Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: 5+iI4ZxZuYeErIg4IDdJpY6aPpDZvaOcmp6zWArfQbc=
Subject key identifier: 02:A0:6D:E6:8C:A5:58:6E:8C:2D:EA:A6:2D:C9:25:99:95:0F:C3:AC
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019749D5DCD298E7E1C5927A04C0EC4EBF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:41 +0000
Manifest this update: Sat 07 Jun 2025 10:00:41 +0000
Manifest next update: Sun 08 Jun 2025 10:00:41 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: gIeOZ1AO5bk+mYkv/IyunZd7X0ZfsLftr7xUU0zI1yA=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:dc:d2:98:e7:e1:c5:92:7a:04:c0:ec:4e:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jun 7 10:00:41 2025 GMT
Not After : Jun 8 10:00:41 2025 GMT
Subject: CN=02a06de68ca5586e8c2deaa62dc92599950fc3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ae:3d:b8:30:e2:f9:60:70:65:d3:dd:69:
5d:8a:26:3e:99:4a:00:24:4a:64:67:63:25:a0:b6:
66:41:fd:c6:f4:f1:85:5f:07:e8:75:37:99:9c:db:
71:d5:9f:ea:2f:b3:33:b8:64:94:01:8a:ec:fd:94:
58:78:fc:e0:51:ca:84:33:27:fb:73:85:6f:80:06:
d9:84:e6:05:fc:b2:a4:57:b8:1d:fb:70:cf:6e:76:
c8:bf:7c:3f:bd:f0:3c:ee:12:83:80:dd:22:6b:e4:
fa:c3:d2:e8:ef:cd:e9:e4:ad:5c:66:bc:21:ac:5e:
51:f8:a6:c3:93:8f:c6:87:1e:17:b7:37:b4:d3:5a:
62:46:3d:70:dc:ac:b9:de:31:13:04:ff:db:8d:5f:
cd:b7:2b:2a:a7:fa:c7:a0:5c:61:bb:3f:4b:0d:01:
ea:d5:4c:d8:46:34:c5:88:89:d0:f9:59:c6:8d:21:
3c:7e:4f:36:5e:35:96:25:4f:c9:cc:b2:b1:c4:8f:
c4:9d:77:ca:90:35:07:f3:fe:b9:a5:31:b9:12:13:
64:68:67:c1:28:64:ca:20:05:9f:93:42:b3:9a:df:
0c:c0:d7:97:51:c0:13:66:bc:4a:f5:cc:eb:a5:9e:
0a:ac:ff:4a:99:ca:e7:2b:54:4c:4d:91:85:fe:01:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:6D:E6:8C:A5:58:6E:8C:2D:EA:A6:2D:C9:25:99:95:0F:C3:AC
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ac:94:48:65:78:b3:43:2b:2a:15:6f:0f:d6:06:b2:53:95:
75:ca:25:49:3c:4a:da:6f:02:1a:5f:b1:d3:21:c8:24:38:0f:
46:e0:df:a2:1a:df:cf:02:dd:7d:b1:d3:0a:27:56:5c:99:54:
ea:82:0a:9d:8e:22:8f:f8:88:90:cd:d3:94:1b:59:40:84:34:
0a:c6:ec:de:64:3a:96:9b:2f:1e:8e:de:ab:3e:54:50:b6:84:
fe:8c:19:50:76:01:a4:35:83:32:ce:99:9d:c7:0c:58:d6:85:
67:05:f8:20:cd:55:db:30:35:77:6d:a0:f6:cc:40:c0:0e:b7:
82:d5:ea:9f:99:cb:be:75:35:08:2b:90:26:8f:f3:94:8b:30:
9c:71:9e:e6:1a:dc:92:a3:18:14:1e:e7:d0:fb:ea:26:67:b3:
ec:2a:2b:8c:b5:b5:c3:12:60:be:33:4d:cb:bd:ae:c6:38:8f:
18:48:43:d0:38:ac:39:9d:a6:f7:f4:e8:83:15:db:d2:c0:a9:
bd:0b:bc:f1:db:0f:65:20:97:ed:ce:d4:7f:b4:21:60:b8:bf:
bd:21:c9:a0:81:e6:bf:af:b0:d4:cf:ca:5e:85:1a:06:4e:8f:
89:a0:78:a1:1a:aa:61:4d:67:2a:05:44:45:6c:d5:e0:27:c1:
bc:6b:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:28 2025 by rpki-client