Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: YoBQ7ia7BmBRY/TJwlgdu16ltEiZA4B6Nz8HDhgZjYY=
Subject key identifier: DF:A6:9A:91:E3:75:75:1E:8E:DD:C8:F9:61:18:50:0E:B0:30:4A:30
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019938A6CE826001B3AE881C5F99A0B6A7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 117C
Signing time: Thu 11 Sep 2025 12:01:19 +0000
Manifest this update: Thu 11 Sep 2025 12:01:19 +0000
Manifest next update: Fri 12 Sep 2025 12:01:19 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: z2Orxl1qy1brs7Ih8CC1b5NeD4otSwsqXSWclJVaSQM=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
6: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
7: lg3As9QftSBug7tpmYrQWLTzXlw.roa (hash: Zav5DG+USj65sND09nTQM5cgapiwyx+unRcWKNxbfPM=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:a6:ce:82:60:01:b3:ae:88:1c:5f:99:a0:b6:a7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Sep 11 12:01:19 2025 GMT
Not After : Sep 12 12:01:19 2025 GMT
Subject: CN=dfa69a91e375751e8eddc8f96118500eb0304a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:df:51:ac:3f:26:81:45:c6:fb:dc:59:eb:
42:67:23:b9:0c:34:79:e1:ee:b8:06:f9:39:61:54:
c5:82:be:75:70:c4:5b:65:a0:7b:66:28:76:d5:f5:
12:85:eb:c4:3b:e7:49:e8:83:24:7e:83:c9:28:5d:
de:51:30:6e:c7:71:b0:3f:23:0a:50:3e:17:f2:54:
36:4d:89:9e:a3:9f:49:99:b9:ae:70:52:2e:ff:67:
b1:07:f3:d3:4b:7e:42:88:38:58:32:e5:4e:d8:69:
15:d9:9b:39:8e:aa:eb:07:35:13:18:7e:ac:c8:ec:
d7:ea:4b:99:9e:56:f0:f9:66:a0:7c:b3:fe:d7:c1:
38:fb:42:10:ac:53:2c:ee:15:61:8e:42:30:42:f3:
82:9b:aa:5c:59:b7:5f:99:a5:6c:ad:09:5a:f1:5c:
58:b5:31:f6:11:64:f3:40:f6:3b:22:be:6e:dc:2d:
c8:e3:ae:ff:9b:96:51:3d:2c:77:81:9c:d4:d0:a0:
65:cd:e1:60:44:a5:72:0b:43:8a:1c:c5:02:66:69:
bc:69:30:e3:44:2f:e4:c0:37:1d:37:0d:86:f6:26:
2e:23:37:5b:30:1d:de:53:ea:b9:5f:52:bf:96:da:
20:44:c8:7b:83:f8:bf:78:04:4a:43:0b:2e:df:a2:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:9A:91:E3:75:75:1E:8E:DD:C8:F9:61:18:50:0E:B0:30:4A:30
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:78:28:3e:0d:10:dc:5b:1e:98:0b:d8:44:e3:a2:d9:bb:65:
4f:dd:3f:28:6e:a8:77:f1:f1:b9:2d:b6:28:12:8a:d7:e9:98:
3f:1c:6b:bb:6f:dd:c9:1f:dc:3f:20:e5:2d:d2:c4:e9:14:4a:
f4:72:16:60:f6:fd:92:1d:d6:4f:4a:81:4a:b7:ef:12:96:d0:
2a:a0:cf:6f:2b:e9:3f:4e:30:d1:4d:87:b0:94:47:1f:ab:ce:
03:06:71:69:a1:91:ba:0d:15:c6:e2:b2:a7:f0:69:e3:05:af:
a7:1d:5c:f4:fa:01:43:5f:b1:4c:04:fc:dd:e6:c6:9f:97:25:
7a:3a:90:88:fa:aa:cd:ee:9e:86:f8:f9:2b:07:d0:0b:81:32:
6e:d7:1b:d4:86:27:27:ac:06:bf:74:75:aa:ba:52:0f:b3:da:
df:ce:00:96:c1:2c:30:79:89:98:56:da:fd:09:62:8f:6b:78:
8c:8b:eb:2c:a1:f8:9f:89:9b:34:5a:08:b6:91:ae:83:27:74:
bb:42:18:27:97:eb:18:39:67:5e:8a:21:86:bc:ef:c0:07:37:
b0:8f:b8:ec:e9:01:1f:a4:02:1f:7d:13:6c:6a:53:7f:a6:7b:
46:27:82:f7:a8:89:d4:c8:09:c2:d9:b6:bc:cc:4b:2d:60:42:
0a:a0:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:48:22 2025 by rpki-client