Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
File: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft (raw, json)
Hash identifier: /7Co7d0CW0vEOIO7i83ITPK8ZZsQLwl+nKT93jr0RgM=
Subject key identifier: 5C:45:0C:44:2C:E9:8A:04:0F:69:A3:79:16:49:C4:C3:92:DB:60:3E
Authority key identifier: 9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
Certificate issuer: /CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Certificate serial: 019A71B7A4305222C3BEEBC55FE8043FB362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
Manifest number: 0D32
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 2SOKJdtN9bMMMVnN7XnVjTb3ui0.roa (hash: 72GA0BgMQTTnlKlYqdGi0oxjId4FdqmjlR9jbXjscag=)
2: mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl (hash: XgD6I03Sm3U0SI7+tX08zpL9mbFZ8+ApI9mfR3VOcMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a4:30:52:22:c3:be:eb:c5:5f:e8:04:3f:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad6bf12ad5a29327bc6f7b66026f054686cd959
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=5c450c442ce98a040f69a3791649c4c392db603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ae:e3:46:87:2b:ba:73:ac:21:c5:e4:ed:9a:
72:cd:7e:ee:f9:59:e5:35:a7:74:81:99:46:27:8f:
d2:20:57:81:ac:7c:36:88:07:5b:cb:27:2a:a3:8f:
d9:5c:05:01:c0:e2:97:9c:c5:39:af:c1:bc:b3:69:
ad:a5:e8:36:21:c6:03:34:9b:88:db:be:a7:9b:69:
6a:a7:d7:0b:cd:cb:e5:77:89:f8:72:02:a6:02:36:
68:a5:cf:48:20:26:bd:64:60:09:09:20:99:fe:da:
b4:a5:4f:a7:28:40:f5:7f:34:03:58:42:e6:19:22:
17:aa:e5:64:46:33:76:57:ec:49:4d:ed:e4:a3:f1:
19:bd:60:55:6f:44:13:17:d6:0f:6e:66:fb:d9:fd:
e8:eb:cc:11:0b:ac:60:37:33:37:54:7a:9b:3c:78:
71:5f:42:ac:27:5f:60:c0:3d:17:5a:40:93:42:0e:
e8:6b:71:b1:7a:8b:86:ab:0d:48:2f:3a:0d:37:e5:
94:c0:b4:52:80:33:16:66:36:d7:d7:93:6a:58:57:
02:d4:c6:a9:fe:82:10:66:9d:2b:f6:7b:61:88:7e:
8f:a4:e5:0d:13:a0:74:80:99:a9:af:f6:f7:d1:66:
89:61:ec:f9:69:1b:b6:d7:90:33:e2:64:e9:9a:96:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:45:0C:44:2C:E9:8A:04:0F:69:A3:79:16:49:C4:C3:92:DB:60:3E
X509v3 Authority Key Identifier:
keyid:9A:D6:BF:12:AD:5A:29:32:7B:C6:F7:B6:60:26:F0:54:68:6C:D9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0ea88-7592-4e84-9a9a-4335670f6b7e/1/mta_Eq1aKTJ7xve2YCbwVGhs2Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b0:db:60:01:4b:48:6a:78:d6:94:8b:63:a8:d5:11:4d:90:
c4:3b:86:d1:9a:0a:ba:4b:48:9b:8e:5d:02:7c:d7:a4:41:30:
f1:29:aa:9b:81:fc:05:9a:0e:90:4b:b9:ed:06:c4:c4:86:c2:
a6:5b:9c:e3:4d:72:f8:d8:d8:bb:f1:0b:d3:23:36:3c:d5:33:
54:8e:95:f5:a3:e2:75:ae:c7:48:7b:1d:bd:31:97:44:54:43:
e2:69:da:ad:dc:ee:5a:c5:69:f4:ce:b5:b9:4d:00:df:3d:3c:
37:d1:95:93:a6:88:bc:53:7b:6f:f5:8c:75:f2:02:9e:a2:7f:
9d:fe:70:df:06:73:02:af:57:6f:63:76:fc:07:57:22:0c:69:
89:6b:7c:54:3d:53:15:c6:b1:cf:4b:51:ea:de:b7:68:fe:fe:
6d:f0:ce:10:1e:bb:38:28:66:be:6c:41:ce:d0:a2:35:5c:46:
ad:e2:a5:5c:59:b2:8a:c5:cd:d3:79:e1:72:b9:4c:7b:74:da:
ca:bf:06:42:99:ee:cb:e3:1a:c4:70:85:9e:bb:52:4b:e0:bd:
c3:eb:96:25:7c:69:19:fa:4a:01:7e:30:98:c9:20:fe:bd:a2:
6b:4b:f3:7e:cc:12:3f:7d:bd:d1:e5:cd:6e:d9:c4:e4:cb:69:
29:40:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:14 2025 by rpki-client