Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: Z00/fThC+glvibaRl4kLyYE6fETZSFh4lpRc0l5Q4gA=
Subject key identifier: AA:36:E3:51:8D:55:AE:D7:48:97:72:62:58:C8:CB:1C:7F:D8:A3:F9
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 0198394D5C753DC9057D5C4FE10F27E24A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 15F9
Signing time: Wed 23 Jul 2025 22:00:27 +0000
Manifest this update: Wed 23 Jul 2025 22:00:27 +0000
Manifest next update: Thu 24 Jul 2025 22:00:27 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: X4uruFFu2LI5yEEi+2aYoiAleHXc1JtyczG6gRqeom8=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:5c:75:3d:c9:05:7d:5c:4f:e1:0f:27:e2:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Jul 23 22:00:27 2025 GMT
Not After : Jul 24 22:00:27 2025 GMT
Subject: CN=aa36e3518d55aed74897726258c8cb1c7fd8a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:63:2a:cb:cf:fd:c6:f5:5b:29:4c:e4:fc:e9:
5f:94:51:9c:4e:f3:7d:b6:e1:4c:b9:69:e5:e7:c8:
13:27:6b:74:ff:61:29:1c:64:4d:a3:a6:62:51:3e:
38:d3:ba:bb:2a:cb:46:93:6d:fc:8c:af:ca:44:02:
54:e8:4f:82:de:73:90:92:71:eb:72:8e:de:5c:7b:
01:5b:96:b1:74:d7:c2:e2:59:80:2d:6c:67:cf:84:
37:cb:d9:0f:86:22:df:1a:71:c6:f4:7a:eb:6f:89:
2b:a2:ea:63:0a:3a:ff:67:65:40:44:4f:5d:4c:37:
c7:a2:3f:55:cb:3c:25:01:fd:36:eb:ef:4b:2a:57:
a8:a0:75:1a:6d:3b:d4:23:8b:46:0f:c0:7d:8f:e5:
d1:e0:60:c6:b4:31:7f:82:86:17:58:ed:cd:85:0c:
0b:6a:60:a8:f7:04:dd:b6:ea:00:9a:01:1d:72:36:
a4:de:ac:7b:eb:e6:53:f5:3b:19:62:40:34:89:55:
7a:2c:b8:66:97:3d:33:14:ae:a5:c4:c4:7b:11:f3:
47:4f:57:3b:1b:6d:5d:fb:91:7e:d9:0f:79:4e:a7:
60:39:d0:33:3f:fc:88:02:aa:3d:c2:20:3e:d2:71:
d7:dc:7c:d0:de:51:c9:b7:44:3e:53:de:f1:89:73:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:E3:51:8D:55:AE:D7:48:97:72:62:58:C8:CB:1C:7F:D8:A3:F9
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:a1:28:c8:64:b4:f9:14:80:1e:fa:a6:02:f2:90:ef:46:
f3:88:43:db:e4:36:99:93:d6:18:2c:15:c6:98:9b:c0:86:0f:
1a:ca:c3:3a:f7:43:49:b2:25:5b:bf:e0:b2:07:ad:87:83:7e:
96:5b:c4:6a:2f:ab:93:1f:fb:ce:ff:c7:f0:7e:5c:c7:37:5a:
d3:62:61:eb:f7:5d:48:c9:fa:4b:95:8d:96:d6:b4:b3:ed:9e:
f5:6f:b6:a8:55:a0:91:49:a2:07:73:ec:b7:48:5f:1b:8d:44:
7b:1a:42:52:dd:a4:d0:55:d3:e4:85:52:35:db:33:c3:f0:e7:
a8:1a:01:57:77:84:5a:1f:46:25:1a:f8:3f:b5:fc:c0:b3:4c:
33:7e:21:36:e1:97:a2:10:60:3e:db:29:db:f2:b6:c2:d1:7c:
6a:a9:70:17:ec:d9:06:ba:ef:6e:36:1a:1a:dc:15:54:9a:72:
b1:fa:d3:71:cc:af:ef:90:30:0b:37:f0:fd:c9:44:47:59:0b:
7b:0e:2a:5e:0b:cd:f4:a1:03:e8:00:9d:c1:6d:2e:57:58:a2:
0b:94:c3:00:08:30:02:10:bb:22:f7:2c:02:37:01:51:4a:9a:
ed:00:26:cc:21:0e:c0:7d:f0:ea:a1:3e:bd:a0:e2:89:e2:40:
6c:86:2e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg5TVx1PckFfVxP4Q8n4kpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0
N2M2MDMwHhcNMjUwNzIzMjIwMDI3WhcNMjUwNzI0MjIwMDI3WjAzMTEwLwYDVQQD
EyhhYTM2ZTM1MThkNTVhZWQ3NDg5NzcyNjI1OGM4Y2IxYzdmZDhhM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GMqy8/9xvVbKUzk/OlflFGcTvN9
tuFMuWnl58gTJ2t0/2EpHGRNo6ZiUT4407q7KstGk238jK/KRAJU6E+C3nOQknHr
co7eXHsBW5axdNfC4lmALWxnz4Q3y9kPhiLfGnHG9Hrrb4kroupjCjr/Z2VARE9d
TDfHoj9VyzwlAf026+9LKleooHUabTvUI4tGD8B9j+XR4GDGtDF/goYXWO3NhQwL
amCo9wTdtuoAmgEdcjak3qx76+ZT9TsZYkA0iVV6LLhmlz0zFK6lxMR7EfNHT1c7
G21d+5F+2Q95TqdgOdAzP/yIAqo9wiA+0nHX3HzQ3lHJt0Q+U97xiXO2tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo241GNVa7XSJdyYljIyxx/2KP5MB8GA1UdIwQY
MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt
ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj
LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTuhKMhk
tPkUgB76pgLykO9G84hD2+Q2mZPWGCwVxpibwIYPGsrDOvdDSbIlW7/gsgeth4N+
llvEai+rkx/7zv/H8H5cxzda02Jh6/ddSMn6S5WNlta0s+2e9W+2qFWgkUmiB3Ps
t0hfG41EexpCUt2k0FXT5IVSNdszw/DnqBoBV3eEWh9GJRr4P7X8wLNMM34hNuGX
ohBgPtsp2/K2wtF8aqlwF+zZBrrvbjYaGtwVVJpysfrTccyv75AwCzfw/clER1kL
ew4qXgvN9KED6ACdwW0uV1iiC5TDAAgwAhC7IvcsAjcBUUqa7QAmzCEOwH3w6qE+
vaDiieJAbIYu/g==
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:21 2025 by rpki-client