Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: /9C6MfaaPBWc8E3zFmlIoXDSHM2bep++7hWSbCvy30M=
Subject key identifier: 1A:0A:DD:AF:41:4E:6D:E6:B4:E3:8B:86:C0:14:16:6C:27:87:2A:03
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019A4EBD3FCE2A47E77B5FDE1B345B1D34D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 120C
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: oQc9wp0uQPGCmjqj8P4kKCWl9kUG5YWBivF9YIvLhMM=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
6: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
7: lg3As9QftSBug7tpmYrQWLTzXlw.roa (hash: Zav5DG+USj65sND09nTQM5cgapiwyx+unRcWKNxbfPM=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3f:ce:2a:47:e7:7b:5f:de:1b:34:5b:1d:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=1a0addaf414e6de6b4e38b86c014166c27872a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:e0:48:ab:2d:85:8c:e5:95:89:5d:4f:8c:
ec:5b:12:a0:fd:74:fb:26:97:5a:e5:19:a4:8d:e6:
a7:24:58:dc:d2:a6:e8:8a:1f:d9:59:45:f1:d2:0f:
98:f6:9a:e1:12:3a:3b:09:99:78:e7:6d:8b:45:41:
db:6b:4d:a9:08:6f:3e:9d:17:68:0b:b0:b9:08:5b:
61:dc:f2:fb:47:ba:67:af:36:53:33:90:38:97:b5:
ad:58:eb:94:06:e6:66:81:34:c3:37:01:15:39:74:
7e:f1:e8:14:8d:cb:c1:24:ee:1a:79:cb:a1:6b:eb:
ad:84:f2:12:b3:8c:a7:81:77:88:7d:2a:80:6c:00:
3a:b7:16:b2:3e:d6:af:3e:2f:f8:26:aa:8e:82:32:
5b:22:62:93:6a:63:bd:94:5c:cc:e8:ec:42:83:92:
97:5e:b2:37:14:5c:de:ee:df:07:e1:d3:e2:ba:8d:
59:54:e3:24:ba:d4:28:a5:9f:d7:06:b7:d1:c7:12:
6b:60:72:56:fe:0a:b1:9c:bc:60:e3:b8:c9:31:91:
23:6c:a3:be:b8:23:23:1c:3d:21:68:02:ae:92:92:
16:2a:66:15:ba:2f:c5:5b:0c:28:63:25:a2:e0:e8:
7c:69:72:0f:02:de:34:c2:e1:4f:38:78:f3:9c:2e:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:DD:AF:41:4E:6D:E6:B4:E3:8B:86:C0:14:16:6C:27:87:2A:03
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:34:98:00:70:85:77:4d:98:16:21:20:e9:99:4e:94:d5:
08:82:58:7a:fa:44:f7:96:10:d4:d8:e2:a9:19:7b:bd:db:01:
26:49:b9:52:55:86:c8:b0:c1:68:6b:85:4b:24:98:28:2f:8a:
3d:2f:01:22:ea:29:1f:7a:ba:92:df:82:80:3f:9c:79:4f:5a:
92:31:66:ad:c6:04:9f:15:e5:e0:81:d7:84:30:7c:2e:b9:b3:
08:8f:36:72:b2:d9:f8:99:3c:3e:17:e8:45:2c:8b:1a:e6:61:
f3:65:00:44:ba:97:00:03:a5:e2:d8:b3:43:fb:20:63:a3:21:
80:11:d4:aa:12:21:55:fb:e8:56:d4:06:df:d3:33:11:c4:a7:
7f:8c:41:ae:2b:02:2b:57:24:fd:b2:b8:a2:ae:b9:0d:2b:f2:
8f:09:25:62:e9:b6:ee:3e:ab:4d:8d:b9:d6:72:cc:f0:20:8b:
69:03:79:46:12:9c:7a:a2:56:d9:36:00:a1:e3:db:ef:f8:64:
20:de:fe:d4:0b:5e:c1:fa:ff:80:1f:33:f3:42:c0:d6:37:db:
2b:2f:e9:a6:b3:68:44:af:1e:55:06:cb:6d:32:94:71:ad:a6:
ec:5f:4e:fd:c1:f7:aa:72:7f:3c:00:cb:9a:8c:9c:49:8a:bc:
53:ea:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:27 2025 by rpki-client