Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json)
Hash identifier: dg3iT+bouwiIacmX8XKo7sNPwNyo4+AGJB/G9vZDRro=
Subject key identifier: 13:BA:7F:93:B2:95:E3:40:C6:DD:93:0C:12:2E:C5:C7:08:96:83:21
Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Certificate serial: 01988B7CBE98A12F2F43DB5CB0FEA2117EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
Manifest number: 0703
Signing time: Fri 08 Aug 2025 21:01:04 +0000
Manifest this update: Fri 08 Aug 2025 21:01:04 +0000
Manifest next update: Sat 09 Aug 2025 21:01:04 +0000
Files and hashes: 1: 5-hHI6qwVnKq___GvukeGIgiWgA.roa (hash: 2gmLFI2YLEPz4i5j9o2f2h5Evmn8mJBa5u25ZDjJdJ4=)
2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: Y1IFenQtc05uxVvjXjvJ9x3GkTFS1yf+S+ud6gjAAz8=)
3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:be:98:a1:2f:2f:43:db:5c:b0:fe:a2:11:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b
Validity
Not Before: Aug 8 21:01:04 2025 GMT
Not After : Aug 9 21:01:04 2025 GMT
Subject: CN=13ba7f93b295e340c6dd930c122ec5c708968321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:d4:14:a0:a4:3c:75:47:98:67:e6:cf:4c:
97:18:6d:2b:0c:15:6f:50:0e:f6:bf:df:07:63:6c:
83:d0:04:68:36:9d:0c:41:59:ec:82:11:74:62:33:
a4:6c:da:4d:05:e1:d0:66:c3:fa:fe:8f:10:09:a1:
90:cb:b5:30:2b:ce:19:b4:17:f6:76:85:04:29:97:
d9:f0:0a:64:99:f4:58:ae:e6:6c:ac:82:d3:a3:64:
f6:8d:e4:bc:d0:f6:69:51:75:90:b2:84:2f:39:ca:
c2:2f:2b:ff:19:c9:2f:17:77:a8:8c:9a:9d:3d:47:
a9:c2:73:51:34:d6:44:ec:c1:33:0b:98:e5:93:e8:
7c:0f:8d:0d:bf:9c:de:ee:30:ac:0e:32:6d:e0:72:
65:4a:3b:3b:bf:72:73:50:3f:18:dc:ab:c9:c9:54:
80:3f:d2:e4:02:1c:38:d8:5b:68:cc:4c:fe:59:ea:
57:21:a3:64:25:28:79:22:1d:c1:8a:3c:cf:2b:93:
aa:ea:b6:1c:07:8e:6f:26:98:77:f8:21:d3:16:7b:
63:c7:d7:8a:24:a3:35:1b:fd:7b:15:a1:db:9c:96:
12:0b:a3:2b:8b:d0:06:dd:24:b9:1e:59:ce:74:48:
77:f6:05:ad:c0:3b:c6:3c:94:e4:b9:3d:da:19:79:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:7F:93:B2:95:E3:40:C6:DD:93:0C:12:2E:C5:C7:08:96:83:21
X509v3 Authority Key Identifier:
keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:8f:7b:3e:59:4f:88:cb:f0:14:a2:bf:c1:38:d8:dc:34:
19:91:17:0e:a1:23:d1:53:f0:da:56:56:92:a6:2f:60:63:a3:
a4:29:be:7f:80:1e:6e:6d:3c:12:b0:cd:82:a1:7e:c7:c0:37:
0d:b0:15:6e:ee:29:e8:17:92:53:e8:9c:58:03:24:06:9a:d3:
51:03:4b:db:4b:0e:e9:d2:cb:02:33:ed:3e:de:37:ec:ce:e1:
8d:a5:19:98:35:34:b7:d2:8a:79:30:52:11:4f:19:13:89:99:
b8:76:55:15:10:e0:09:98:eb:1f:0e:73:fe:ee:5a:a1:ac:67:
1b:5e:19:2e:47:56:1b:74:8b:14:c8:50:86:27:4c:0a:01:54:
b6:87:c9:c5:ad:94:5c:ae:55:51:e0:21:06:52:db:b1:03:a2:
82:eb:40:a6:61:a2:79:2f:a7:c1:df:e9:b2:49:95:2e:c3:5a:
82:81:65:2e:50:54:eb:c6:d7:d4:6a:af:80:05:1c:e0:d4:83:
fe:f4:6e:03:b8:25:02:c4:50:e7:92:8e:3c:23:9c:90:3a:df:
0d:9b:08:37:27:48:71:1a:bf:1f:d1:a2:06:90:07:b8:76:72:
0f:4a:a7:49:86:cf:bb:f9:d3:7f:83:ae:7e:71:35:a5:72:0a:
91:a3:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:59 2025 by rpki-client