Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: 7cprYH/oiL5PbZTidmunJgCW4PxeoJCxuKM8d4EtcCU=
Subject key identifier: 18:1C:C1:C7:91:60:41:A7:1B:3B:95:49:F0:5A:42:26:0E:FA:C5:DB
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01977075812C3CE58B174C1B11023828670C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 22:00:38 +0000
Manifest this update: Sat 14 Jun 2025 22:00:38 +0000
Manifest next update: Sun 15 Jun 2025 22:00:38 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: dQPcUS1WTMA5QkNf7BzqZSOowraTXx+L8qt1PtOEvak=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:81:2c:3c:e5:8b:17:4c:1b:11:02:38:28:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jun 14 22:00:38 2025 GMT
Not After : Jun 15 22:00:38 2025 GMT
Subject: CN=181cc1c7916041a71b3b9549f05a42260efac5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:c9:67:3d:32:af:46:78:63:23:a3:5f:00:
63:08:3a:44:ff:89:47:26:bc:e8:19:85:f2:a3:39:
5b:2e:79:24:b3:1c:fe:80:36:f5:26:97:01:f6:5a:
fd:9d:d9:a1:41:9f:22:99:a9:5e:21:3e:01:c7:62:
16:13:2b:35:7f:ed:9b:c7:81:42:b4:4d:90:fe:4d:
fa:14:59:4a:86:47:d2:aa:63:22:40:41:f5:dc:65:
1e:ad:e7:09:fb:f9:45:fb:24:e2:d3:17:fd:e7:28:
de:99:f0:b6:4e:29:10:15:f0:49:ad:f3:e0:63:af:
55:95:4b:ad:1c:25:0f:a4:27:61:f8:22:dc:5e:ad:
d9:a9:06:be:17:bd:d7:a7:86:87:e0:9e:e3:ae:83:
29:1d:34:2f:84:b0:f0:66:e0:71:33:ae:e5:e2:b0:
98:2c:05:47:ed:12:68:f3:96:35:57:0a:50:c0:5f:
10:9f:3e:a4:76:4e:a8:a5:cc:55:bd:cf:47:13:91:
90:94:86:61:36:b6:9d:88:c1:f4:a7:39:ff:06:84:
47:94:f1:e4:32:f5:3a:9d:e9:e1:31:63:4c:61:54:
ce:8a:fb:67:bb:43:05:2c:2f:4f:64:5d:56:2a:48:
b9:d2:72:57:10:9c:4b:31:8d:8c:6a:8e:54:5e:7b:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1C:C1:C7:91:60:41:A7:1B:3B:95:49:F0:5A:42:26:0E:FA:C5:DB
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:dd:84:1a:9d:9e:9f:73:77:ef:1b:ea:12:6e:bb:b8:97:
73:01:61:70:5a:18:62:03:f3:5a:50:c4:62:77:18:00:03:fe:
aa:09:86:5c:33:0e:ca:54:2a:2d:2a:87:15:d4:82:88:a7:5a:
a7:51:9c:52:23:45:71:3c:26:bd:c4:ee:d1:45:1e:bf:3c:be:
34:6a:df:22:a1:0e:00:5f:4c:92:59:ec:94:f9:06:77:cd:66:
79:69:fd:a4:c1:20:73:07:44:83:36:0d:9b:8f:66:33:da:b6:
0f:b9:ab:62:e0:42:0d:dc:57:76:11:9f:a9:d0:4e:8e:49:2c:
66:36:98:dc:17:1d:66:4b:01:ed:38:41:30:4b:b0:ab:6e:5c:
e8:5d:32:18:4e:99:91:73:30:31:78:d1:73:7f:12:47:6d:fe:
5c:3d:2e:5a:ec:16:da:b1:dc:17:ca:54:f2:ee:72:2c:ca:6a:
f7:f5:0d:53:d0:81:50:ca:59:21:f4:22:33:5d:85:45:a5:db:
05:f2:7b:42:71:8a:b3:41:c6:7e:c9:87:01:a5:19:e8:36:c8:
b9:5a:38:5e:47:d5:8f:c0:d8:d2:50:23:0f:4e:65:ec:7c:b8:
ff:30:36:73:46:64:8d:59:38:47:f9:52:7e:a0:2a:61:d5:04:
ed:2f:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:02:13 2025 by rpki-client