Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: H6G8/DH+638pZ9QyK78wsN2K8Qx7A/KtvHqlS4cG6x8=
Subject key identifier: 37:34:47:3A:85:35:7B:56:65:E0:D4:9B:7E:0F:84:3C:14:25:88:6D
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019679441539079329597FDF7D3C0C093009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 22:00:27 +0000
Manifest this update: Sun 27 Apr 2025 22:00:27 +0000
Manifest next update: Mon 28 Apr 2025 22:00:27 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: wNLXKFJ9o89GsdMyr6+PUk1A301ArMXizLgSLCKahys=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:15:39:07:93:29:59:7f:df:7d:3c:0c:09:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Apr 27 22:00:27 2025 GMT
Not After : Apr 28 22:00:27 2025 GMT
Subject: CN=3734473a85357b5665e0d49b7e0f843c1425886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:de:98:10:96:f2:8b:52:2c:0c:9a:cd:c3:
e9:15:42:73:48:a2:20:6a:7a:e0:5b:9d:d1:39:07:
ca:f6:3b:f0:5a:96:59:5c:d5:81:7e:a7:39:38:25:
fd:bb:4a:69:c3:67:18:28:94:03:95:65:5e:d7:26:
4d:69:4e:76:ea:78:ec:f0:ac:43:b9:10:96:3a:96:
cf:05:83:87:7b:9b:a6:bc:a9:40:59:6f:fa:10:c2:
e3:67:91:41:8c:57:54:7f:76:14:d1:43:1b:63:3b:
98:35:4f:78:12:e3:97:c1:5f:70:76:b4:c3:7b:40:
bf:c8:df:17:e5:aa:a0:d2:f7:61:c5:ff:b7:6d:c6:
9a:a5:bc:80:0d:a5:d1:1a:b3:86:f0:2e:4e:d0:6d:
96:56:27:63:d3:50:d1:9a:f8:2b:09:2d:03:73:89:
d5:6a:68:d3:ea:a9:35:32:a8:ac:9d:2b:fe:20:3f:
f1:1c:3f:7f:5e:c5:78:28:4c:64:69:18:12:53:4d:
35:35:b1:ee:15:0d:57:e5:fe:01:db:ff:45:ae:51:
ae:f4:4a:b5:61:5f:f1:e2:45:21:aa:53:83:33:8d:
af:a2:49:48:30:0e:65:57:12:a4:41:74:c1:f2:99:
ce:47:5f:19:b3:c0:59:18:25:c0:eb:b6:8e:40:d1:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:47:3A:85:35:7B:56:65:E0:D4:9B:7E:0F:84:3C:14:25:88:6D
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:80:ff:48:ed:91:b5:2e:6e:00:f5:d3:51:d0:4f:31:43:bb:
33:79:ff:cd:31:c1:49:a7:ca:80:0a:26:73:21:d2:b6:bf:c2:
b2:4a:34:1a:fa:45:c7:1a:d4:e2:7e:e7:ea:16:7d:00:17:7a:
7a:74:05:21:f4:fe:2a:8e:1e:4f:fd:f6:96:d0:21:00:27:b2:
81:6c:6e:13:36:0d:b2:30:02:84:de:7f:fc:25:a8:f5:9d:bf:
2c:57:25:82:44:a4:cd:13:e2:f0:cc:d7:85:82:25:0e:1f:2c:
90:1b:ec:49:73:44:32:cf:17:1f:55:17:1a:d1:90:09:11:2c:
32:8c:48:f6:11:26:f2:a7:7b:cc:98:8e:85:2f:dd:a0:b3:0a:
21:7e:ca:82:7f:67:73:f9:37:a3:8d:32:35:64:71:54:28:cc:
8c:ad:cc:de:25:21:a4:8f:bf:10:e1:05:97:45:10:31:3c:e1:
aa:80:4f:e3:8c:7e:ad:ba:2c:23:d4:da:30:06:03:de:1b:11:
da:80:a8:38:bf:f1:8f:3a:a8:ef:79:98:dd:9a:cc:5b:5b:87:
f0:7d:58:ea:d1:c0:5d:b4:37:af:81:07:0b:8a:89:d4:81:19:
6a:a0:47:e7:b8:7f:5e:97:2c:c7:22:03:63:56:61:90:3e:a3:
44:b7:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:07 2025 by rpki-client