Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: kHZlEBPE8bJxMoOgAxlLSWTCAB5ziWYJv496fKYh6uY=
Subject key identifier: FD:E8:33:E0:47:F3:08:F5:A2:5F:99:3E:BB:5A:89:D7:25:76:F1:EC
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019772D1EDA60C5044A45B89FDBB21081B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 1091
Signing time: Sun 15 Jun 2025 09:00:49 +0000
Manifest this update: Sun 15 Jun 2025 09:00:49 +0000
Manifest next update: Mon 16 Jun 2025 09:00:49 +0000
Files and hashes: 1: 2V9yE_-2gPzUwYdccQgBOoOM18I.roa (hash: eOCHHWhfMlB35sI0btwTirM6dsTLjT95v8bNNnNalmA=)
2: NEq6MArjlQuQ-WIB1VyRrErjAd0.roa (hash: MidMhTk3ASBcuW3/c0/stqSyljlKyQu+afJNZt4dhek=)
3: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: 5L3JynRRzIMchJ70IwJh7uZeAbDOOUSQu6uvToa2b/k=)
4: T9enhqzdG5yQEOgWkABkrQAk6M8.roa (hash: SxiuxM/I8FF8zreMQuHoAzLYfdJRNYC8zGUE4C2+MUg=)
5: TpBonKzdgVHgS_Gy-DCcGH-ISN4.roa (hash: fc1S9Y933e/VnBvBlMJ607HkBmXbxqMq3az/lWDVmME=)
6: YIWnRcAakVGioTGRMmr97QBMxt8.roa (hash: 0pAd524EgOV9gt8eDHTEF8KH00KSBimBO4oKROwsaA0=)
7: kaShJaLkR3B81NHQpcp6VAc_nlg.roa (hash: pqDRdBas3v1MNi9715+npvAM7Hsxyhh7JGLBbksQ+7E=)
8: tLpYmjiy2-hs1MM_Lyatf45ocKg.roa (hash: /IX/rjwA4xnIpYI7Xf4mBV5PcdOdUpUQwLhk+QGjMLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:ed:a6:0c:50:44:a4:5b:89:fd:bb:21:08:1b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jun 15 09:00:49 2025 GMT
Not After : Jun 16 09:00:49 2025 GMT
Subject: CN=fde833e047f308f5a25f993ebb5a89d72576f1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:f7:be:93:d4:18:49:b1:38:b3:99:97:0b:
eb:6e:5e:f2:cb:98:7c:9b:c9:f6:b9:c6:4d:11:11:
d4:f0:74:ad:5a:c4:25:9a:51:fc:20:97:67:60:9a:
88:72:55:51:42:de:bd:7b:2a:b4:12:79:b2:3b:a8:
2a:c3:4c:59:6c:94:b4:02:b2:f7:d1:ba:3a:5a:e1:
83:f1:1c:fe:4d:44:8c:bc:35:13:ba:68:ae:e7:2c:
d7:1c:55:02:ed:13:d3:76:b0:fa:53:e1:e7:e4:4d:
6c:76:40:de:f3:d3:8d:03:e8:ef:c7:db:0c:af:b1:
95:3c:ce:ec:8d:1d:2c:4d:4e:ca:ba:e8:73:3c:a5:
d1:e4:2e:e9:ee:7d:a7:b3:2a:37:0d:4e:9e:91:17:
2c:cb:db:f5:51:0a:f4:78:28:2a:b6:1b:53:1f:21:
d8:9d:d3:47:0b:ee:ee:75:2b:8c:23:a7:b7:22:13:
a1:c0:da:65:01:37:6f:6c:d9:76:4b:b6:6f:7c:aa:
30:8f:ec:5e:a0:0d:73:b5:5f:e5:13:6c:57:ad:19:
d3:f2:70:19:35:df:1a:65:a2:70:75:8d:03:52:4e:
