Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: 8fTDblU08YjhRT5+xvM2jjPSltAmkkiUsEs3RRwMcI0=
Subject key identifier: 48:48:C6:44:28:82:2C:A5:A4:8D:55:BE:C5:AE:DD:4B:48:C1:6F:4D
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019655009D982099BFAE1CB0329D07D33A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0B11
Signing time: Sun 20 Apr 2025 21:00:25 +0000
Manifest this update: Sun 20 Apr 2025 21:00:25 +0000
Manifest next update: Mon 21 Apr 2025 21:00:25 +0000
Files and hashes: 1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: nTI00zRgvfRja8CFhO2AWT9ZxYpxtabTPl7JbMsQ0q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:9d:98:20:99:bf:ae:1c:b0:32:9d:07:d3:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Apr 20 21:00:25 2025 GMT
Not After : Apr 21 21:00:25 2025 GMT
Subject: CN=4848c64428822ca5a48d55bec5aedd4b48c16f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:07:94:bc:6b:ae:04:1e:34:b8:b6:b4:d6:
f8:24:e7:24:90:a0:25:5b:f7:56:fc:6f:c9:5a:d9:
e2:6c:2a:a9:1c:03:83:d1:d2:19:f2:d0:97:5d:64:
79:79:c0:aa:38:48:9f:f3:22:05:a8:db:84:96:67:
ec:4c:60:9c:fc:35:dc:76:7a:26:44:b8:65:a4:36:
f4:f8:5c:7a:7d:9e:e4:03:ab:6e:c8:9f:42:d5:ea:
5c:dd:a7:d7:f9:65:0e:1c:18:18:41:e5:fe:16:35:
bd:c3:2c:21:05:52:4e:f5:c1:94:35:d4:20:44:88:
f3:35:7f:e1:8f:fa:12:42:62:ea:6e:a1:c7:32:09:
a7:30:97:d2:a1:fa:33:bd:b9:5e:1d:e9:d5:e1:f5:
75:f8:23:60:32:5a:3a:c6:9e:a3:37:73:df:0c:da:
4b:89:35:3a:f9:67:61:ff:02:df:84:5f:d6:60:a7:
07:b9:f2:64:4f:b5:d5:2d:6f:bf:67:40:fb:a5:7c:
44:b7:21:9c:1a:39:6b:2b:55:19:7d:fd:48:46:db:
9b:3c:a5:8e:67:1a:ef:ca:17:b8:94:52:45:19:8d:
23:57:54:6d:0d:b2:be:29:2e:da:c0:64:2f:1e:16:
46:74:a8:bf:9d:a4:0d:78:72:54:00:03:92:4f:a7:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:C6:44:28:82:2C:A5:A4:8D:55:BE:C5:AE:DD:4B:48:C1:6F:4D
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ea:c4:ed:d9:1f:43:b5:92:17:6f:7f:38:ff:d5:87:15:b3:
7b:ce:76:41:72:fa:fb:2c:2d:c0:4b:fd:20:42:51:f9:d0:11:
ad:ac:c8:3a:00:a4:fe:f2:73:e3:05:33:18:08:6b:65:cb:4b:
72:c3:21:06:94:0a:27:8a:a5:f4:cb:28:e2:6a:4b:44:11:c1:
a1:58:dd:c8:59:12:b7:ee:41:ac:b4:7e:51:1a:a4:b0:54:b8:
74:a3:f0:9a:0c:b7:41:87:bd:da:00:16:3b:70:d4:be:d0:db:
50:16:7c:a2:3f:c6:07:11:2a:44:4f:58:9e:20:ec:d1:36:c0:
89:41:f7:9c:9f:fe:8d:b9:3c:00:a1:0d:31:c2:1c:b2:5a:f5:
18:90:38:18:41:c5:91:2c:f9:7b:8e:47:ee:5f:6d:71:5c:6a:
e0:3f:a0:78:3d:ff:c4:aa:5a:43:4e:be:f7:b0:de:97:5f:26:
f6:0d:20:84:72:f5:d5:8a:16:55:3c:72:e0:9b:40:f1:1f:f3:
f5:e3:4c:32:9b:37:51:2e:68:f3:8c:9e:f9:04:48:5f:7b:ce:
45:01:3d:e5:e4:d0:59:4f:05:b7:69:be:f3:7d:f4:01:12:09:
7b:0b:e1:07:30:1f:c8:a8:ec:67:c0:24:f2:ce:fe:35:13:0c:
46:22:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:35 2025 by rpki-client