
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: hfVKd4yrx++MJAC4h95zicAYjCZ17REaEv8555SfwtM=
Subject key identifier: 1B:0C:5B:48:94:7D:95:7B:8C:DC:07:78:5E:7D:A5:BE:17:21:92:3C
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 0199375CFCB2DB061048F75A86CFAE3765A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 1678
Signing time: Thu 11 Sep 2025 06:01:04 +0000
Manifest this update: Thu 11 Sep 2025 06:01:04 +0000
Manifest next update: Fri 12 Sep 2025 06:01:04 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: kuUGrQF06hXWnBgH/v7n3HgYesWf3VAevE+iBHEE6GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:fc:b2:db:06:10:48:f7:5a:86:cf:ae:37:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Sep 11 06:01:04 2025 GMT
Not After : Sep 12 06:01:04 2025 GMT
Subject: CN=1b0c5b48947d957b8cdc07785e7da5be1721923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:a5:7d:60:55:44:ab:73:cd:e4:ac:bb:67:
73:a2:e3:5e:cb:b4:57:03:0f:49:1e:47:9d:fc:43:
e4:ad:18:66:c8:5c:ed:da:ed:56:39:8a:c5:5b:56:
3a:66:29:fa:39:29:1b:5c:e9:2e:6e:32:3d:b2:3e:
ce:5a:8f:42:18:78:f7:55:23:a8:67:c4:b2:3d:64:
c7:fc:05:20:1b:d3:08:e0:7a:55:61:84:0c:28:71:
10:ac:46:4e:ee:b7:29:d3:69:ea:0c:eb:18:72:cf:
e0:22:f7:a5:c6:a3:d6:55:80:83:38:0f:a3:85:1c:
3f:85:95:f5:5b:65:9a:91:95:ab:e0:d0:31:a9:89:
9e:6d:3e:c6:2a:80:12:77:bb:c2:79:28:11:94:78:
5b:2d:fa:27:c3:95:0f:7b:22:12:7a:9f:df:66:08:
ac:ef:dc:1a:c1:28:12:1d:bb:a3:82:e9:4d:ed:16:
4a:5c:03:5b:01:03:92:28:b5:cb:cd:53:37:ff:b6:
92:43:9b:70:32:d9:d2:1d:6a:34:0b:b8:ab:d0:d0:
d9:b8:8e:a1:13:9b:5e:fd:95:63:c9:89:d8:b9:3c:
c3:6e:90:c3:f7:3e:76:78:7d:97:c3:70:88:95:78:
66:ed:8b:a6:04:df:bc:c7:4b:eb:74:8b:8c:5c:76:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:5B:48:94:7D:95:7B:8C:DC:07:78:5E:7D:A5:BE:17:21:92:3C
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:12:de:53:31:58:48:fe:69:82:79:ba:43:74:bd:23:76:
28:5f:cc:3e:2b:7f:44:e5:81:05:2b:a8:a8:35:2b:c0:16:d1:
d8:49:b2:a3:c8:03:d2:11:2d:c3:06:62:fd:59:88:4d:36:2e:
6f:e6:d6:e4:d4:0d:4c:1c:cc:2b:53:f9:f2:69:42:f3:ff:11:
b4:0e:1d:aa:63:d2:d8:00:09:f9:11:24:4d:d6:5e:44:9a:34:
73:45:c0:a5:8c:a8:cc:bd:9e:20:2d:5a:13:d4:95:59:94:44:
e6:0f:96:f1:bb:55:74:6c:f2:be:c7:5a:a4:0b:2a:f6:c8:23:
49:89:08:72:3d:54:cf:af:3a:33:7e:db:28:f0:67:c9:4e:7b:
02:99:26:a5:c4:67:2a:4b:65:d2:28:1d:b7:45:fb:80:a0:ca:
6c:7a:da:16:7a:11:5d:27:71:26:0d:8c:d3:36:85:6b:8d:e6:
79:db:08:87:60:6a:57:70:5a:46:00:7f:91:f4:f9:2f:41:21:
b4:4f:62:9f:5b:f2:d1:10:ec:57:5a:96:69:20:ab:2e:05:db:
a8:99:5a:17:d9:fa:42:c2:6b:4e:df:cb:af:8a:67:02:9a:b2:
aa:e9:a3:45:68:47:bf:21:0b:19:ba:b2:9f:49:b2:9d:a8:c5:
a6:b3:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:51:06 2025 by rpki-client