Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: OXi6oFNohjzik3OolECtporjsyZpWJ9bkDAwCmlmG/Q=
Subject key identifier: F8:55:7C:FC:FC:14:B9:86:57:F4:A6:23:5C:5C:24:49:7D:4F:61:68
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 019685EDF2DACB6FDD379C6BA842CB8CC253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 05F5
Signing time: Wed 30 Apr 2025 09:01:25 +0000
Manifest this update: Wed 30 Apr 2025 09:01:25 +0000
Manifest next update: Thu 01 May 2025 09:01:25 +0000
Files and hashes: 1: UXRIjhO3UUO4YoZo2r0jseniB20.roa (hash: KSt+2WBEDCtsKI4qArbIQ4v7Y4cNWZ7oIb8Mm9wlcS0=)
2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: JCHejy+Tr4v+BaetBJZyKLERDQJ1o0Yh+5buvjZgBm0=)
3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:f2:da:cb:6f:dd:37:9c:6b:a8:42:cb:8c:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Apr 30 09:01:25 2025 GMT
Not After : May 1 09:01:25 2025 GMT
Subject: CN=f8557cfcfc14b98657f4a6235c5c24497d4f6168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:06:c9:80:e8:c2:ec:c9:e1:ae:ab:4a:94:
3c:b3:ae:ac:41:03:38:5f:59:06:ad:e6:d4:1a:cf:
12:7e:49:e6:a4:1c:7f:46:f5:83:6a:67:8f:56:83:
4f:81:0c:ef:51:45:28:c0:97:70:10:1e:24:91:d3:
e6:0f:8f:92:41:8c:b9:d5:95:32:bc:62:14:f2:7f:
a0:64:3c:36:82:3e:49:17:1e:5b:b9:80:94:9f:f3:
3e:6e:b0:5a:bc:0e:f2:09:92:80:b6:e2:3e:a5:7a:
fd:74:07:ca:e8:96:4f:df:03:bb:99:79:9a:54:f2:
c7:39:8f:e6:8d:eb:1b:c0:21:4e:f1:02:1c:1f:61:
6f:73:37:bd:38:f4:7d:c8:d3:cc:66:a0:6b:9a:8d:
0c:08:98:b3:67:ea:e0:35:dd:0e:cb:ac:4d:a7:1d:
2a:67:bf:07:eb:98:f5:3b:18:0e:00:74:ab:04:1c:
02:6e:7b:b9:2d:bb:ba:7e:5d:68:76:48:77:8f:5d:
78:64:27:3e:50:5b:e3:82:47:8e:42:53:51:c8:32:
9d:69:3e:6f:5c:b8:47:ad:d9:8c:f4:3c:ea:36:67:
c2:ad:24:76:a9:bd:bb:d0:8e:95:f9:9e:d7:b7:90:
a6:8c:60:05:23:51:b8:40:c7:ea:85:69:ee:95:37:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:55:7C:FC:FC:14:B9:86:57:F4:A6:23:5C:5C:24:49:7D:4F:61:68
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:91:bf:22:5d:02:69:5d:74:11:3a:54:03:43:97:f9:1d:20:
a7:d5:47:07:70:fb:d6:9b:33:7a:d6:07:a2:47:6e:1a:8c:ce:
85:f7:7f:c5:52:dd:8f:32:f5:0a:ea:5f:fb:31:bc:ea:cb:0b:
1a:31:e8:dd:ef:e4:20:9b:90:03:c0:1c:f8:a7:74:b2:06:cb:
0b:48:7d:28:0d:04:b0:2e:66:ba:05:5e:58:09:cb:d7:58:ce:
5a:44:65:1e:af:ec:0c:24:90:77:f4:79:03:74:df:cb:6d:1b:
3b:79:2e:17:66:f5:f2:5a:6e:3c:1f:65:94:f7:9e:5a:0f:bf:
a5:c5:cc:3b:1f:3d:1e:b3:ad:9d:03:a9:d8:42:9e:8a:03:35:
55:2e:fd:d2:68:ca:08:0c:01:e9:7d:7c:3f:9c:ab:87:7c:c2:
3c:82:62:40:1d:32:e6:23:74:8a:07:d3:04:15:fa:ec:51:c7:
d0:53:31:68:67:8d:a4:a9:ef:19:42:49:cd:3e:4c:b4:23:3a:
ad:06:d6:34:2d:d6:5f:d9:7f:69:f2:e7:f4:f6:b8:8a:50:f4:
0e:1f:1a:c2:19:17:46:e6:29:dc:93:01:04:be:96:f9:54:19:
7b:04:65:83:f7:07:7b:19:03:14:4b:97:b7:65:5e:0c:50:7a:
7d:75:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:38 2025 by rpki-client