bd:32:e6:2b:c9:00:b8:19:c6:37:0a:7f:5b:f9:14:
37:15:7d:fd:1b:ff:00:46:d0:7d:24:01:cd:7a:c7:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:33:E0:47:F3:08:F5:A2:5F:99:3E:BB:5A:89:D7:25:76:F1:EC
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:87:20:74:79:40:d7:00:d3:43:2b:67:e5:70:59:73:8b:
bf:9c:18:02:7c:51:44:8e:8c:39:3c:38:5e:2b:be:93:e4:90:
0f:69:c8:0c:d0:6c:5c:7f:97:3d:f5:8e:7d:4c:ba:22:c5:9c:
25:b0:cf:8a:8b:f0:29:7e:95:ea:a6:b2:af:36:bd:06:61:be:
74:99:22:63:c6:55:6c:29:ea:5e:91:d5:ce:4c:0a:e1:25:84:
c6:f6:2d:f2:ef:f7:a2:bc:aa:98:e1:90:bf:53:09:8a:ab:0b:
95:55:49:9e:7c:29:f1:52:0d:24:4c:95:d5:cd:73:c5:1e:db:
ea:8c:e4:dc:e5:bb:47:8a:c6:a3:3c:b1:0c:0e:19:25:ea:d5:
40:8f:51:20:d4:c6:11:cd:a3:2d:56:c1:01:02:51:e6:25:bd:
4f:9f:cc:6a:cb:8d:90:4a:e3:b4:41:a1:dd:c6:cc:b7:43:68:
62:da:85:e3:79:9f:a1:f9:bd:31:bc:e6:e6:c1:eb:d7:83:c2:
f9:2d:f8:74:b9:d7:6c:8c:23:bc:32:a6:e4:ab:15:b6:82:1f:
bd:85:01:6a:a1:86:7b:9f:2f:29:c7:d0:70:44:f3:91:08:94:
7d:3a:7a:7f:b7:ea:ab:87:73:45:8f:b4:1d:50:57:51:d7:31:
14:83:41:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdy0e2mDFBEpFuJ/bshCBtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjUwNjE1MDkwMDQ5WhcNMjUwNjE2MDkwMDQ5WjAzMTEwLwYDVQQD
EyhmZGU4MzNlMDQ3ZjMwOGY1YTI1Zjk5M2ViYjVhODlkNzI1NzZmMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOT3vpPUGEmxOLOZlwvrbl7yy5h8
m8n2ucZNERHU8HStWsQlmlH8IJdnYJqIclVRQt69eyq0EnmyO6gqw0xZbJS0ArL3
0bo6WuGD8Rz+TUSMvDUTumiu5yzXHFUC7RPTdrD6U+Hn5E1sdkDe89ONA+jvx9sM
r7GVPM7sjR0sTU7KuuhzPKXR5C7p7n2nsyo3DU6ekRcsy9v1UQr0eCgqthtTHyHY
ndNHC+7udSuMI6e3IhOhwNplATdvbNl2S7ZvfKowj+xeoA1ztV/lE2xXrRnT8nAZ
Nd8aZaJwdY0DUk69MuYryQC4GcY3Cn9b+RQ3FX39G/8ARtB9JAHNesdzIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3oM+BH8wj1ol+ZPrtaidcldvHsMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeSHIHR5
QNcA00MrZ+VwWXOLv5wYAnxRRI6MOTw4Xiu+k+SQD2nIDNBsXH+XPfWOfUy6IsWc
JbDPiovwKX6V6qayrza9BmG+dJkiY8ZVbCnqXpHVzkwK4SWExvYt8u/3oryqmOGQ
v1MJiqsLlVVJnnwp8VINJEyV1c1zxR7b6ozk3OW7R4rGozyxDA4ZJerVQI9RINTG
Ec2jLVbBAQJR5iW9T5/MasuNkErjtEGh3cbMt0NoYtqF43mfofm9Mbzm5sHr14PC
+S34dLnXbIwjvDKm5KsVtoIfvYUBaqGGe58vKcfQcETzkQiUfTp6f7fqq4dzRY+0
HVBXUdcxFINBWA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:59:07 2025 by rpki-client