Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json)
Hash identifier: CJGJEBktS5vP7hEbEqEGJ2Rbl+k5P9tEonMuTyQDNaA=
Subject key identifier: C5:9C:28:8A:40:0E:89:BF:E4:30:80:92:C7:B2:D8:40:6C:6D:9E:65
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 018F84EC04B7A78862468E047BEE6F3E0B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 05:00:11 +0000
Manifest this update: Fri 17 May 2024 05:00:11 +0000
Manifest next update: Sat 18 May 2024 05:00:11 +0000
Files and hashes: 1: C2gBvSwO0AhgdAajAF5TGKrxeEc.roa (hash: qBYNOlNZkt3/8Hh37NyPy++ymm0leEZL3DWk8n4AQ8I=)
2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: xEBRLZwx+WMO1DAOgV2ZUbEi8f/RY229WtgDjLX/yzw=)
3: UsOgsZjJ70Drr2KbrJpxygto-GQ.roa (hash: hcVdwFHLKxG4E9ctT2CxJkAD74BbmUjDCLmtUV8Gd7I=)
4: f5YyuXhiJ8WH7_Fs0KO8GWsksFQ.roa (hash: MakEdnytP7ymxBpTg662jtISG6baHEMeIavYF2/sPkI=)
5: jyZ0ryyLJPedroVwLz0ivwHFik0.roa (hash: 23kei/IR0ft2Gk9v2S/vTRWu2Ul6KqjILvc43VboPS4=)
6: k_mxhtxfmOscaA58pcYLKMlXGD0.roa (hash: zjftVbiXEQKW41tGGpkOU+A4PpP62CtFRyvk89Px94w=)
7: oDjP2RsgVqfY4QrWDTO_2qbsMyM.roa (hash: QjkblhVdHbMgChwxkFEyPaGoR3Hl1tX7dw5w5JhejHI=)
8: pLOJsrR6TGhqsxTJ1ZsmCXN8UXI.roa (hash: M8GUEWed8B2AZ/A42jfJrifqjkSNGs/nbe6Jl+W0TBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:84:ec:04:b7:a7:88:62:46:8e:04:7b:ee:6f:3e:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: May 17 05:00:11 2024 GMT
Not After : May 18 05:00:11 2024 GMT
Subject: CN=c59c288a400e89bfe4308092c7b2d8406c6d9e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:cf:14:a5:22:5d:55:cb:66:39:61:85:63:
86:94:ae:e3:c4:99:43:ce:af:7c:8a:63:5a:c9:47:
91:3c:85:77:67:cd:1b:25:d0:bd:4a:c8:c6:5c:03:
c5:3d:1a:68:b1:1f:ad:3e:fc:1c:d1:88:0a:79:25:
e0:a0:9e:1d:af:93:25:21:61:dc:07:33:48:f8:6a:
08:57:d0:4d:8d:d8:f0:41:db:3c:dd:9e:94:b9:23:
36:d8:fa:ae:18:57:55:53:ad:dc:43:0c:89:21:57:
4c:1b:b0:b6:e4:19:68:48:88:60:3d:25:23:44:a6:
cc:51:3d:a5:13:f6:4a:7c:a2:7c:d0:42:8d:03:74:
37:87:16:03:88:dc:5d:ed:13:3d:51:72:a6:89:dd:
cd:61:97:18:9c:b2:4c:80:62:eb:1e:08:c8:c7:15:
31:27:af:69:f8:0f:cd:32:13:07:a6:7f:e3:3f:26:
ad:2d:0c:c9:53:42:99:bf:bc:18:7b:9f:43:b5:1f:
e9:18:89:8d:ee:01:1b:29:7e:bb:7a:dd:64:0d:e9:
de:6b:23:00:fa:0f:2f:13:e7:3e:f0:90:ef:6d:95:
da:f9:ad:04:27:6d:67:bd:7f:32:7f:62:48:38:21:
