Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: YfSAoxQo5O0QtJW9OMnMALiMIokzebGbkEURQitDz+Q=
Subject key identifier: 8D:53:61:42:77:83:10:5B:6A:3D:30:F7:A4:81:89:1B:A7:23:87:69
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01969DF5FE3B7DB7D71E59D702BA66E124F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 01:01:06 +0000
Manifest this update: Mon 05 May 2025 01:01:06 +0000
Manifest next update: Tue 06 May 2025 01:01:06 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: v77cDmTODassLOEdGUvhpAMOPXmFVoUCrGZomxYd6OA=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:fe:3b:7d:b7:d7:1e:59:d7:02:ba:66:e1:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: May 5 01:01:06 2025 GMT
Not After : May 6 01:01:06 2025 GMT
Subject: CN=8d5361427783105b6a3d30f7a481891ba7238769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:e6:4f:d9:fb:af:00:e8:ea:ff:23:7a:79:
35:ac:0f:bd:10:ff:66:34:18:12:dd:6d:21:06:d4:
ad:26:57:d0:bf:84:41:df:bb:69:ee:71:bf:77:3e:
f4:a8:3b:91:bf:c8:81:59:4d:c9:ec:f6:05:9a:24:
fc:79:30:1c:64:2f:5e:83:84:b4:11:82:ba:eb:cd:
3a:d7:1c:50:86:f8:48:6c:bd:83:f4:08:20:b7:4d:
18:a7:75:5a:f3:6b:f7:dd:d3:5e:17:39:84:ec:b8:
7c:b5:11:a6:6a:80:56:b8:eb:61:d9:78:f0:d7:0a:
bc:e1:a8:9e:18:80:d5:3c:08:f5:e5:13:13:83:51:
b2:79:83:8a:7e:54:d8:b8:ed:8f:78:fb:1a:1a:8a:
da:a3:ea:18:ca:ef:59:e9:2c:f2:0c:84:65:c7:d3:
3e:df:50:2c:a6:dd:e9:dd:ed:52:92:bf:57:66:21:
fd:79:f3:48:30:d3:76:7b:4b:ad:c9:80:78:ea:a3:
5e:27:b3:f1:59:b8:c6:8f:b5:de:50:9f:4b:9d:f5:
18:5f:7f:a9:06:29:b9:92:b9:fe:30:cc:c5:c7:78:
34:bf:78:63:24:bf:9b:a7:b3:6a:cc:af:07:e4:49:
8d:4f:f8:92:72:6b:54:6e:f8:0c:fa:5d:fc:b3:47:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:61:42:77:83:10:5B:6A:3D:30:F7:A4:81:89:1B:A7:23:87:69
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:e9:40:6b:5b:fa:7a:eb:b9:09:93:44:81:bd:30:ab:b8:
19:ac:17:39:94:8b:fd:81:47:d7:c0:73:2f:e2:72:36:66:fc:
45:01:58:a3:e6:31:46:33:00:2a:4b:6a:1d:3d:4f:b0:e6:4d:
21:4e:e0:94:a9:38:ec:2b:d8:c0:88:45:2a:07:25:d4:1d:9a:
2c:b8:57:a0:78:58:0f:8d:dc:93:86:28:77:54:3e:ed:5c:81:
0f:1c:3b:7a:74:4f:c9:26:83:f8:ad:3c:93:67:e1:0b:f7:82:
ef:b2:b4:b3:ad:80:95:93:a8:69:86:00:92:fe:2a:39:df:81:
32:06:ad:73:cb:0d:28:34:5e:7e:b9:ce:03:6a:7e:a7:bb:92:
1a:c3:09:ce:41:4a:c5:7f:eb:91:2a:c9:51:cb:22:4b:57:a8:
29:6a:ca:81:b4:cf:95:42:2c:40:38:31:69:78:cc:1a:21:21:
19:f9:87:fc:2c:37:59:08:5d:50:37:7d:20:67:7b:d3:da:a8:
61:d3:06:c4:ee:a7:b5:8f:61:7e:86:51:c6:03:15:45:98:74:
ee:0f:4a:00:90:bc:bf:f1:fd:72:b5:a9:e4:39:7f:59:0d:77:
13:ee:99:ec:72:2b:10:91:af:b9:e1:65:87:23:53:a2:45:8b:
3c:4b:22:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:54:48 2025 by rpki-client