Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: tF0WQrJmhRYm5kVQHykJfXKZTemVFK46M4pBYnJaPz0=
Subject key identifier: 9B:7A:9A:2D:D2:63:E0:6A:B5:0E:6F:26:33:09:C5:EC:FD:1F:5B:AC
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 01976929E8945E0C33C664F5E4264D0C3EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0BA0
Signing time: Fri 13 Jun 2025 12:00:43 +0000
Manifest this update: Fri 13 Jun 2025 12:00:43 +0000
Manifest next update: Sat 14 Jun 2025 12:00:43 +0000
Files and hashes: 1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: /Ls0W5UAYVcgvrX1gEpmiR8WlgFN6x0jHbq+bwNfWMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e8:94:5e:0c:33:c6:64:f5:e4:26:4d:0c:3e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Jun 13 12:00:43 2025 GMT
Not After : Jun 14 12:00:43 2025 GMT
Subject: CN=9b7a9a2dd263e06ab50e6f263309c5ecfd1f5bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:94:2c:52:fb:cb:ee:8f:8a:ef:1d:4e:2b:
a4:10:ed:7a:77:e2:a5:00:9e:2c:26:48:5b:f3:63:
82:74:19:d9:e5:73:36:ed:d6:b1:89:15:60:9e:9d:
0d:d3:a6:78:40:f8:fc:30:94:9c:81:85:56:74:66:
0b:00:93:1c:55:af:db:2d:2a:e5:7b:3a:91:a3:43:
85:3b:73:b3:88:91:44:05:0d:f0:86:45:fe:69:18:
b5:07:31:1e:1e:b3:40:9e:aa:01:3e:6b:c9:73:7f:
06:b9:51:b4:ee:37:09:c5:50:7f:20:16:15:ef:d5:
38:e4:76:d3:97:a9:70:07:32:5d:9b:c1:7b:57:38:
81:b3:99:d9:31:d6:c1:03:b5:56:17:9b:46:bc:60:
25:ce:da:41:25:77:b7:dc:1d:b4:a3:d0:0a:d0:4f:
ea:a5:b3:ab:9c:ab:8e:9d:42:70:22:8b:3f:ba:45:
c9:2a:ea:36:24:13:ab:e0:fd:c6:5e:30:3d:17:c8:
c8:33:24:cf:51:fe:9c:7f:bd:b1:bd:2a:63:71:48:
3b:f0:80:7b:f9:13:f9:93:f8:a5:83:89:2f:98:0d:
41:1e:b1:0f:99:34:df:c8:40:15:23:64:88:e1:eb:
3d:b6:31:b5:6f:1e:c2:98:91:65:d9:f5:00:2d:fb:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7A:9A:2D:D2:63:E0:6A:B5:0E:6F:26:33:09:C5:EC:FD:1F:5B:AC
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6c:ce:1c:09:04:61:ee:77:21:b5:02:54:3d:97:1b:fb:f3:
78:6a:26:4f:5d:a0:70:d0:32:7f:7c:07:72:b9:65:a4:75:fa:
1c:37:0b:7a:17:2e:4b:ed:86:dd:25:0c:2c:59:16:a2:bc:a1:
95:f4:53:06:38:a6:1b:55:42:98:f8:e0:fc:1e:db:a0:91:59:
35:4a:69:aa:2d:e3:6d:d3:16:46:4d:2c:a0:10:0a:89:fb:b8:
93:3c:d5:19:4a:ff:39:44:9e:9f:f6:6e:21:b0:be:59:ae:17:
25:08:c5:c9:ab:23:76:ec:8d:ba:2b:e5:94:bb:5d:1b:39:a0:
de:90:d1:ce:8c:23:d5:11:a9:93:a4:08:ac:55:32:27:82:9a:
97:07:13:db:89:3a:08:9c:01:90:42:3a:f5:85:81:73:30:39:
bc:71:30:c5:6f:35:6c:d4:1b:09:b9:d6:6a:6a:ba:72:39:57:
ac:02:7b:ec:3e:d2:da:8a:23:ff:5e:8c:65:33:9d:ff:7a:d7:
e5:16:6e:87:3f:a6:08:ad:9e:fa:f3:39:72:01:c2:58:75:1d:
8d:9c:fd:45:f3:b6:4c:39:aa:18:c5:53:2f:e6:df:ee:bb:91:
94:3b:b5:2b:8e:bb:9a:32:73:3e:86:30:ec:38:5b:e0:78:04:
52:c7:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:28 2025 by rpki-client