Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: h/pQNfI9NjpOkxVEEGn6ZfsY/5r/CQXgQe9LuQVDY10=
Subject key identifier: BE:08:7E:C8:59:20:03:5A:90:BD:E8:83:47:9A:7E:4E:D6:51:D2:50
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01967BA090A4CD04FC264EC74C2FF7CBE968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 1011
Signing time: Mon 28 Apr 2025 09:00:42 +0000
Manifest this update: Mon 28 Apr 2025 09:00:42 +0000
Manifest next update: Tue 29 Apr 2025 09:00:42 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: o2nMnWKVKCDxJMsGwovp8VznN8YoEJcYkIF2vtFExJA=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:90:a4:cd:04:fc:26:4e:c7:4c:2f:f7:cb:e9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Apr 28 09:00:42 2025 GMT
Not After : Apr 29 09:00:42 2025 GMT
Subject: CN=be087ec85920035a90bde883479a7e4ed651d250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:72:d2:5f:8f:b3:ed:b7:13:fc:95:f3:75:
e0:c0:6c:45:be:ba:d1:c8:00:3e:94:5e:15:0f:44:
f0:12:66:28:ba:6b:5f:d8:c1:fe:cc:d7:84:3d:92:
07:53:aa:43:e2:85:fa:5e:1b:5b:22:81:c8:66:e0:
64:8c:05:88:b0:93:9a:34:67:33:4f:05:d4:ff:38:
9f:32:58:10:0d:ee:46:cc:5f:33:2e:c4:d5:fa:8f:
11:7a:b6:45:a8:a8:53:c9:59:20:1f:4c:07:d6:96:
42:81:99:c1:ef:27:36:38:a4:c7:0f:7a:f0:f1:80:
fd:72:02:ac:25:a7:ad:d5:45:9e:65:b4:43:01:d1:
17:d5:27:d0:20:4f:2c:ec:94:ce:8e:64:9f:57:11:
6c:bf:be:9d:c2:5b:84:22:a6:e1:3e:ed:f5:74:66:
02:e4:6b:0e:59:34:6c:20:de:a5:8e:2f:0f:ac:b1:
75:7f:84:3b:b0:fa:fd:b0:53:6d:43:8c:e0:0e:18:
80:d7:d8:f9:9b:8c:d0:af:ce:b0:c9:31:5a:7e:05:
fe:d0:9e:d3:4c:58:40:22:ac:57:4d:85:f2:18:9b:
b4:ea:34:85:08:30:70:de:91:2d:3c:5e:97:9d:03:
e0:4b:6b:f9:0f:cb:9f:ef:34:46:7e:19:cd:ac:d3:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:7E:C8:59:20:03:5A:90:BD:E8:83:47:9A:7E:4E:D6:51:D2:50
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b9:6c:7f:aa:9a:75:44:c1:31:bd:05:6f:55:27:97:f9:e9:
24:3e:2d:28:1a:0c:07:28:7a:de:17:2d:c5:3a:c2:1c:33:2f:
fe:ac:89:56:08:16:a7:15:00:f6:50:5c:9d:e5:78:0e:7d:82:
08:d8:03:01:6f:dd:1b:bd:cd:e1:95:85:6a:61:29:1f:5d:01:
a6:8f:ea:b4:12:1c:bd:7e:ef:56:b8:5e:05:7f:ab:bd:31:98:
ca:94:69:f6:e0:c3:1c:84:d4:df:12:3e:2d:a3:74:1a:28:7a:
00:1c:cf:39:8b:f9:90:c0:e2:bf:1b:49:18:3b:f6:5b:ef:a3:
be:f5:37:ec:2e:ee:75:ef:9f:b3:96:f3:e4:12:3d:6c:14:fc:
c4:a9:d1:da:38:c7:7b:29:03:45:39:54:da:f9:f8:03:52:90:
3b:42:a0:fb:3d:36:31:48:fd:76:31:8f:e7:4b:a0:e4:93:0b:
aa:17:8b:f1:94:d3:32:a7:45:d2:45:ab:97:ff:66:92:90:95:
64:4e:a0:f7:99:de:f0:c7:84:bc:2d:9c:78:be:75:c6:c8:52:
c8:84:4a:38:b3:f8:52:1b:ec:3f:29:86:31:43:76:ef:e7:0e:
45:3c:49:0c:22:f1:9e:2c:01:1c:e5:2f:96:60:c2:dc:6d:b0:
9d:ab:6c:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oJCkzQT8Jk7HTC/3y+loMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjUwNDI4MDkwMDQyWhcNMjUwNDI5MDkwMDQyWjAzMTEwLwYDVQQD
EyhiZTA4N2VjODU5MjAwMzVhOTBiZGU4ODM0NzlhN2U0ZWQ2NTFkMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLFy0l+Ps+23E/yV83XgwGxFvrrR
yAA+lF4VD0TwEmYoumtf2MH+zNeEPZIHU6pD4oX6XhtbIoHIZuBkjAWIsJOaNGcz
TwXU/zifMlgQDe5GzF8zLsTV+o8RerZFqKhTyVkgH0wH1pZCgZnB7yc2OKTHD3rw
8YD9cgKsJaet1UWeZbRDAdEX1SfQIE8s7JTOjmSfVxFsv76dwluEIqbhPu31dGYC
5GsOWTRsIN6lji8PrLF1f4Q7sPr9sFNtQ4zgDhiA19j5m4zQr86wyTFafgX+0J7T
TFhAIqxXTYXyGJu06jSFCDBw3pEtPF6XnQPgS2v5D8uf7zRGfhnNrNNq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4IfshZIANakL3og0eafk7WUdJQMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACblsf6qa
dUTBMb0Fb1Unl/npJD4tKBoMByh63hctxTrCHDMv/qyJVggWpxUA9lBcneV4Dn2C
CNgDAW/dG73N4ZWFamEpH10Bpo/qtBIcvX7vVrheBX+rvTGYypRp9uDDHITU3xI+
LaN0Gih6ABzPOYv5kMDivxtJGDv2W++jvvU37C7ude+fs5bz5BI9bBT8xKnR2jjH
eykDRTlU2vn4A1KQO0Kg+z02MUj9djGP50ug5JMLqheL8ZTTMqdF0kWrl/9mkpCV
ZE6g95ne8MeEvC2ceL51xshSyIRKOLP4UhvsPymGMUN27+cORTxJDCLxniwBHOUv
lmDC3G2wnatsKw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:33:56 2025 by rpki-client