
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: bNdsb9RcbmrYafHzzeL+CzXSR0R8mm9Tj2y+AKUsIl4=
Subject key identifier: 0F:30:FE:DD:24:19:C9:31:1E:DD:C5:67:20:87:F0:E6:A1:14:19:DB
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01987F7985E2BD05CC4798F093DEF77163B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 111C
Signing time: Wed 06 Aug 2025 13:02:07 +0000
Manifest this update: Wed 06 Aug 2025 13:02:07 +0000
Manifest next update: Thu 07 Aug 2025 13:02:07 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: /xL+snQUrj1uXRwiUB5xkgnCtmTWN7W792weIIHYH9Q=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:85:e2:bd:05:cc:47:98:f0:93:de:f7:71:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Aug 6 13:02:07 2025 GMT
Not After : Aug 7 13:02:07 2025 GMT
Subject: CN=0f30fedd2419c9311eddc5672087f0e6a11419db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:87:40:98:eb:96:ce:fa:8e:14:1b:18:31:
ca:8c:35:8a:f9:ec:1a:d2:8c:c3:ce:69:6f:24:80:
48:9f:cd:ac:a6:30:47:af:6d:d4:cb:a3:c8:5c:31:
15:fb:89:e6:3e:2f:83:19:6c:81:77:b3:97:2d:3b:
e0:61:47:84:2e:51:1d:da:cc:02:f8:be:c4:d6:06:
e9:e1:35:62:a6:bb:0a:f3:31:24:e0:50:66:24:d8:
09:3a:5c:a9:4f:d9:4f:ce:5b:02:a2:d4:02:98:33:
8f:de:b0:86:1d:f9:87:3e:6a:27:11:3c:02:c6:b9:
f4:0b:24:2b:03:37:8c:c9:b1:25:02:7a:d4:f9:5a:
21:aa:ea:b5:6b:8c:48:90:2d:7c:f2:92:89:1f:42:
f8:dc:8a:02:29:51:e5:6e:6d:d3:b3:68:36:8c:8c:
85:4a:9c:e5:d0:54:ff:2b:a1:82:08:f8:39:45:40:
22:20:c5:8b:98:2a:21:9e:86:11:57:bb:17:00:5b:
95:6c:a1:a2:11:34:fe:02:65:79:cd:ad:f0:b5:2d:
81:c0:67:4e:99:e1:fd:a1:e7:11:fe:d8:54:84:07:
bb:a7:7d:b8:5a:3f:11:07:4c:bd:fd:5f:51:93:cf:
61:ce:5a:47:bf:38:c5:04:42:90:b4:09:46:44:79:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:30:FE:DD:24:19:C9:31:1E:DD:C5:67:20:87:F0:E6:A1:14:19:DB
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:c0:a8:f4:b5:02:9d:59:37:67:91:eb:bb:1b:48:42:59:
28:d9:87:5e:05:bb:da:8b:cb:f9:79:b8:bf:f6:78:d4:b5:09:
bc:3f:04:1b:a6:04:00:b8:0f:34:8d:b5:3d:66:5f:67:bd:c4:
f7:01:e4:38:ca:0e:01:e6:38:b2:c7:0b:94:f6:63:38:fc:ab:
7f:76:29:c4:70:8d:49:4c:82:35:12:44:9c:fa:7f:56:44:2c:
2c:01:29:14:e4:00:39:53:af:d6:48:90:99:44:24:1a:67:34:
2c:e4:33:f9:83:8e:ff:48:0d:92:67:97:e5:2c:3b:c3:90:ff:
ba:1c:81:16:f2:e8:09:5b:22:6f:04:d3:41:36:af:48:dd:08:
b0:ed:af:34:8e:0c:40:10:27:ae:d7:66:24:1e:b7:2c:ff:2f:
f0:8e:f0:b6:f2:07:e4:c4:4b:fe:11:ea:33:a2:ae:9f:2b:a7:
8d:41:fe:66:51:c1:b4:15:93:66:3f:6e:9e:62:68:58:7d:4f:
19:ff:20:3f:ea:de:cc:05:b7:55:a6:88:44:7f:11:a1:90:8e:
92:67:c8:cd:10:07:5d:a4:df:f4:a6:80:fb:2d:2d:16:c6:7a:
ab:f1:94:3b:97:00:cb:08:9f:93:17:07:29:83:5b:f4:96:32:
a3:97:14:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:23:42 2025 by rpki-client