Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier: 5gBnhm2yrMjlGmMXxsru64VBZSP9IKBlMPIrbysi+5o=
Subject key identifier: E4:5F:07:64:2D:57:8B:E1:42:75:A6:38:36:AD:4A:A3:F8:17:43:00
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 0191FA47D9160B17909C84466A44CB232E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number: CA
Signing time: Mon 16 Sep 2024 10:01:38 +0000
Manifest this update: Mon 16 Sep 2024 10:01:38 +0000
Manifest next update: Tue 17 Sep 2024 10:01:38 +0000
Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: nFILw4ITW/PD7iWJZNpQzZ3wbVcit+ch4S7/JcN1voA=)
2: VAbOo840mwAjzC1WxtuGR0sTtUE.roa (hash: ayKTZhMZRPDczD5lOpft4Ym+EGpYcxQdrPO/wGiVwqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:47:d9:16:0b:17:90:9c:84:46:6a:44:cb:23:2e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Sep 16 10:01:38 2024 GMT
Not After : Sep 17 10:01:38 2024 GMT
Subject: CN=e45f07642d578be14275a63836ad4aa3f8174300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:9a:6e:10:7f:e7:db:82:1e:f2:8c:1f:a9:
90:e6:1f:14:fd:6c:15:f8:b1:01:6c:9a:0c:41:ef:
d0:cf:e9:5e:e9:01:95:b4:61:3a:e4:9d:63:e8:f3:
a4:15:1b:97:2a:66:f0:11:f5:14:ba:31:9d:7d:4d:
85:6e:05:dc:d5:d9:b2:70:6c:5c:b3:5f:45:82:8a:
ec:7e:59:ed:23:aa:c6:92:60:dc:2b:59:f5:e8:38:
34:0f:44:26:76:01:c2:db:4a:11:94:a7:6a:dc:9d:
30:d4:23:13:a6:6a:e1:aa:e7:d1:de:1c:59:a4:d2:
88:e8:27:f6:9a:f1:67:a4:59:5d:b6:44:e6:77:f0:
e6:f2:4d:ed:73:ec:84:76:43:ba:5b:93:bd:a2:40:
38:49:94:8b:8d:02:e0:67:27:85:5b:41:b3:26:1c:
7d:3b:14:b2:28:2f:8a:4c:31:25:ec:fc:22:f6:f0:
49:bb:d3:fe:c2:2a:63:30:83:3f:b0:4d:cf:53:f8:
0d:e4:f9:bf:60:fe:c1:b0:0a:d2:17:06:5f:b0:10:
61:fe:63:23:7b:78:2d:8d:7b:04:42:19:e1:90:fd:
2d:e9:15:1e:3c:c5:19:3f:36:e6:68:5d:35:d5:5d:
6d:44:8b:4f:ca:8b:d4:00:e1:49:13:57:46:e9:38:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:07:64:2D:57:8B:E1:42:75:A6:38:36:AD:4A:A3:F8:17:43:00
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7d:ea:6f:cf:af:ec:64:7e:3d:bf:f5:fa:54:7a:22:35:4a:
ff:a1:ca:16:eb:e2:4c:a2:23:47:8c:02:de:44:17:2d:3d:dd:
05:72:dd:d2:ec:bf:76:10:82:ea:af:90:fc:4f:08:56:05:19:
97:5b:f2:8a:16:be:18:3e:05:de:34:11:4c:df:85:ae:54:92:
37:0a:31:cd:10:08:92:71:55:b9:86:0d:75:84:79:ae:5b:ec:
3f:71:b5:a7:76:64:1d:a0:79:ac:b7:7f:22:ab:d7:b8:18:26:
c9:ab:43:b0:e6:ef:bd:4b:9c:92:37:69:30:62:74:13:c2:a8:
4b:c5:be:e9:5d:20:20:76:1c:cf:76:15:ba:aa:d1:d2:ab:0c:
a4:cb:3a:72:82:6d:31:55:e8:35:19:68:80:44:a8:9e:c8:2a:
93:18:00:6c:7c:9b:15:c3:16:77:1f:5f:2e:87:8d:7e:7e:53:
03:c5:d2:af:6d:68:9c:f9:af:89:4a:12:9c:52:88:a1:cd:b2:
f5:0e:c8:35:6f:27:f1:d1:73:89:cb:7b:04:db:10:fa:14:41:
9a:45:d2:db:03:d7:9d:c2:8c:a4:55:e9:81:2b:7d:bf:17:f6:
d6:68:26:91:bf:d1:fa:35:e2:9b:76:62:66:d3:b9:33:c4:7d:
82:d8:5c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6R9kWCxeQnIRGakTLIy44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw
ZjgwZTkwHhcNMjQwOTE2MTAwMTM4WhcNMjQwOTE3MTAwMTM4WjAzMTEwLwYDVQQD
EyhlNDVmMDc2NDJkNTc4YmUxNDI3NWE2MzgzNmFkNGFhM2Y4MTc0MzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5iabhB/59uCHvKMH6mQ5h8U/WwV
+LEBbJoMQe/Qz+le6QGVtGE65J1j6POkFRuXKmbwEfUUujGdfU2FbgXc1dmycGxc
s19FgorsflntI6rGkmDcK1n16Dg0D0QmdgHC20oRlKdq3J0w1CMTpmrhqufR3hxZ
pNKI6Cf2mvFnpFldtkTmd/Dm8k3tc+yEdkO6W5O9okA4SZSLjQLgZyeFW0GzJhx9
OxSyKC+KTDEl7Pwi9vBJu9P+wipjMIM/sE3PU/gN5Pm/YP7BsArSFwZfsBBh/mMj
e3gtjXsEQhnhkP0t6RUePMUZPzbmaF011V1tRItPyovUAOFJE1dG6Tj7+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORfB2QtV4vhQnWmODatSqP4F0MAMB8GA1UdIwQY
MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt
YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh
LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN33qb8+v
7GR+Pb/1+lR6IjVK/6HKFuviTKIjR4wC3kQXLT3dBXLd0uy/dhCC6q+Q/E8IVgUZ
l1vyiha+GD4F3jQRTN+FrlSSNwoxzRAIknFVuYYNdYR5rlvsP3G1p3ZkHaB5rLd/
IqvXuBgmyatDsObvvUuckjdpMGJ0E8KoS8W+6V0gIHYcz3YVuqrR0qsMpMs6coJt
MVXoNRlogESonsgqkxgAbHybFcMWdx9fLoeNfn5TA8XSr21onPmviUoSnFKIoc2y
9Q7INW8n8dFzict7BNsQ+hRBmkXS2wPXncKMpFXpgSt9vxf21mgmkb/R+jXim3Zi
ZtO5M8R9gthc/w==
-----END CERTIFICATE-----
Generated at Mon Sep 16 18:37:39 2024 by rpki-client on console-ams.rpki-client.org