Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: sixUjNeJBOhYZr4RvDKiYSG20W+LZXUlrJbyvmUxHcM=
Subject key identifier: C2:A1:EC:36:5F:C6:C5:9E:B7:D6:A8:B1:44:75:4B:16:78:B4:AF:4D
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 01964FDAF8726983638BFCEBFB847E2FDFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 21:01:12 +0000
Manifest this update: Sat 19 Apr 2025 21:01:12 +0000
Manifest next update: Sun 20 Apr 2025 21:01:12 +0000
Files and hashes: 1: 8XlQvIDhpPQ41b7UH7Z2sRM6eGI.roa (hash: yZNJig4JgY1DsDIZ1QJlrtuiOKYOnriud1FD+SZ6qrQ=)
2: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: een+QrEdZDaxfjyHmHGMbQtJMI9zBkFKBLoi81Sotho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:f8:72:69:83:63:8b:fc:eb:fb:84:7e:2f:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Apr 19 21:01:12 2025 GMT
Not After : Apr 20 21:01:12 2025 GMT
Subject: CN=c2a1ec365fc6c59eb7d6a8b144754b1678b4af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:57:4f:4e:1d:8c:12:a7:96:a0:0a:70:5d:
61:9b:f2:ff:4c:f9:59:88:68:ba:c9:5a:47:16:01:
ae:dd:5c:26:f9:20:ae:96:13:80:cb:5f:60:b7:b8:
fb:53:32:36:c2:72:04:5e:23:e3:f3:17:2b:f9:e7:
1c:d2:e5:f3:77:90:75:ae:1b:61:c9:41:0f:61:61:
2c:4d:5e:da:bc:d5:a2:f2:7f:63:43:35:63:f5:82:
e6:6d:87:3b:93:af:43:37:f5:b7:7b:0e:fa:c9:ac:
da:2e:15:b7:da:4c:e5:c8:6e:87:b0:8f:8e:c1:55:
50:f7:a1:53:82:84:c1:8d:7c:07:4e:9d:4f:b5:3e:
e5:96:60:61:5d:57:c4:d6:e1:12:71:c3:7f:09:cc:
a8:a3:db:3b:81:49:3c:4f:d9:8c:d1:7f:6c:c7:c2:
81:9b:c7:41:c9:d9:6d:80:13:44:55:79:08:95:85:
6d:96:d7:1a:8c:bc:1c:44:0f:60:07:c9:d8:49:30:
05:6d:d7:48:a9:07:b4:ec:27:a5:3a:6b:60:b8:81:
f8:61:51:db:94:20:f4:b4:49:01:d4:88:ef:53:94:
75:1d:ff:f6:0a:e4:57:c6:54:75:ea:20:11:09:79:
ff:5e:83:9f:71:48:9f:62:b8:71:98:89:7a:f3:a5:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:EC:36:5F:C6:C5:9E:B7:D6:A8:B1:44:75:4B:16:78:B4:AF:4D
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:92:a9:42:a7:2d:d8:3c:5c:9a:71:78:d5:cb:ff:c5:8c:
51:ac:03:85:43:e9:61:cd:40:45:a8:04:55:36:b3:9f:6d:9b:
53:61:f5:af:02:c0:72:11:f4:23:f5:29:8c:82:ae:55:98:d2:
ad:57:bd:d9:d8:6f:78:16:1b:31:48:2f:08:c9:69:71:21:2e:
3d:15:84:c4:a8:20:38:db:0f:f3:24:14:68:61:42:d8:b6:c0:
f7:53:d1:00:8b:14:df:fb:5b:f5:05:0e:ea:9d:d2:2c:63:b4:
ce:54:82:05:9b:d4:6b:a3:ac:e5:69:64:bb:70:52:41:d8:1d:
31:0a:28:42:0e:ff:c5:9a:00:5d:dd:d0:b2:44:7c:f5:11:f1:
6c:21:2d:be:40:21:68:7c:33:34:53:59:4a:53:47:08:07:ca:
6f:10:f5:18:f3:ef:0f:f0:31:7a:66:c7:46:6f:88:da:33:c4:
8e:cd:4c:3b:f8:be:8a:8f:ba:fb:ab:3b:4a:7a:1e:fa:35:0c:
7e:ef:b5:75:8e:f3:46:11:f8:64:38:e3:bc:32:b2:69:22:3f:
eb:bd:08:ee:cb:14:01:b5:42:92:f9:c6:e1:2d:bb:2b:23:73:
3a:3a:41:ae:67:6f:98:e7:36:a3:a6:c4:2f:68:6b:f2:41:11:
cf:00:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:29:20 2025 by rpki-client