Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: diqWxvz9FRcXrzNOok0epLNfPEgcVKBCSNxF7wKtBpI=
Subject key identifier: 7C:E7:7C:7F:62:4E:E1:98:2B:C9:3F:93:1F:B6:60:2D:1E:81:E0:DB
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01965D5F6314B978DC45DC972611B388FF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 05E0
Signing time: Tue 22 Apr 2025 12:00:54 +0000
Manifest this update: Tue 22 Apr 2025 12:00:54 +0000
Manifest next update: Wed 23 Apr 2025 12:00:54 +0000
Files and hashes: 1: UXRIjhO3UUO4YoZo2r0jseniB20.roa (hash: KSt+2WBEDCtsKI4qArbIQ4v7Y4cNWZ7oIb8Mm9wlcS0=)
2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: gRgE2QbBMGSjyvrSPShsybjnheNg+gKxE0XBWSMzDtU=)
3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:63:14:b9:78:dc:45:dc:97:26:11:b3:88:ff:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Apr 22 12:00:54 2025 GMT
Not After : Apr 23 12:00:54 2025 GMT
Subject: CN=7ce77c7f624ee1982bc93f931fb6602d1e81e0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:34:e5:c9:fe:99:5c:27:95:cc:4f:33:de:
30:a2:ec:46:9e:03:1d:e5:70:39:62:75:bd:73:b8:
39:b3:2f:20:bb:d3:03:0e:2b:08:23:46:25:20:24:
8f:28:63:37:64:97:da:c9:84:2d:57:18:2d:57:16:
69:4e:15:93:93:02:19:96:78:8e:ab:b7:71:6c:7f:
88:ee:63:66:41:8d:5a:e8:44:f9:ad:3c:f0:82:6c:
b1:8e:9e:d2:94:61:f8:d0:22:f4:54:ed:a4:06:ce:
88:6d:ac:0e:25:9a:21:78:b2:69:07:cf:0e:3e:3b:
17:91:b9:87:20:76:b5:ad:f9:21:30:74:1c:ea:1a:
bf:2b:e0:6a:72:f0:e4:a2:e9:05:07:2a:6f:c8:e0:
49:ea:e6:88:27:11:85:1d:af:e4:8f:c7:e5:97:fb:
4b:26:a3:7a:17:f9:1f:1a:0a:a6:28:8e:71:ac:d3:
1d:41:ce:b5:44:42:e9:af:06:5f:6e:72:14:2d:dc:
6a:d9:82:c8:04:01:05:56:65:c3:77:34:03:21:17:
ec:db:d8:a4:c7:d9:90:58:18:1c:65:3b:ec:31:d8:
cc:36:ef:61:4b:a2:96:32:19:96:53:66:dc:d0:94:
2d:3a:eb:27:d3:92:74:19:0f:c2:33:c8:30:f9:6c:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E7:7C:7F:62:4E:E1:98:2B:C9:3F:93:1F:B6:60:2D:1E:81:E0:DB
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:78:f7:00:24:24:37:ec:ed:d1:40:c5:5d:5b:2e:50:58:
9a:54:dd:d9:b1:c5:d8:a2:34:f5:65:02:9f:c0:eb:0d:94:9e:
22:fc:ae:af:d4:6f:69:ad:56:44:54:e1:00:b5:42:3c:39:39:
b5:d8:07:5c:05:f1:41:e2:94:f1:fd:af:f7:b3:23:b4:a3:56:
4f:f5:61:c6:e2:bf:14:70:2e:59:78:cb:1a:eb:69:e7:ed:a3:
48:97:dd:30:88:c3:0a:fa:c8:6a:84:4c:80:9f:0f:d8:6b:94:
f6:37:a9:0d:5d:3b:e9:26:96:5e:9f:55:0c:b1:e6:67:97:de:
18:3a:53:69:2a:9b:93:c5:e9:23:78:c9:ce:6e:3b:55:ed:9f:
43:14:94:4d:aa:04:2f:92:22:34:16:70:fd:0b:71:fe:6c:10:
8f:e6:f9:8e:77:95:55:79:9b:65:9d:25:b6:ce:5b:a3:0d:ef:
dd:87:ad:9d:36:78:4e:c4:d0:39:14:99:76:df:50:7c:75:ec:
f2:d8:93:68:a7:84:2d:5a:ad:03:ed:f8:9a:b8:bf:b7:19:a9:
0c:6f:5d:63:8a:3e:6f:3b:21:17:2a:5a:a6:87:23:67:75:cc:
86:79:22:d9:17:2b:49:d0:59:60:1d:51:bb:a6:ea:7d:0a:68:
43:bd:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:27 2025 by rpki-client