Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: YtlrSdeWMuhbeBzHuYyG9sVymtzU0XRK4Ib0d+xHrXw=
Subject key identifier: 57:25:99:7B:3D:EA:9C:2C:9B:16:C0:41:F5:35:80:C7:0B:D9:2C:A6
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019A3D9432DE65836F891922E7137D3C3C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 07E5
Signing time: Sat 01 Nov 2025 04:01:53 +0000
Manifest this update: Sat 01 Nov 2025 04:01:53 +0000
Manifest next update: Sun 02 Nov 2025 04:01:53 +0000
Files and hashes: 1: 1hp0FN2Zg5pDjgoZFlg4J_guib0.roa (hash: Q0hgLFUWzZKKVmCPawFvjEl4SPCELVdqx/7++z9jxEg=)
2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: sDO9xw5nKQnaC18WYWLSL+MGPsfPUWZdNLlb8/btk0k=)
3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:94:32:de:65:83:6f:89:19:22:e7:13:7d:3c:3c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Nov 1 04:01:53 2025 GMT
Not After : Nov 2 04:01:53 2025 GMT
Subject: CN=5725997b3dea9c2c9b16c041f53580c70bd92ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:96:84:ff:af:64:a6:96:fd:73:33:bc:78:
27:12:27:39:d9:de:2f:52:4f:fb:68:e2:b1:9c:cc:
d2:f6:44:73:9e:b6:12:dd:bd:53:99:09:fb:a6:ac:
b3:a7:2d:f4:6e:7a:d1:20:62:f9:1b:83:8a:d4:11:
d4:8a:60:7c:7d:f3:91:74:3c:59:b5:82:9d:3c:7d:
9a:81:9f:2a:b9:43:60:8d:d6:58:8d:83:ff:45:00:
7c:52:8b:7a:13:3b:22:db:6c:69:6e:29:aa:64:e4:
52:bd:36:7d:e0:e3:d0:a2:c4:72:f1:67:bc:ed:be:
4a:bb:4b:15:74:6a:a2:1c:42:55:20:d9:ed:d5:a0:
02:57:d9:87:c1:e8:5a:07:34:52:0b:10:37:38:77:
28:41:af:3c:2b:c6:54:43:7d:83:1e:de:6c:3f:9d:
07:d5:51:85:4a:c0:1b:8a:43:f7:19:05:a2:ed:7f:
9d:47:d4:d0:14:3a:a1:5c:1b:d7:84:56:69:49:9c:
67:ce:41:48:b8:09:3d:6c:8d:5c:3b:42:2f:17:99:
67:e3:24:b1:0d:7f:0b:ac:98:44:c1:59:04:6a:d1:
1d:e3:c0:a5:ed:2f:a4:85:47:9e:3a:91:ef:78:f7:
c7:a1:70:91:e4:35:26:f0:0f:c6:a3:9a:76:b8:52:
2f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:99:7B:3D:EA:9C:2C:9B:16:C0:41:F5:35:80:C7:0B:D9:2C:A6
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:68:6c:c1:51:56:e7:35:76:c8:b7:41:00:d9:46:dd:8b:ea:
57:d9:4d:14:30:9d:8b:70:76:93:d4:2a:4a:8f:94:f8:c5:59:
6f:32:51:69:ad:8f:0a:64:c9:39:bd:72:60:5a:88:7e:47:50:
fc:83:61:df:ca:8d:ab:a5:42:a7:16:77:07:6e:77:d1:6b:59:
4e:20:c2:b9:b6:a6:0b:42:25:16:f2:36:c9:48:0a:fb:26:a6:
47:7b:8c:53:cf:77:7b:4b:20:ef:79:b6:a9:23:88:fd:b1:7b:
fd:67:36:99:6a:10:28:d5:4c:cb:03:5a:09:df:68:ee:e7:e9:
6c:08:e6:58:4c:2b:70:83:d5:e9:e0:b3:e0:5d:34:1a:f2:13:
61:dd:23:56:bf:06:d7:a7:a2:ae:e9:33:d1:9c:d2:7f:33:cd:
1e:de:46:be:0e:a5:ed:84:d7:21:f3:c5:96:dc:9d:e7:d8:3d:
19:61:9b:1a:c3:e9:2f:64:e7:88:a5:4a:8f:28:6b:21:b8:23:
dc:35:19:e9:85:9d:ca:0d:fd:30:eb:56:a5:8c:c0:a7:23:1d:
18:09:d9:fc:1d:63:ed:a9:60:5a:53:8e:c2:f9:ff:e0:ee:21:
3f:48:4c:e3:e8:c4:21:39:a8:5d:13:9f:a1:86:df:d4:52:20:
ec:a3:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 11:01:28 2025 by rpki-client