Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: Pw2ROewSkfbkTabFWQ+1ZdABpB6xfD0/PeZmc0iKkQQ=
Subject key identifier: 7E:3D:F4:04:C2:AF:52:1E:38:79:31:CB:47:4B:9C:D0:C2:75:46:9A
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01976F99AFF9073B96338A97138CCCE27F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 066E
Signing time: Sat 14 Jun 2025 18:00:32 +0000
Manifest this update: Sat 14 Jun 2025 18:00:32 +0000
Manifest next update: Sun 15 Jun 2025 18:00:32 +0000
Files and hashes: 1: UXRIjhO3UUO4YoZo2r0jseniB20.roa (hash: KSt+2WBEDCtsKI4qArbIQ4v7Y4cNWZ7oIb8Mm9wlcS0=)
2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: MdT+00vTaasYyVDCj42U5fd7+2glzZ0JREguB7Vz5ag=)
3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:af:f9:07:3b:96:33:8a:97:13:8c:cc:e2:7f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Jun 14 18:00:32 2025 GMT
Not After : Jun 15 18:00:32 2025 GMT
Subject: CN=7e3df404c2af521e387931cb474b9cd0c275469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:93:9f:89:df:28:c7:2a:49:f8:79:d6:8a:
2b:80:7b:1e:18:d1:8d:b2:f7:0e:20:54:df:e5:57:
ee:5d:fa:c7:d9:33:be:fa:6c:5e:35:a2:f1:8a:35:
8a:19:84:2b:d2:94:03:b8:62:ec:4c:0a:ec:9c:13:
7f:82:79:2c:c1:2f:a4:65:62:0d:38:3a:42:4a:6e:
96:3f:24:a8:2d:4c:d8:d0:e7:6e:df:12:93:a1:13:
0f:e2:82:88:bf:67:21:7a:3a:73:fc:47:6e:4e:49:
c3:52:54:42:f6:d1:3e:0c:20:49:28:3c:68:36:02:
74:66:4b:c8:5f:ea:b1:ea:61:1d:9d:37:76:06:5d:
86:5f:77:c5:03:75:41:09:05:5c:f1:7c:99:df:76:
d1:1f:da:12:7b:c2:5a:0b:bd:29:8c:31:98:99:7a:
aa:1d:29:26:12:96:0d:6d:16:fd:d8:1a:6a:a3:a2:
62:b0:fb:d3:19:7f:d0:29:b0:d1:20:46:23:84:d8:
f1:a7:2a:c3:93:91:d0:8b:56:4f:e1:70:24:12:04:
e4:4e:52:27:92:02:83:04:17:79:90:35:e9:5a:6d:
e5:f1:f6:62:e0:4a:56:ac:d6:b1:02:b7:cb:cc:6c:
2f:3e:ac:ea:4f:54:9c:ae:f8:15:20:c9:92:ac:2f:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:F4:04:C2:AF:52:1E:38:79:31:CB:47:4B:9C:D0:C2:75:46:9A
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c4:1e:88:7f:93:fe:22:08:ab:ab:cb:3c:3f:8d:69:61:87:
cd:11:17:bd:b3:f0:0e:93:f0:7c:3b:e6:7a:23:98:f7:a1:90:
56:2c:0e:22:f4:61:49:70:03:bf:e3:f8:16:a9:3e:d6:95:70:
58:cc:67:44:c8:d6:44:4c:ad:c0:bb:03:4e:b2:f4:23:ab:4a:
2b:82:74:14:33:0d:62:c8:5c:30:5a:7a:33:ef:33:8f:d3:2f:
e4:25:0e:a9:1d:3b:1a:db:cf:e1:68:64:61:42:8b:2b:45:8a:
4a:3c:48:0e:61:06:a7:04:c0:6e:83:87:49:25:94:75:aa:7c:
29:f2:c3:ff:63:3a:3b:a4:17:c2:37:88:03:f5:2a:96:fa:56:
86:f1:fd:25:c4:05:e3:cd:44:da:39:ae:b3:cc:08:2c:0d:e7:
3a:50:a5:b1:52:23:db:91:7a:02:46:4b:6d:43:c3:34:30:7f:
43:1a:b1:f3:1c:41:d2:49:1f:60:5c:bb:4a:e0:2d:8f:87:ef:
0e:73:d6:5f:66:f7:d5:b8:7f:b9:17:0c:bd:e3:d1:c7:db:f4:
d3:53:74:4e:b6:95:be:ca:97:fb:49:f9:53:76:4a:62:ce:c6:
fa:b4:55:7c:5b:7c:d9:ef:21:01:9b:88:11:ac:86:7f:a7:7d:
23:b6:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:22 2025 by rpki-client