Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: KPIbqUfy4HOUqAR7IZQqtJmX6r07u8mk+iEfFIZRsCs=
Subject key identifier: E6:E5:FA:21:12:4B:13:5B:E5:83:3D:73:A4:F3:29:91:8C:24:7B:5E
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019A225243B932957E9E8731851D472845CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 11F5
Signing time: Sun 26 Oct 2025 21:00:07 +0000
Manifest this update: Sun 26 Oct 2025 21:00:07 +0000
Manifest next update: Mon 27 Oct 2025 21:00:07 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: 17Zi3uV/xOgsKAoabloU+N0MPSOgiSmLs4Lcfmz4r6E=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
6: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
7: lg3As9QftSBug7tpmYrQWLTzXlw.roa (hash: Zav5DG+USj65sND09nTQM5cgapiwyx+unRcWKNxbfPM=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:43:b9:32:95:7e:9e:87:31:85:1d:47:28:45:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Oct 26 21:00:07 2025 GMT
Not After : Oct 27 21:00:07 2025 GMT
Subject: CN=e6e5fa21124b135be5833d73a4f329918c247b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:ef:c4:ea:60:94:f9:5f:72:03:20:db:37:
0e:ab:e7:ae:e1:9c:4e:6f:6e:87:e2:2e:2f:f9:f0:
70:b3:f7:8e:6e:a5:27:ff:20:03:a5:93:41:05:01:
cf:42:ef:a5:ad:f1:b1:03:1c:29:e6:1d:a8:71:db:
f4:18:26:37:49:92:6b:14:32:e7:d2:95:ab:9b:76:
39:b8:ac:c6:11:19:4b:51:07:f3:2f:a9:15:46:5b:
36:72:2f:c3:15:0c:dc:70:c6:cf:a2:1f:1c:01:30:
88:50:10:a5:d2:cf:ca:29:7f:0b:75:7c:25:09:29:
a0:13:db:a9:ec:7f:ad:45:c8:be:ee:70:54:cb:45:
00:f9:12:73:e4:aa:42:9a:fa:fc:ce:0e:d7:7c:18:
83:a6:91:7d:34:84:bf:0b:dd:ce:f9:39:ca:9d:51:
a4:4d:c6:d4:29:53:97:6e:11:01:ea:c9:07:9f:7e:
50:a2:a3:49:73:b1:ee:b2:77:d9:9e:05:a3:03:93:
0b:f6:e0:03:de:4b:e8:7e:60:3f:f1:8d:36:23:8e:
1a:4b:fd:db:79:ab:53:61:6e:6d:9d:04:4b:b1:9b:
d8:82:e1:1a:b2:f5:c0:37:e6:d5:f0:4f:75:15:7d:
39:68:6e:76:5a:df:bc:36:82:15:9e:6b:60:11:6c:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:FA:21:12:4B:13:5B:E5:83:3D:73:A4:F3:29:91:8C:24:7B:5E
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:3a:ad:d3:2a:3c:5c:0c:fd:be:37:7b:0f:f4:97:17:72:
6d:20:c7:83:d0:98:83:78:6e:11:ba:2a:46:c1:39:dc:5f:2f:
85:62:85:b1:f9:88:9b:bb:4a:4e:fb:4e:2c:ee:2b:40:a8:78:
c7:66:4b:93:f5:da:73:34:cd:fc:77:97:af:04:9e:8f:cb:e7:
43:02:cd:ed:e9:c1:60:9c:39:4a:c6:a9:cd:35:a2:66:b7:9d:
f8:e6:2d:95:32:b9:99:a3:e7:3e:65:ad:74:c1:d1:70:ee:c8:
48:b8:05:05:ae:b2:c5:02:53:bf:e1:2b:3d:a4:a5:de:2b:1e:
14:28:7e:9d:49:bf:61:ce:91:43:55:4c:61:9b:e9:fa:8a:9b:
49:26:0c:8a:17:c6:a9:70:69:64:56:b5:d4:40:2d:5a:ad:5e:
c8:ca:62:bb:a5:8d:92:24:4a:28:b5:dd:34:fc:cb:62:fa:4c:
f4:41:18:87:53:e4:2e:d1:e0:63:f6:0a:44:c8:46:4b:e2:e4:
d9:76:bb:29:71:08:9b:4b:b8:af:de:0a:51:91:34:f7:1a:d5:
ee:93:6b:f0:98:73:6a:38:84:92:ed:e2:09:37:c3:ee:ec:49:
aa:47:dc:a3:9c:d9:e4:57:3e:41:56:fe:c2:12:f4:4d:8a:97:
78:ad:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:35 2025 by rpki-client