Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: yO4l9jRTX/T85bL8B4Ljqw1PxHcceoOSVk6a4jAqXNw=
Subject key identifier: 24:7E:72:14:EB:9D:68:5A:51:C0:3C:49:D8:C0:A6:97:C8:48:70:6B
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 0198733D42437FBB885227B1327A10281124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:00:51 +0000
Manifest this update: Mon 04 Aug 2025 04:00:51 +0000
Manifest next update: Tue 05 Aug 2025 04:00:51 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: 8c1UNfxOrqeslS2XVz2QpHurO4I6BWDCScnjFaUtdpU=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:42:43:7f:bb:88:52:27:b1:32:7a:10:28:11:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Aug 4 04:00:51 2025 GMT
Not After : Aug 5 04:00:51 2025 GMT
Subject: CN=247e7214eb9d685a51c03c49d8c0a697c848706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a1:97:b9:7e:88:4d:fd:b8:f6:09:96:d7:21:
99:df:60:11:05:3c:f6:d3:39:43:e9:e4:cf:4b:59:
dd:48:da:0a:e2:72:45:f7:99:ab:a4:6b:f3:e7:c7:
87:75:fe:9e:07:92:0b:b6:6f:a1:b2:22:6d:8e:9c:
72:94:cc:2a:ea:83:5a:d4:65:9e:cb:77:42:d7:36:
71:6d:57:46:65:14:f9:d9:9d:96:15:ac:1a:76:97:
54:17:da:c1:c9:40:a6:d5:ad:4c:4d:1d:e8:c1:87:
63:1d:c2:a4:99:9c:01:15:57:f0:68:bf:ce:0d:a1:
e0:31:01:98:48:49:b0:f6:cd:95:3d:a2:18:12:1b:
5f:ed:8a:34:85:8e:8c:1c:0e:e0:f7:c7:df:cb:8e:
2a:8f:8f:1c:c7:72:45:7f:00:78:5d:8a:3e:81:f9:
bb:8a:cb:33:0f:0e:ab:29:7f:39:04:c6:ad:dc:de:
67:d2:2e:88:0f:b3:82:fc:6c:e1:e9:9b:6d:65:7e:
80:84:d7:19:c2:28:82:2c:6a:9c:e1:51:8b:5e:f6:
76:e5:71:1a:09:e6:82:8f:5c:00:3b:68:b1:ec:8d:
5f:d6:76:43:aa:e6:14:ae:52:be:d5:a5:fb:9e:43:
b4:23:64:f5:d5:77:98:61:fd:2e:10:e4:23:0a:cc:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:72:14:EB:9D:68:5A:51:C0:3C:49:D8:C0:A6:97:C8:48:70:6B
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:96:01:b4:a5:9d:c7:8e:90:b9:00:5d:0a:c3:76:06:aa:54:
b4:33:51:2f:cd:55:66:ca:0e:07:83:7b:99:1e:2a:44:19:f7:
b9:67:ec:4c:12:dd:c0:4e:f5:3c:40:c7:98:4b:aa:c4:42:5c:
e8:3a:ec:9c:98:fc:e3:a3:ff:e5:3b:f6:2e:3c:15:0d:c9:73:
f5:fb:9c:ab:96:1b:00:f7:64:19:b5:39:31:61:59:b9:69:d8:
13:46:27:5f:c6:09:18:94:29:7b:49:70:2c:48:1d:37:1c:0d:
56:9b:ac:61:fd:d0:42:38:98:1a:27:7e:14:98:e7:05:d6:45:
e7:0a:2e:b3:11:cb:d9:f9:29:ce:f2:d8:29:bc:6d:22:11:de:
ea:7f:99:3f:d9:fb:b2:b4:77:e7:5b:60:ad:a0:de:e9:1b:ef:
0d:4f:47:3a:ff:10:06:8a:3a:ad:f8:39:95:37:65:e1:ff:14:
64:3d:95:27:2d:37:9e:bf:95:c3:c0:8d:53:e8:21:00:67:45:
eb:98:4a:d7:8d:82:37:26:2d:8f:e0:f8:8c:c5:ab:b4:f1:32:
2f:cd:fd:a2:8b:2d:b9:1b:9e:71:40:42:ce:e0:59:b3:0d:33:
e3:12:3a:06:8d:2e:7f:cd:5f:13:80:10:d4:82:64:40:ad:ae:
60:24:3f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPUJDf7uIUiexMnoQKBEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0
N2M2MDMwHhcNMjUwODA0MDQwMDUxWhcNMjUwODA1MDQwMDUxWjAzMTEwLwYDVQQD
EygyNDdlNzIxNGViOWQ2ODVhNTFjMDNjNDlkOGMwYTY5N2M4NDg3MDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aGXuX6ITf249gmW1yGZ32ARBTz2
0zlD6eTPS1ndSNoK4nJF95mrpGvz58eHdf6eB5ILtm+hsiJtjpxylMwq6oNa1GWe
y3dC1zZxbVdGZRT52Z2WFawadpdUF9rByUCm1a1MTR3owYdjHcKkmZwBFVfwaL/O
DaHgMQGYSEmw9s2VPaIYEhtf7Yo0hY6MHA7g98ffy44qj48cx3JFfwB4XYo+gfm7
isszDw6rKX85BMat3N5n0i6ID7OC/Gzh6ZttZX6AhNcZwiiCLGqc4VGLXvZ25XEa
CeaCj1wAO2ix7I1f1nZDquYUrlK+1aX7nkO0I2T11XeYYf0uEOQjCsz+tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR+chTrnWhaUcA8SdjAppfISHBrMB8GA1UdIwQY
MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt
ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj
LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApYBtKWd
x46QuQBdCsN2BqpUtDNRL81VZsoOB4N7mR4qRBn3uWfsTBLdwE71PEDHmEuqxEJc
6DrsnJj846P/5Tv2LjwVDclz9fucq5YbAPdkGbU5MWFZuWnYE0YnX8YJGJQpe0lw
LEgdNxwNVpusYf3QQjiYGid+FJjnBdZF5wousxHL2fkpzvLYKbxtIhHe6n+ZP9n7
srR351tgraDe6RvvDU9HOv8QBoo6rfg5lTdl4f8UZD2VJy03nr+Vw8CNU+ghAGdF
65hK142CNyYtj+D4jMWrtPEyL839oostuRuecUBCzuBZsw0z4xI6Bo0uf81fE4AQ
1IJkQK2uYCQ/+w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:06 2025 by rpki-client