Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: amaSi0vYsobmOfzRE2lP8LHNiHRLH+625m4W7Tk44xw=
Subject key identifier: 21:61:C1:89:61:A9:A2:A2:A7:A6:88:CC:D0:2D:03:F0:CB:70:1B:D5
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019A522C63E9E652EA37E741FEB65F09A079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 04:00:32 +0000
Manifest this update: Wed 05 Nov 2025 04:00:32 +0000
Manifest next update: Thu 06 Nov 2025 04:00:32 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: R5Zcm1EDlxCAxKNVAGkyI8caukf8R7BRYjgZSy6VhdE=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:63:e9:e6:52:ea:37:e7:41:fe:b6:5f:09:a0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Nov 5 04:00:32 2025 GMT
Not After : Nov 6 04:00:32 2025 GMT
Subject: CN=2161c18961a9a2a2a7a688ccd02d03f0cb701bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:1b:9c:be:29:33:ba:df:e6:24:18:54:fb:
fa:10:8f:81:0c:06:e3:dd:7f:eb:57:c3:84:1f:f3:
3c:f0:84:4e:69:f0:22:94:0b:8e:23:e0:27:05:54:
bb:af:8d:99:ef:dd:da:fc:22:53:83:90:db:e1:ca:
ce:71:e0:f5:60:6f:d3:cf:d4:16:a6:69:20:a7:27:
c3:81:7c:be:1b:9d:b3:09:93:a3:3d:04:1f:24:c3:
a8:d4:65:fa:57:de:13:48:d2:90:a2:ab:15:a0:85:
62:61:d2:79:bb:69:ac:dc:d9:d0:05:f8:00:5a:d6:
ee:29:ca:49:3e:97:a9:87:9c:d7:49:c9:7b:ad:bd:
17:47:d5:3f:a0:53:42:68:82:c5:09:d7:28:2b:c9:
fe:99:5d:04:61:07:2a:ef:6a:af:6d:dd:4c:b8:7a:
fc:1a:a4:06:d3:1a:ee:a5:9c:3c:a2:95:ed:d8:cf:
9b:b2:85:99:37:d5:91:3f:b5:77:54:c9:d7:d5:26:
e5:6f:dd:6e:4c:a2:73:b2:25:f0:9f:14:ef:e2:19:
8f:a8:e5:10:59:1d:2d:31:21:ef:be:e0:70:b1:f2:
f1:a3:39:61:2c:ec:d2:e4:e2:53:5d:4b:b1:29:6f:
48:81:13:d1:77:df:9e:a1:ab:4d:e7:c6:63:98:b1:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:C1:89:61:A9:A2:A2:A7:A6:88:CC:D0:2D:03:F0:CB:70:1B:D5
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:09:64:30:32:91:10:e8:e3:ba:f7:ba:31:e5:b4:32:41:77:
77:97:9d:8a:aa:0f:9b:d1:fc:69:d2:ec:d4:b4:d2:1f:a6:cd:
65:2e:de:e8:5f:ef:c8:be:70:6a:dd:d6:69:c0:1a:09:dc:2e:
86:aa:90:9c:e3:9a:72:60:81:26:1d:e6:80:95:18:5f:be:01:
e5:9c:f9:a9:df:d8:44:1e:bf:e3:7a:a2:84:97:6a:27:6b:bc:
3e:2e:c7:b4:aa:4c:7a:74:9b:df:a4:7d:a6:99:6b:d2:d6:a7:
26:64:cc:98:d2:a9:31:0f:81:3d:71:50:1e:f4:88:11:04:e7:
9d:27:cd:75:95:40:4a:6d:0c:2c:ba:94:02:24:d6:d7:fd:5e:
2f:c9:d7:ca:1b:d8:28:e7:3b:03:4f:55:7c:54:db:a9:41:c5:
7a:e8:f6:67:cf:2a:36:e0:c0:a4:b9:9b:01:42:c9:cb:27:e5:
61:65:9e:ed:3d:ad:94:25:a0:2e:86:a6:e8:4d:06:96:58:ce:
32:3b:21:10:4c:5b:a3:94:2d:0c:20:f0:e1:6e:3a:cc:90:7d:
ae:86:45:90:b4:1f:fb:3e:ed:18:11:56:66:6f:8f:ad:8e:9c:
e3:78:4b:59:ae:d6:2b:48:3b:77:1b:0d:cd:77:ab:73:dd:f9:
87:e6:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:26 2025 by rpki-client