Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: jT0v6qRnsWt/OMdLxL/8QbNT+VPdfepU+S6J8pRoM2w=
Subject key identifier: 68:14:E2:BA:AC:85:27:49:EC:4E:C6:AA:64:01:D0:84:DF:2B:DE:02
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 0198D7A940782F16596352221E728DE88416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:00:50 +0000
Manifest this update: Sat 23 Aug 2025 16:00:50 +0000
Manifest next update: Sun 24 Aug 2025 16:00:50 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: cJ3kE9xwgwXpqapcCoMZg4YLFjJjj+koVX+31+z/w/Y=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:40:78:2f:16:59:63:52:22:1e:72:8d:e8:84:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Aug 23 16:00:50 2025 GMT
Not After : Aug 24 16:00:50 2025 GMT
Subject: CN=6814e2baac852749ec4ec6aa6401d084df2bde02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:f2:18:e0:22:9b:c8:ff:56:26:74:dd:3a:
45:e7:76:d0:97:15:5d:cf:7f:f1:e8:3d:4f:db:1f:
8d:2f:e3:02:04:e3:ba:b1:25:b0:14:8f:f2:92:97:
29:35:1c:e0:ca:66:72:45:40:5e:f5:a5:94:d2:05:
fc:29:ef:14:fd:aa:42:41:d4:8a:75:ff:f7:0d:13:
58:f2:fc:ce:db:c5:d1:61:e4:4a:55:14:28:cf:29:
61:f0:d7:f3:0f:a8:d5:c9:30:c4:d1:7a:54:9d:69:
b5:47:cc:9f:b2:e2:54:1d:25:e5:14:5f:e5:10:a9:
2e:c5:88:20:6a:68:8a:4c:2e:0f:91:96:28:89:e2:
d1:4d:59:38:7b:11:da:f0:7b:37:e0:f4:12:c1:8f:
07:96:1d:ce:0c:2c:be:07:55:90:f1:f9:33:3f:d1:
9d:73:4d:86:55:a9:0e:b5:f9:45:a5:7f:5f:cb:5e:
79:d4:2e:83:9f:22:62:1b:f7:a6:9b:89:d9:86:ce:
fa:39:e9:96:aa:b4:35:b5:57:be:00:ac:42:01:2d:
66:22:bf:c2:33:4b:56:ab:1e:70:7a:58:0d:0e:67:
a2:37:87:d1:08:57:ce:9f:50:c2:79:ee:c8:6c:56:
4a:1d:cd:61:49:ec:68:66:6e:3c:8a:08:98:19:7a:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:E2:BA:AC:85:27:49:EC:4E:C6:AA:64:01:D0:84:DF:2B:DE:02
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ea:b7:dc:e2:23:74:b3:49:dd:cb:30:96:c6:e8:52:dc:c7:
e9:43:e0:3c:5c:5e:4c:14:69:a3:b3:3a:31:64:51:6e:25:06:
3f:49:a6:38:c4:19:ec:62:19:51:01:ae:e5:32:84:d9:33:44:
1c:0a:ba:dc:57:ce:6c:39:07:40:e7:6e:de:b0:65:42:98:28:
2b:46:0a:28:d8:d6:3d:d1:07:d2:2c:58:ef:fa:87:d2:76:4c:
1b:49:b5:8b:4e:4b:bc:42:b2:9c:b4:7b:eb:cf:55:4f:1e:6e:
d5:d3:a4:68:90:25:92:24:b3:1a:2b:9b:90:df:87:03:b6:3e:
9d:db:47:f8:90:88:0c:5b:45:ea:fd:7a:80:a8:f2:44:29:79:
a0:c9:35:9d:13:9a:b1:4c:3b:37:f6:b1:97:8c:ac:9e:52:58:
2f:44:92:2a:cd:c1:f0:9a:2a:1b:39:b2:0f:59:58:ec:e1:78:
fc:7a:7c:f3:ef:e7:24:c5:34:66:a1:e2:c7:cb:00:a9:65:e1:
b9:07:63:0f:16:fc:72:28:dc:83:f4:dd:70:de:96:53:7b:46:
8b:c2:38:29:b1:a5:4f:b7:65:a2:80:14:52:d6:a6:01:0f:82:
4a:4e:45:8a:79:9a:a0:1b:d2:d6:de:59:99:d9:3b:60:5d:55:
b2:71:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:47 2025 by rpki-client