
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: dRhPIBoECz0kFw53mxzUtkaGJLI88TpLdlkD2xV2154=
Subject key identifier: E8:E0:33:08:CA:EF:5C:FE:CA:41:FF:44:67:C4:89:5A:1F:42:D0:27
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 0199FE46F959C7C70CDB41C3AEFC39FA3603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 21:01:28 +0000
Manifest this update: Sun 19 Oct 2025 21:01:28 +0000
Manifest next update: Mon 20 Oct 2025 21:01:28 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: bdWp+OaDObCoV82H5Sbbg++MlqgdA4OE1GFaLiVhaQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f9:59:c7:c7:0c:db:41:c3:ae:fc:39:fa:36:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Oct 19 21:01:28 2025 GMT
Not After : Oct 20 21:01:28 2025 GMT
Subject: CN=e8e03308caef5cfeca41ff4467c4895a1f42d027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:60:da:f9:bb:59:7c:ce:92:a9:85:e2:24:
54:6a:d7:02:cb:7e:89:04:15:09:05:d2:de:c0:99:
4a:d3:32:f0:99:27:1d:5e:d0:cf:43:94:6b:9f:fb:
f8:3f:e2:97:1a:e9:42:e1:5b:00:2a:41:62:c6:1b:
2f:41:47:6f:1e:5f:78:14:25:c5:e8:ce:49:98:87:
1a:48:ae:6e:eb:ca:0e:ff:0b:88:f8:98:b1:4c:8e:
6f:96:0f:aa:a1:a4:d5:9a:4a:7e:f9:c3:7d:38:28:
d5:56:5f:7c:32:0f:8a:a8:e8:ee:89:9a:59:57:a8:
83:08:e7:79:88:24:70:70:a4:ea:35:d5:f6:41:3b:
0c:84:90:79:b5:1c:64:b8:52:26:2c:48:f7:6b:07:
9b:a7:ac:0d:40:0f:9d:d2:d4:b3:48:9f:b2:58:07:
b2:cc:94:c9:11:e5:b9:e7:66:8b:17:8a:aa:14:25:
5a:9e:6c:56:bf:84:30:b6:8a:5a:77:8d:8c:e1:2c:
47:93:ee:d7:68:3c:81:11:ce:b9:93:0b:64:b7:42:
39:5c:9c:a6:66:1f:83:53:04:a1:30:8e:dc:1b:33:
02:8b:5b:d2:07:7b:ad:a1:46:5c:93:bf:94:ec:89:
24:fa:77:d3:d1:39:40:41:07:32:28:9f:1f:61:d5:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:33:08:CA:EF:5C:FE:CA:41:FF:44:67:C4:89:5A:1F:42:D0:27
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b9:22:62:81:26:f1:88:55:44:37:f8:2d:de:ac:bb:0e:24:
fa:b5:72:fc:77:4c:06:c1:22:82:2a:90:4b:96:a1:53:09:07:
6f:55:53:b7:8d:4d:b9:57:b2:0b:f8:c8:76:e1:62:27:1c:81:
c6:32:09:cd:b1:22:4b:d1:3e:58:5b:9e:bc:3d:4f:f2:d9:1e:
1b:22:bf:32:30:21:23:40:99:94:b7:d5:6a:95:f1:e8:d4:2e:
12:d3:63:1d:d9:0c:27:e9:a8:fe:72:48:a2:c6:b2:1b:60:0e:
e6:b6:98:41:50:4a:b2:72:18:9c:ab:92:5e:63:60:6e:07:d3:
cb:2a:61:84:93:e5:2f:c0:84:6f:5b:09:fa:09:d1:74:79:a5:
89:b7:54:b0:98:e4:d9:7b:d0:e2:95:ef:56:8e:36:9e:2d:27:
04:b4:d8:2e:66:f9:21:cc:ec:82:d0:ab:1b:1e:8f:fd:99:1e:
bb:22:8c:9b:e2:47:f3:1d:34:ea:4b:80:58:be:26:de:99:1a:
1b:be:1b:46:14:f2:da:31:b3:c2:42:d2:eb:35:21:af:15:99:
cb:1c:0a:14:74:c9:83:1a:7e:61:4f:6c:57:5e:ec:68:41:52:
ed:ce:94:c4:6a:5b:92:56:81:5e:da:df:83:bc:36:f6:26:30:
fb:d4:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:54 2025 by rpki-client