Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json)
Hash identifier: pgq3wsBTSFrAjsgEQMIk/cc9OrrZVzhZWjkJzbGNk8s=
Subject key identifier: 3C:93:4C:B0:E3:F4:1F:4B:A4:A6:6F:0A:46:97:5C:2C:40:93:EC:9F
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 019A183CEC3010DE4139775F4F02BEC872D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 22:00:37 +0000
Manifest this update: Fri 24 Oct 2025 22:00:37 +0000
Manifest next update: Sat 25 Oct 2025 22:00:37 +0000
Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=)
2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: NIO/3GUCaU0dywog7+9u39RZjdgayy6SYKd+/8YwGm0=)
3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:3c:ec:30:10:de:41:39:77:5f:4f:02:be:c8:72:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Oct 24 22:00:37 2025 GMT
Not After : Oct 25 22:00:37 2025 GMT
Subject: CN=3c934cb0e3f41f4ba4a66f0a46975c2c4093ec9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:88:dc:34:40:b4:76:07:0b:94:aa:d1:42:
79:11:c3:fa:9d:ea:16:f6:a1:d8:f2:19:b2:f1:30:
5d:da:e9:de:3f:bd:9e:e5:c5:3c:27:0b:12:c4:c3:
65:b4:da:a5:21:be:d3:a5:74:87:58:d4:b8:25:66:
17:a5:53:40:a0:d4:ee:44:0a:3f:d4:aa:55:db:65:
25:f2:0a:f5:2a:31:5e:78:13:5f:5e:2b:4a:0a:f0:
96:c8:91:7c:27:9c:25:cd:7f:26:cb:7d:7a:e1:8d:
dd:8d:5c:85:66:86:9a:10:09:67:05:8c:e9:c7:9f:
43:4f:12:ce:8c:e0:62:29:0b:97:13:48:ec:d5:c9:
33:8f:68:cb:e9:ab:5b:71:3e:d0:67:48:7c:0d:2d:
04:11:1f:58:23:2d:d6:83:db:c8:17:b7:82:de:d2:
7a:43:59:e2:c0:43:9b:3b:b7:52:6b:7d:47:0a:83:
cb:44:6f:d4:9f:8d:c4:53:27:d7:91:a0:ea:b9:a9:
80:83:fe:96:94:cd:e2:1f:97:63:dd:8f:2d:0f:e5:
5a:6e:3e:2b:cd:f3:05:29:4f:1e:fd:c8:2f:34:4e:
78:c0:17:1e:98:83:36:6e:48:3a:43:18:60:22:41:
55:56:d4:c8:04:42:3d:2b:69:20:57:00:d1:97:be:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:93:4C:B0:E3:F4:1F:4B:A4:A6:6F:0A:46:97:5C:2C:40:93:EC:9F
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d4:e8:46:51:3b:0d:4d:66:46:65:d4:b6:39:f1:6b:db:16:
de:dd:60:f1:9f:af:21:fa:1e:a1:c0:c8:b8:c0:f4:a6:6c:ac:
a2:66:c1:1c:13:a0:1f:aa:e7:7e:a1:a1:55:43:00:7e:c1:2e:
91:b2:30:66:c6:dc:b5:cf:94:37:b7:74:dd:5f:bc:08:74:1d:
30:3a:a6:30:5e:38:38:80:41:50:35:13:c9:da:53:ea:72:2f:
cd:ce:f0:11:1d:46:d8:7d:8d:18:85:de:24:11:fb:8f:a7:1b:
cc:1f:f8:dd:93:6c:cc:1f:f9:5d:54:44:17:e1:fe:a3:34:b7:
83:0e:52:f9:87:02:19:8e:28:7f:ad:8a:a9:69:74:8e:19:11:
9f:d9:67:78:18:8f:49:20:24:37:00:82:8e:77:81:54:7b:95:
12:b9:84:bf:72:a1:7d:f2:db:b5:3a:09:3f:7f:c6:e6:f4:bd:
5a:d9:f2:a2:3f:67:98:85:ae:d3:2e:7a:3a:71:2e:3c:c1:15:
ef:69:83:0a:36:3c:14:10:e6:98:9b:af:a9:cf:48:1f:ed:1c:
48:fe:3f:9a:df:7c:1e:59:b2:27:09:62:3f:73:52:71:8f:03:
4a:ec:20:17:68:07:a4:bd:1a:7e:63:11:54:95:0c:0c:10:b1:
af:ab:28:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:14:38 2025 by rpki-client