Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: buzCcQHFFgY3K+g9aiU4oIANWHobz7fxXouWri7l7Ms=
Subject key identifier: F5:E6:4B:C8:9D:F2:F1:26:E6:B1:B7:52:CA:55:79:92:7A:A8:AB:BD
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 01964EC76516BE54BE2E7857483B6EDF6140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 16:00:12 +0000
Manifest this update: Sat 19 Apr 2025 16:00:12 +0000
Manifest next update: Sun 20 Apr 2025 16:00:12 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: gkUuW2Ua/BUlaut2VQ/0a+bogRkVpXCEl8zXLcTRcvw=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:65:16:be:54:be:2e:78:57:48:3b:6e:df:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Apr 19 16:00:12 2025 GMT
Not After : Apr 20 16:00:12 2025 GMT
Subject: CN=f5e64bc89df2f126e6b1b752ca5579927aa8abbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:ac:63:73:29:79:b4:55:69:f3:b5:7d:7e:
75:a9:73:49:77:c6:b8:80:23:a4:fb:2d:ed:e0:7b:
7a:81:5e:d8:98:16:82:28:c8:20:bd:01:0e:95:62:
2e:21:4e:75:41:04:27:e4:74:bf:f5:d2:e2:a1:21:
95:75:d8:cb:ac:c0:49:c7:00:1c:f0:c7:7d:4f:4f:
66:53:96:b3:a3:71:19:54:7c:f4:c7:9f:cb:32:2c:
aa:3f:d5:6d:be:76:1f:08:a0:08:c7:29:8e:89:ae:
8d:e4:c8:86:51:c1:de:16:50:0b:67:fc:6f:91:e1:
8c:b5:45:c3:23:a5:3d:47:16:71:cb:00:67:f8:53:
6e:67:f8:fc:f0:6f:e9:50:84:73:8d:e9:d0:4b:83:
c7:d8:8f:82:17:49:52:5e:dd:fa:6f:5e:66:d5:a3:
fa:77:e3:46:e1:c3:fb:22:70:ee:12:b0:27:75:43:
b1:a4:1c:6a:da:7b:54:ef:6c:09:dc:2d:1c:ae:c5:
11:7e:0d:b1:d1:83:cf:7a:91:b9:04:a6:29:e6:c9:
74:21:88:5d:e6:5c:fe:4c:a6:56:b4:e5:6a:f8:2d:
2f:ed:b1:ba:23:a9:60:ae:61:2b:85:4b:2f:5d:61:
e9:2b:fb:cb:d1:30:cb:8a:2d:47:9c:ff:3c:13:86:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E6:4B:C8:9D:F2:F1:26:E6:B1:B7:52:CA:55:79:92:7A:A8:AB:BD
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a7:ff:3f:6c:d2:88:b2:fd:f2:1b:5e:af:c5:47:c2:a5:0b:
6c:23:f4:8b:5c:10:f0:f7:6c:4a:6a:ac:10:06:fc:25:52:30:
f2:c9:5b:47:2f:17:68:9e:d7:79:cb:5a:d2:40:d8:5e:e0:ca:
9d:fb:48:12:d5:a8:0d:40:bc:c9:7d:40:a5:9f:39:40:a2:9e:
a3:f6:78:d7:75:86:f1:0a:e2:17:12:57:df:a7:c6:d3:98:61:
16:2d:ad:a3:fb:87:2c:14:aa:40:82:dc:7d:92:77:d3:48:88:
0e:55:24:a0:e8:a4:b8:6d:a7:86:a5:8a:72:ab:28:07:70:f0:
22:eb:b5:f2:2f:55:3c:50:e7:d5:78:9d:0e:8f:04:69:2c:a5:
8e:8e:9a:02:75:8a:df:a6:fb:85:55:17:aa:29:62:05:59:a5:
04:c0:9f:9c:35:9a:a9:b8:00:35:7f:a6:c3:38:94:d0:ec:72:
d5:e3:76:d4:38:b8:02:fd:3c:96:af:32:dc:07:f1:dc:8e:01:
c6:d4:66:ee:fe:a7:f4:41:8b:b2:35:cd:b4:7f:de:55:26:e0:
52:7f:85:81:fc:a3:67:1f:fc:66:37:ca:7c:cb:9d:ea:23:fc:
67:70:ee:20:ab:fa:35:6e:ea:8a:b6:83:da:0d:97:00:e3:eb:
38:e6:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:23:28 2025 by rpki-client