b3:21:6b:0d:46:0f:12:47:e9:15:c9:15:42:aa:56:b3:
16:18:c0:9d:30:a4:bf:07:94:2a:18:71:42:7c:5e:1f:48:ed:
e2:84:3e:f1:88:36:ef:27:43:55:c4:31:34:fa:ff:88:0d:5a:
b2:d6:a7:2d:51:86:99:91:71:e0:96:23:88:3d:0b:cd:72:35:
af:29:bd:1e:f9:35:3a:2e:b9:88:0b:b8:9a:96:a8:55:96:49:
8f:bf:f2:04:bf:20:89:31:a3:af:00:34:09:f6:3b:b0:89:51:
1a:19:c3:a4:63:af:46:27:59:31:f0:13:7f:ce:5f:c0:3d:7c:
67:a0:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:00:17 2025 by rpki-client