Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: MM4mG8edrMKTu9BV1Rp6LLVUyK3ueB+nuXL0CnlzuGk=
Subject key identifier: AC:0C:C8:26:E2:AC:59:33:28:ED:EE:D8:06:4E:62:1B:4A:0D:A2:86
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01964F354C025A1CA654C31BC70FDB12789E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 0FFA
Signing time: Sat 19 Apr 2025 18:00:14 +0000
Manifest this update: Sat 19 Apr 2025 18:00:14 +0000
Manifest next update: Sun 20 Apr 2025 18:00:14 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: ZCCYa8eFVQHxpRalgkzr+Uj63gfPt5LKwGokfU9ZHlM=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:4c:02:5a:1c:a6:54:c3:1b:c7:0f:db:12:78:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Apr 19 18:00:14 2025 GMT
Not After : Apr 20 18:00:14 2025 GMT
Subject: CN=ac0cc826e2ac593328edeed8064e621b4a0da286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:13:98:28:f2:8c:78:23:b7:0e:63:28:17:
69:a8:5b:ae:98:d8:18:ee:1a:c7:f5:62:3e:69:1a:
65:13:0c:05:0d:cc:96:db:ff:39:4c:79:5f:99:69:
6b:1d:4c:a6:dd:b9:13:f4:62:84:4f:4d:98:26:02:
a8:c7:46:98:ab:73:8c:56:fb:5d:02:69:44:9f:1c:
fc:d8:9f:08:c3:6d:68:f3:21:47:7e:89:ec:f7:47:
10:3f:5f:30:10:6c:72:b3:05:69:c0:b9:b2:14:4c:
f7:32:78:4d:47:c9:87:21:27:83:ec:34:82:e1:6f:
07:e3:aa:9e:6a:20:fd:d5:7b:30:62:11:64:b4:a0:
a1:df:2d:c1:45:fa:1c:c7:31:57:c6:67:5b:29:e9:
eb:e1:1d:d9:21:fb:5f:04:2e:fa:b8:42:36:4e:47:
34:b0:bb:43:09:74:69:0a:b0:e0:8c:26:07:d0:f0:
27:d2:c2:43:94:a1:f7:79:16:a4:2c:d4:71:0e:be:
cc:46:f4:35:a1:45:48:dd:79:39:43:de:59:3f:83:
b6:bf:39:95:73:b5:90:90:ab:53:26:b4:a0:7e:01:
fa:61:70:55:a8:b8:18:df:33:0b:bc:0e:6f:61:b0:
cc:f8:02:18:01:76:83:36:cd:f5:2d:8c:d8:a5:ec:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0C:C8:26:E2:AC:59:33:28:ED:EE:D8:06:4E:62:1B:4A:0D:A2:86
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7f:88:b1:16:e7:1b:6f:7d:dd:90:e6:3d:cc:18:f5:a3:e8:
6e:26:a8:e8:c0:44:dd:b5:68:bb:bc:bb:77:89:75:b8:d8:06:
0a:17:e4:7b:37:38:d6:26:94:4e:5b:36:a0:10:45:29:72:cf:
46:48:40:18:ef:b4:17:8f:2d:3a:6a:07:35:c3:14:a0:f7:b2:
6b:1f:3b:43:9a:b1:eb:2a:fe:07:53:1e:0b:76:f5:8d:6e:d5:
dc:02:d4:3e:92:c6:74:44:6b:6f:a9:b4:28:5c:a5:3d:e6:32:
5f:16:5f:03:09:bb:1a:dd:36:6b:30:60:30:ef:d5:c1:03:9f:
e6:ef:ac:5d:46:76:24:d2:e5:f0:6d:a7:df:87:c1:76:ba:91:
b4:d8:f5:94:7a:67:57:60:68:e6:15:9e:0f:02:48:8f:94:c3:
88:2c:b1:d9:84:a2:52:38:6c:0f:7d:e1:ff:99:f9:74:1a:ff:
78:7b:c3:76:d1:4d:4b:41:c2:f3:68:d2:99:94:d7:fc:10:fa:
e7:42:c9:68:ff:1b:0f:8c:31:15:81:a3:08:76:9c:9b:23:c7:
cb:51:a2:ed:b6:7e:a4:20:d6:79:53:32:7e:79:52:0c:c5:fe:
ed:5e:3a:ef:bb:29:10:a9:c1:0b:db:fa:e8:d4:ac:23:39:96:
ef:d8:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:27:31 2025 by rpki-client