Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: 4bkEkXZMnMM7EfmYpQwgZJMz/6rqObTHFQal6a3ETYg=
Subject key identifier: 08:9B:C2:3E:B2:30:41:59:3D:7C:F5:C7:12:F9:D5:D0:85:2D:02:03
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01958C29382947939FA470B221900B869A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 0F95
Signing time: Wed 12 Mar 2025 21:01:06 +0000
Manifest this update: Wed 12 Mar 2025 21:01:06 +0000
Manifest next update: Thu 13 Mar 2025 21:01:06 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: iIO6XIu47euULfuh4m7HCjovrFbMuSI3jxJdDzqkzkw=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:38:29:47:93:9f:a4:70:b2:21:90:0b:86:9a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Mar 12 21:01:06 2025 GMT
Not After : Mar 13 21:01:06 2025 GMT
Subject: CN=089bc23eb23041593d7cf5c712f9d5d0852d0203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b0:a4:ea:fb:a4:31:f5:7d:6f:a3:cc:e7:f5:
51:8d:a2:6d:f1:47:98:38:aa:de:b4:e4:3a:eb:72:
80:68:fb:b1:c4:d4:97:1f:0a:34:5b:e5:37:d1:c9:
88:c4:df:34:b3:d6:17:8f:59:7f:a9:77:65:b1:48:
e2:a4:50:21:28:69:c6:c6:06:c1:89:9b:05:1f:d5:
b7:53:77:48:75:8c:25:fa:a9:8c:71:de:e6:72:81:
47:d5:31:9c:b2:ff:73:0f:62:31:21:1b:23:6d:69:
10:3c:36:40:6a:e0:c7:ca:65:53:10:0b:de:d4:1f:
ca:a4:b0:c1:c7:4d:86:84:d3:e1:4a:c5:63:2b:f9:
d2:60:3d:7a:49:f6:4c:cd:e0:1e:d9:80:33:88:4a:
5a:70:df:1b:3c:83:1f:e2:ff:85:be:7f:ac:20:0e:
41:86:96:54:fb:37:21:15:f1:48:dd:f4:02:e7:38:
96:f9:51:72:42:78:33:91:48:e2:a6:f0:74:61:eb:
c0:a1:88:17:4f:54:f5:24:1d:c8:29:2c:fa:32:00:
f6:5d:9a:6a:a7:f5:0e:0c:e1:fe:83:d1:5b:ce:d0:
fd:75:2c:35:86:62:00:01:77:52:cc:6f:36:96:58:
1d:64:7e:5f:f7:48:72:79:76:3a:44:76:0b:e8:99:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9B:C2:3E:B2:30:41:59:3D:7C:F5:C7:12:F9:D5:D0:85:2D:02:03
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3c:3b:7c:b7:f0:83:ec:eb:a7:0e:66:c4:66:96:56:d1:f9:
47:6d:fc:97:3c:42:20:d8:5e:4d:fa:31:9f:0b:a2:70:30:fe:
56:89:c3:c5:a3:69:3e:71:f4:65:22:d1:af:c9:bd:09:60:15:
6d:8f:ee:21:82:60:50:db:52:72:8e:7a:9c:3a:bd:fe:47:6c:
69:2e:6e:ad:7d:2d:2f:fc:76:55:6c:0f:b0:8c:4b:76:29:1b:
62:18:a5:3f:b2:bf:32:a3:da:d5:27:22:f0:5e:b6:ab:41:35:
ab:63:83:9f:d7:b7:cf:ba:91:cb:53:3e:c6:d4:fd:1a:f8:ff:
1f:04:ea:af:51:f3:a7:99:8f:da:0e:bf:fb:fb:a2:85:af:0b:
1c:57:b2:e6:3a:e0:1c:49:9e:89:75:1f:4a:82:b1:4b:ae:af:
4d:6d:16:19:46:97:3d:01:be:83:0e:f3:29:d5:31:af:5e:10:
2d:af:ec:a7:51:8e:39:15:4c:11:18:cc:ae:f7:0b:e8:c5:22:
88:b2:da:49:9c:51:a7:c4:bd:11:f0:dd:fc:c6:30:06:b2:c0:
fa:44:b1:e0:cc:61:1a:82:88:c6:84:d8:98:95:0f:26:c6:96:
76:f6:db:45:d0:f1:d5:c4:52:ba:8f:5f:f7:d9:e5:5b:43:70:
1f:d0:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:24 2025 by rpki-client