ba:49:90:49:e5:19:a0:0b:11:0d:e4:e8:1a:09:68:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:28:8A:40:0E:89:BF:E4:30:80:92:C7:B2:D8:40:6C:6D:9E:65
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ce:e3:40:e2:6c:c8:c3:e1:1f:43:f0:e8:83:4f:a0:0f:26:
c6:50:c1:a8:79:3b:f9:33:ac:03:fc:d0:5e:3b:3c:aa:a3:9f:
fd:11:6f:b5:c3:17:a7:04:8f:fb:d2:4b:62:b2:9b:b9:16:46:
f4:d1:73:28:24:09:cd:c8:74:4a:f4:b3:85:e9:1c:7a:d7:df:
9a:68:d1:b6:be:ba:16:b8:b6:42:3b:e3:2e:fd:a8:c8:e3:1d:
67:22:82:19:eb:86:2b:38:d8:0c:a7:d4:91:38:c0:cf:a9:95:
64:f0:cc:05:69:02:32:49:fc:6d:a3:7c:d7:19:54:de:c4:34:
c4:2f:84:ff:7b:78:00:1d:68:cb:47:53:0e:12:b9:da:6b:91:
2d:42:1b:f9:e7:37:46:1e:fc:2b:0b:36:c6:b7:8b:3b:1d:a7:
97:10:ea:98:73:35:86:f5:9d:6b:bc:42:1f:8a:92:26:c7:36:
7e:d6:f6:8f:b9:70:07:98:19:5c:5b:c2:9f:23:cb:65:35:75:
95:87:0c:42:61:99:be:e0:cc:42:80:9f:54:e7:e5:c7:96:0b:
9d:fa:6b:e9:44:27:b5:72:5c:28:17:09:83:9c:88:57:5d:f0:
0f:d1:91:d9:af:e7:3a:02:47:37:0a:40:40:6b:4f:9f:b6:23:
e3:ca:27:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+E7AS3p4hiRo4Ee+5vPgswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm
YjYzMmYwHhcNMjQwNTE3MDUwMDExWhcNMjQwNTE4MDUwMDExWjAzMTEwLwYDVQQD
EyhjNTljMjg4YTQwMGU4OWJmZTQzMDgwOTJjN2IyZDg0MDZjNmQ5ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvzPFKUiXVXLZjlhhWOGlK7jxJlD
zq98imNayUeRPIV3Z80bJdC9SsjGXAPFPRposR+tPvwc0YgKeSXgoJ4dr5MlIWHc
BzNI+GoIV9BNjdjwQds83Z6UuSM22PquGFdVU63cQwyJIVdMG7C25BloSIhgPSUj
RKbMUT2lE/ZKfKJ80EKNA3Q3hxYDiNxd7RM9UXKmid3NYZcYnLJMgGLrHgjIxxUx
J69p+A/NMhMHpn/jPyatLQzJU0KZv7wYe59DtR/pGImN7gEbKX67et1kDeneayMA
+g8vE+c+8JDvbZXa+a0EJ21nvX8yf2JIOCG6SZBJ5RmgCxEN5OgaCWj9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWcKIpADom/5DCAksey2EBsbZ5lMB8GA1UdIwQY
MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt
MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl
LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt87jQOJs
yMPhH0Pw6INPoA8mxlDBqHk7+TOsA/zQXjs8qqOf/RFvtcMXpwSP+9JLYrKbuRZG
9NFzKCQJzch0SvSzhekcetffmmjRtr66Fri2QjvjLv2oyOMdZyKCGeuGKzjYDKfU
kTjAz6mVZPDMBWkCMkn8baN81xlU3sQ0xC+E/3t4AB1oy0dTDhK52muRLUIb+ec3
Rh78Kws2xreLOx2nlxDqmHM1hvWda7xCH4qSJsc2ftb2j7lwB5gZXFvCnyPLZTV1
lYcMQmGZvuDMQoCfVOflx5YLnfpr6UQntXJcKBcJg5yIV13wD9GR2a/nOgJHNwpA
QGtPn7Yj48ongg==
-----END CERTIFICATE-----
Generated at Fri May 17 10:17:17 2024 by rpki-client on console-fra.rpki-client.org