![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: DKF+W2ikANO1owsj3rrLbo3bd2s5t6GwAhhE677PQJo=
Subject key identifier: D1:3D:27:FF:36:F1:40:04:D3:E3:C8:84:BF:D6:DB:58:C3:83:4C:85
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019510903F09CBFE7081801467245AB79F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0A69
Signing time: Sun 16 Feb 2025 21:00:43 +0000
Manifest this update: Sun 16 Feb 2025 21:00:43 +0000
Manifest next update: Mon 17 Feb 2025 21:00:43 +0000
Files and hashes: 1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: T0fMtPzMOm7Bz6YlCt2J5Gs9GLnEadLa9Xo4aNVl0Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:3f:09:cb:fe:70:81:80:14:67:24:5a:b7:9f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Feb 16 21:00:43 2025 GMT
Not After : Feb 17 21:00:43 2025 GMT
Subject: CN=d13d27ff36f14004d3e3c884bfd6db58c3834c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:73:a8:77:21:b3:2e:9d:ca:1b:9a:4e:9d:
0d:80:88:42:19:7f:a2:52:06:a1:39:21:7f:80:be:
0e:a9:b3:41:6e:c9:58:5c:f5:24:8b:34:5d:8a:c9:
ba:c9:45:49:71:ef:9f:df:c5:f7:a3:c3:05:f0:9a:
9f:14:3b:63:76:52:63:17:99:be:9c:c2:98:98:6d:
3b:dc:a4:a6:4b:3e:3f:08:1b:70:fb:46:fa:71:8c:
7f:05:9b:69:77:05:7c:54:bc:38:1b:20:c1:41:f7:
03:35:a2:d9:f0:aa:03:7e:18:38:52:45:5d:d0:cf:
47:86:10:c7:ff:f5:8c:ae:35:27:b9:c4:35:53:fe:
dc:5d:60:45:b4:43:57:74:d9:98:32:04:39:13:0f:
4c:0f:a3:40:81:2d:70:42:ae:e1:94:b8:fd:8b:fa:
90:c1:42:7c:6f:d5:21:f0:04:cf:66:35:9a:93:a9:
3e:15:64:ae:6d:3d:ed:a5:5e:84:68:9d:a2:b5:d1:
57:2e:26:bb:43:ad:d9:f3:13:44:ab:38:31:b0:de:
8d:70:72:d1:0b:0e:6e:27:1e:d0:52:b1:1f:9f:ec:
1c:4f:a1:95:2e:2c:48:8b:a4:4a:53:33:dc:83:21:
02:e5:4b:f9:db:d6:27:40:7a:68:72:4c:e1:bf:02:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3D:27:FF:36:F1:40:04:D3:E3:C8:84:BF:D6:DB:58:C3:83:4C:85
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:47:9e:ba:df:77:4e:35:df:02:e2:f4:12:7a:09:8b:6a:5e:
5e:95:a0:ba:2a:bf:e7:65:f3:40:50:7d:98:8d:2a:85:0f:d2:
e9:c4:f1:e1:a4:41:00:1d:84:f2:0d:d1:31:36:3b:4a:f7:6e:
7d:f9:3b:5e:07:54:cf:4c:b1:e8:b9:7b:60:2f:56:7b:a2:0e:
d3:c1:b2:19:f7:c5:92:2a:07:9c:8d:44:bf:f9:13:67:eb:1b:
26:09:95:88:72:26:cd:71:b2:0f:87:7e:cd:a3:fb:93:01:9d:
f3:62:0b:97:9b:dd:33:54:60:6e:5e:6c:90:96:30:55:0a:24:
6e:df:b4:9c:bd:d8:37:47:38:36:0a:7a:0d:c0:87:3c:ac:f6:
b0:47:53:31:76:f7:b1:fe:ac:56:13:c9:1c:98:e5:57:5c:04:
56:d5:8c:37:50:ad:c7:a4:73:35:93:f1:7b:f6:90:16:95:dc:
80:11:ad:7f:5f:77:69:0b:f3:26:48:eb:7b:63:9c:23:27:44:
68:27:e8:60:46:28:0b:07:06:da:82:6a:33:4d:7d:45:e5:92:
53:9c:af:06:cc:f3:1a:b5:55:fa:d7:ce:5e:46:87:05:23:06:
08:79:61:64:17:74:31:5d:85:a2:25:1d:15:2d:93:eb:04:27:
f8:d1:72:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkD8Jy/5wgYAUZyRat59NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZDZiZjEyYWQ1YTI5MzI3YmM2ZjdiNjYwMjZmMDU0Njg2
Y2Q5NTkwHhcNMjUwMjE2MjEwMDQzWhcNMjUwMjE3MjEwMDQzWjAzMTEwLwYDVQQD
EyhkMTNkMjdmZjM2ZjE0MDA0ZDNlM2M4ODRiZmQ2ZGI1OGMzODM0Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMpzqHchsy6dyhuaTp0NgIhCGX+i
UgahOSF/gL4OqbNBbslYXPUkizRdism6yUVJce+f38X3o8MF8JqfFDtjdlJjF5m+
nMKYmG073KSmSz4/CBtw+0b6cYx/BZtpdwV8VLw4GyDBQfcDNaLZ8KoDfhg4UkVd
0M9HhhDH//WMrjUnucQ1U/7cXWBFtENXdNmYMgQ5Ew9MD6NAgS1wQq7hlLj9i/qQ
wUJ8b9Uh8ATPZjWak6k+FWSubT3tpV6EaJ2itdFXLia7Q63Z8xNEqzgxsN6NcHLR
Cw5uJx7QUrEfn+wcT6GVLixIi6RKUzPcgyEC5Uv529YnQHpockzhvwLsCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE9J/828UAE0+PIhL/W21jDg0yFMB8GA1UdIwQY
MBaAFJrWvxKtWikye8b3tmAm8FRobNlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGVhODgtNzU5Mi00ZTg0LTlhOWEt
NDMzNTY3MGY2YjdlLzEvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jMGVhODgtNzU5Mi00ZTg0LTlhOWEtNDMzNTY3MGY2Yjdl
LzEvbXRhX0VxMWFLVEo3eHZlMllDYndWR2hzMlZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEeeut93
TjXfAuL0EnoJi2peXpWguiq/52XzQFB9mI0qhQ/S6cTx4aRBAB2E8g3RMTY7Svdu
ffk7XgdUz0yx6Ll7YC9We6IO08GyGffFkioHnI1Ev/kTZ+sbJgmViHImzXGyD4d+
zaP7kwGd82ILl5vdM1Rgbl5skJYwVQokbt+0nL3YN0c4Ngp6DcCHPKz2sEdTMXb3
sf6sVhPJHJjlV1wEVtWMN1Ctx6RzNZPxe/aQFpXcgBGtf193aQvzJkjre2OcIydE
aCfoYEYoCwcG2oJqM019ReWSU5yvBszzGrVV+tfOXkaHBSMGCHlhZBd0MV2FoiUd
FS2T6wQn+NFyQg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:45 2025 by rpki-client