Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: aeFRWF01A9tQ3vB1Vs6evWNuYdD6S23yuTEqB4SNGtc=
Subject key identifier: F2:66:D2:A9:21:47:F8:06:44:AF:50:43:E1:DD:34:22:F8:52:FC:57
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01984B541E36E31A1C8EC24477F7E9A8BE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 1101
Signing time: Sun 27 Jul 2025 10:01:00 +0000
Manifest this update: Sun 27 Jul 2025 10:01:00 +0000
Manifest next update: Mon 28 Jul 2025 10:01:00 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: VQ+bo0fgq544DE0dzXPWuPG7QpYx/pFkj491Nn9fF7M=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:1e:36:e3:1a:1c:8e:c2:44:77:f7:e9:a8:be:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jul 27 10:01:00 2025 GMT
Not After : Jul 28 10:01:00 2025 GMT
Subject: CN=f266d2a92147f80644af5043e1dd3422f852fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:57:0d:5d:28:92:a4:67:08:29:83:dc:96:
99:68:55:f4:f5:10:e5:68:da:66:84:d9:c7:57:70:
7e:6a:00:65:19:51:80:72:9b:7e:95:2e:2a:bf:50:
91:44:ae:a8:54:91:29:32:07:f1:dd:7c:c5:07:a7:
db:9a:b6:f1:87:e5:42:98:f4:4f:2c:89:7b:0b:6a:
19:c7:f5:aa:1e:ad:fc:8f:c7:06:d2:12:b2:f6:d7:
1a:86:0a:e4:28:9d:86:f3:c8:4d:74:3d:93:03:10:
3d:04:83:42:7e:65:37:37:98:29:5f:ba:f8:d2:25:
f6:5e:da:5d:30:0f:59:95:56:9b:b8:4c:c1:dd:cb:
af:a1:89:f1:18:b5:60:8c:a8:c2:7b:0a:2c:ec:91:
5a:eb:d2:9f:47:39:26:e3:cc:cc:f5:8a:d2:a3:23:
9a:c6:aa:1b:2a:bc:ff:6d:3b:c2:44:06:3e:6c:34:
41:33:9e:a0:87:13:5e:0c:7b:37:65:12:79:80:c0:
ae:70:33:b9:3a:b5:67:88:dd:70:00:af:e0:36:6a:
f2:c2:0a:f6:1a:d9:6c:ab:ed:c2:81:0f:16:2d:dd:
ee:a4:ee:10:23:d2:80:ca:82:4a:56:20:58:5c:f5:
0a:27:21:cf:c9:38:03:b3:da:43:93:3d:96:ef:04:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:66:D2:A9:21:47:F8:06:44:AF:50:43:E1:DD:34:22:F8:52:FC:57
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:ec:50:f6:be:1e:fd:33:cd:15:db:e7:0b:08:24:4c:62:
81:3e:c2:27:03:7b:4c:82:7b:d8:39:7b:40:66:84:ee:e5:90:
8b:01:7c:72:78:d8:fb:e0:b3:23:69:27:b0:8b:44:00:89:6b:
ae:d2:b1:ae:76:2b:7a:06:e6:31:79:74:66:cf:b0:48:84:3a:
e5:95:36:0a:01:b5:40:c1:3e:a5:c4:04:c1:5f:ef:90:e7:38:
46:69:91:27:51:52:fe:b2:d2:9b:7c:54:32:5d:15:24:11:83:
e4:18:17:ff:41:0a:63:3f:d5:48:36:15:07:48:6d:4d:0a:9c:
20:57:f1:0a:40:77:57:67:9d:89:aa:fc:30:24:cb:4c:ed:02:
33:5c:92:11:b1:f9:47:89:7b:a0:5f:06:7f:ca:68:a2:75:54:
6c:52:e2:60:3b:7f:9f:3b:46:67:a5:2d:72:12:a3:19:54:b9:
a5:1a:dd:35:51:a6:f4:4e:c4:08:f3:74:35:2e:a7:5e:0b:35:
b1:25:d4:c2:39:4c:87:58:5a:9b:10:05:c0:e1:b0:8e:04:ed:
8d:a2:6e:24:ea:3e:a6:0c:ef:ff:28:67:75:ab:d9:2a:43:f2:
3e:d4:4a:34:14:b3:a1:df:24:8d:b8:fe:8f:c7:b2:8f:00:b7:
51:4d:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:41:49 2025 by rpki-client