Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: TG5GuSaNC0LPB5nVPmKADJuwfS3rjyIolZOwMcbyrRQ=
Subject key identifier: 13:8D:2D:BC:AE:A8:12:2D:8A:A2:D7:B3:50:A9:8C:24:3D:69:D8:E4
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01974A438510F7C22D7884CAA7F988F4B9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 107C
Signing time: Sat 07 Jun 2025 12:00:28 +0000
Manifest this update: Sat 07 Jun 2025 12:00:28 +0000
Manifest next update: Sun 08 Jun 2025 12:00:28 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: ihYNjdgifz1C4g0YH1ZuXUMfdhEQvn2jQID4bTfnZwU=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:85:10:f7:c2:2d:78:84:ca:a7:f9:88:f4:b9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jun 7 12:00:28 2025 GMT
Not After : Jun 8 12:00:28 2025 GMT
Subject: CN=138d2dbcaea8122d8aa2d7b350a98c243d69d8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:82:2f:21:58:ca:ba:e6:f4:9a:dc:88:8f:
9a:3f:9a:b5:4d:9c:53:bc:16:01:5b:61:fd:cd:a7:
b1:92:08:51:29:88:0d:94:d6:08:eb:cc:8f:d0:81:
9e:86:91:ef:d5:62:04:66:52:a7:7a:1f:fa:a4:17:
cf:32:1d:14:5d:c1:34:c5:62:b4:8c:23:e9:92:3c:
a8:32:2c:2e:56:10:1b:7b:80:5b:86:6c:7d:65:d6:
ba:08:a3:d1:c9:1a:ee:91:f8:ac:74:74:21:67:85:
07:20:2e:38:e5:04:81:79:fd:3e:27:d8:f5:e4:c9:
74:22:52:72:20:86:23:5e:e9:af:58:15:ed:55:1e:
a4:96:90:91:1d:69:51:d2:48:a6:ea:4f:9e:09:6e:
ca:0e:e5:00:07:e5:2e:1f:4f:43:c8:62:73:35:4d:
6d:07:27:2e:29:b8:07:cd:eb:b3:f6:8a:61:bb:3d:
28:6a:21:b8:83:44:f0:7a:02:21:8b:4d:0e:4b:11:
2c:16:ab:3a:96:d3:24:7b:c9:71:d1:d9:0f:14:af:
06:79:f8:c2:44:23:dc:11:3c:72:11:1c:16:ff:e3:
f4:67:d5:9b:3d:85:01:24:aa:89:03:17:45:ae:c1:
2a:c6:0e:20:1b:03:e2:36:dc:bc:4c:c6:21:01:1b:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:2D:BC:AE:A8:12:2D:8A:A2:D7:B3:50:A9:8C:24:3D:69:D8:E4
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:81:65:14:8e:2a:90:5a:46:f0:1c:20:1f:9a:bd:f2:c5:
fc:7a:63:9e:1b:ab:a2:e6:95:2e:fb:fb:f7:22:30:4a:07:cc:
d4:fa:e5:f6:a8:2e:2a:f5:fc:8f:84:c1:91:53:2b:b2:1f:91:
3e:8c:bd:64:a3:a2:64:33:d1:d4:e6:14:89:04:7e:f1:95:ed:
1d:a4:7d:b4:4d:b7:5c:ff:d2:fd:63:95:89:67:df:a4:5f:54:
ae:15:af:b0:63:2e:95:5a:1a:de:f5:a3:f8:17:3e:a2:14:79:
29:80:df:56:fe:9e:bb:e1:04:7d:54:09:a4:c1:36:19:14:fc:
2f:45:a2:a3:ba:4e:01:18:18:db:97:64:64:2e:b7:a8:af:18:
98:7c:d4:d3:0e:c9:79:c6:d6:13:0e:3f:5d:b5:76:47:05:14:
f9:da:cd:8e:6c:93:9f:3d:9a:51:36:2f:9a:b6:26:9a:8e:66:
0c:e2:56:c6:f0:de:6f:fe:87:d1:98:65:e9:82:d2:77:6c:52:
64:00:d6:6f:23:d4:3c:2c:42:83:4c:9c:c0:33:cb:68:ac:0b:
b1:3d:68:c9:9e:54:11:52:4e:e3:92:bb:b2:32:e9:e1:ca:d2:
20:95:b1:48:ce:86:22:57:70:85:50:bd:b5:ee:22:51:ea:8a:
03:8b:72:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ4UQ98IteITKp/mI9LnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjUwNjA3MTIwMDI4WhcNMjUwNjA4MTIwMDI4WjAzMTEwLwYDVQQD
EygxMzhkMmRiY2FlYTgxMjJkOGFhMmQ3YjM1MGE5OGMyNDNkNjlkOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkKCLyFYyrrm9JrciI+aP5q1TZxT
vBYBW2H9zaexkghRKYgNlNYI68yP0IGehpHv1WIEZlKneh/6pBfPMh0UXcE0xWK0
jCPpkjyoMiwuVhAbe4Bbhmx9Zda6CKPRyRrukfisdHQhZ4UHIC445QSBef0+J9j1
5Ml0IlJyIIYjXumvWBXtVR6klpCRHWlR0kim6k+eCW7KDuUAB+UuH09DyGJzNU1t
BycuKbgHzeuz9ophuz0oaiG4g0TwegIhi00OSxEsFqs6ltMke8lx0dkPFK8GefjC
RCPcETxyERwW/+P0Z9WbPYUBJKqJAxdFrsEqxg4gGwPiNty8TMYhARt9nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBONLbyuqBItiqLXs1CpjCQ9adjkMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWKBZRSO
KpBaRvAcIB+avfLF/HpjnhurouaVLvv79yIwSgfM1Prl9qguKvX8j4TBkVMrsh+R
Poy9ZKOiZDPR1OYUiQR+8ZXtHaR9tE23XP/S/WOViWffpF9UrhWvsGMulVoa3vWj
+Bc+ohR5KYDfVv6eu+EEfVQJpME2GRT8L0Wio7pOARgY25dkZC63qK8YmHzU0w7J
ecbWEw4/XbV2RwUU+drNjmyTnz2aUTYvmrYmmo5mDOJWxvDeb/6H0Zhl6YLSd2xS
ZADWbyPUPCxCg0ycwDPLaKwLsT1oyZ5UEVJO45K7sjLp4crSIJWxSM6GIldwhVC9
te4iUeqKA4tykg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:12 2025 by rpki-client