Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: CtaHDnpDhbLoPF+ttzCyrdMpD95cdnrmem+2LFW+fY0=
Subject key identifier: 31:12:6E:AB:24:27:E0:61:89:0D:40:8B:38:E0:EE:0A:AF:53:45:37
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 0198D6CDCA9698CAD8C163E7C56FFB0D84CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 12:01:07 +0000
Manifest this update: Sat 23 Aug 2025 12:01:07 +0000
Manifest next update: Sun 24 Aug 2025 12:01:07 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: 03SrFF8UT7u42ZKYrfBWyqK6A4skv7WilF3yl0p027I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ca:96:98:ca:d8:c1:63:e7:c5:6f:fb:0d:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Aug 23 12:01:07 2025 GMT
Not After : Aug 24 12:01:07 2025 GMT
Subject: CN=31126eab2427e061890d408b38e0ee0aaf534537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:b8:f6:03:8f:ac:4e:a6:27:cd:af:1c:ed:
3d:ee:e5:dd:f8:3c:d2:09:c3:33:9a:b9:d0:47:67:
ef:71:ab:8c:83:a5:b3:81:2c:99:1d:92:9d:19:9f:
71:23:c4:1f:31:54:ab:a5:fa:64:98:3a:d2:bb:f0:
00:98:5c:77:90:10:3f:8f:f8:60:52:d8:4a:91:91:
f4:f1:61:71:f6:e9:39:fa:fa:73:7c:a3:79:18:b9:
16:60:3d:0c:51:34:4e:05:77:b9:e7:d9:f0:5f:e7:
26:cc:26:8c:26:dd:64:3a:9b:7a:26:f3:bd:18:dc:
ef:3d:2d:1c:ee:65:03:8d:95:6a:68:50:ef:cd:02:
36:80:59:0e:f6:c1:89:f7:a4:cd:3e:34:e6:b5:7f:
c7:41:ae:81:73:32:f5:62:ad:ad:ca:f0:cd:52:c2:
28:ab:54:1f:4d:0a:b6:87:ae:06:0f:85:d6:17:dd:
f9:9d:bf:d1:74:28:ab:19:03:7c:c5:a9:d4:c6:85:
65:0a:27:3f:82:28:f7:ff:ab:46:ea:de:ce:13:30:
bf:b9:ad:e0:2b:d4:05:bf:af:a9:e3:23:4b:c5:e2:
b3:91:9b:97:ad:cc:20:91:41:18:48:a4:64:24:6c:
d3:19:b4:92:46:93:cc:17:70:bd:77:6d:55:b4:7d:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:6E:AB:24:27:E0:61:89:0D:40:8B:38:E0:EE:0A:AF:53:45:37
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:2a:ec:ec:7b:10:f4:bb:63:3b:d0:af:ba:4f:25:c8:20:
b6:d1:5b:03:52:14:57:5f:5b:a6:a0:22:1d:75:0c:ca:86:9f:
f4:c3:13:c6:26:6c:3d:3c:4c:41:5f:1b:c4:b4:ae:91:6b:91:
9d:ae:b4:1b:e1:7d:44:9f:0b:f1:e9:a7:fa:d2:a9:0d:6e:b4:
74:63:29:75:db:91:a2:6f:65:90:41:88:2e:b1:ac:cf:b9:d7:
f7:19:f7:c9:e9:28:62:95:a9:c3:51:76:7b:01:f6:71:4a:40:
73:a4:f8:63:3a:38:b6:f6:ae:3f:af:83:fc:e4:e3:b1:77:b9:
2f:37:9b:30:d3:cc:96:95:5f:00:99:6a:be:2d:6c:3c:1a:ca:
f2:fc:e7:3c:cf:54:14:4a:07:2f:50:fd:a6:24:26:11:83:d7:
0a:52:67:01:c5:36:a3:8d:0b:b3:82:69:8f:9d:cb:0c:9e:20:
79:81:37:c8:62:c8:9a:4b:8d:5d:84:52:a3:f5:99:8d:cc:7f:
38:14:2b:4c:fd:ed:51:96:04:6a:21:a4:66:3d:41:ce:43:9e:
1c:f9:c0:fc:1a:80:ee:a3:90:04:b5:1a:7e:4f:ae:31:45:17:
1e:99:8e:65:b5:ee:26:e0:79:9e:44:09:b8:14:94:1e:00:67:
32:59:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:37 2025 by rpki-client