Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: b0R5lAY4AVEZ06gQcrNEfr4Bf1h/6AZbG2rezd4w/8c=
Subject key identifier: B9:83:D3:1F:39:33:B2:24:6A:9F:67:67:52:57:9B:38:31:E6:65:EC
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 0197B5FBC9273DBC1E058266D5BCC786FA8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:06 +0000
Manifest this update: Sat 28 Jun 2025 10:01:06 +0000
Manifest next update: Sun 29 Jun 2025 10:01:06 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: TzLqlzWq1ybXpLfOr42FguD1F3HBQ/t54mBXiYF2JG4=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:c9:27:3d:bc:1e:05:82:66:d5:bc:c7:86:fa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jun 28 10:01:06 2025 GMT
Not After : Jun 29 10:01:06 2025 GMT
Subject: CN=b983d31f3933b2246a9f676752579b3831e665ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:c1:b9:f4:3a:17:98:26:27:51:df:3a:94:
ff:c1:1f:76:42:35:7e:61:3b:cc:41:75:de:a4:a2:
25:c8:27:1a:14:a7:27:0a:f0:17:d0:39:3a:75:d6:
7f:3c:8e:aa:d4:7f:bf:3d:71:3c:2b:81:a5:df:53:
e7:97:ae:91:5e:06:2c:ee:43:fc:6c:d9:b6:dd:c5:
16:65:2b:2a:af:cf:8e:a4:cf:9f:a4:26:a7:14:9a:
53:a1:b7:a5:f0:f8:40:43:01:06:8d:9c:2d:64:7d:
48:36:6f:0d:a6:85:c6:89:b4:ed:a9:8b:2e:79:64:
5b:57:d9:cb:72:35:8b:34:0b:52:4b:30:57:d6:42:
bf:43:9e:64:57:21:30:b9:5a:8e:35:0b:cc:a4:7a:
dc:c5:3f:7a:36:70:6e:c1:e2:5a:84:15:d6:f4:97:
17:fb:70:5b:f9:fd:46:83:73:cb:c7:ca:47:f4:60:
30:75:b6:6b:6b:15:f7:09:b9:92:5e:6b:64:a9:91:
98:07:dd:5f:7b:d1:06:06:e1:72:d8:e1:e7:b2:0b:
aa:61:1c:d2:e5:d4:f5:9f:3e:e0:eb:25:78:83:30:
83:c7:24:aa:93:68:11:92:90:70:79:86:13:5d:91:
0e:2f:18:f9:45:30:ae:98:ff:d6:72:bd:20:cd:17:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:D3:1F:39:33:B2:24:6A:9F:67:67:52:57:9B:38:31:E6:65:EC
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:35:a7:43:26:e4:b7:cf:c0:34:99:19:13:c1:c6:6f:4b:
ad:86:ce:45:28:d4:19:28:c3:09:df:83:f0:81:2c:56:ec:ec:
3b:5c:98:59:be:86:3e:e1:e1:56:83:a0:1b:b0:c0:8b:b3:fa:
d3:e1:70:1b:1d:24:c5:94:12:3e:7a:b4:18:7d:96:8a:b9:3a:
27:bb:a5:00:bf:5a:c5:f8:f6:d7:6f:33:34:5e:6e:7c:71:4d:
0b:32:eb:49:e5:03:8f:43:3d:5a:f7:e4:16:1b:5d:af:3b:6a:
a3:69:f0:46:9a:93:b5:45:9b:8a:0a:96:38:26:9c:6d:26:d7:
0a:77:d5:4d:4f:6a:da:3f:9e:d5:61:93:6b:76:2d:8f:57:07:
26:93:a5:36:7c:f3:6a:88:32:83:b1:f6:5d:73:86:cb:dd:f1:
11:e8:66:0b:e4:f1:7e:31:81:fc:07:23:e0:9c:41:d7:d0:6e:
c7:58:8e:a0:5b:9f:76:87:13:7f:b8:7d:a3:cc:cf:eb:0d:d9:
a5:dc:af:19:58:91:63:1d:f5:d2:04:7d:82:3f:75:6e:6f:f7:
99:ca:c1:5f:7b:3f:fa:dc:22:a9:7d:87:d5:5a:76:3e:37:45:
26:70:c0:49:b5:61:74:d5:97:dd:5a:d7:1a:ce:99:c0:28:2b:
51:13:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:54 2025 by rpki-client