Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.mft
File: BENJrald9ErVtH5WL_hi5b1DmK0.mft (raw, json)
Hash identifier: 50cWpLb7cLCI55yMyEExjhzyZWFwX1A90ZQTyX5zHOU=
Subject key identifier: DF:42:6C:C4:A4:A9:42:DE:9C:38:8E:DF:FA:8F:6A:87:DB:55:48:5E
Authority key identifier: 04:43:49:AD:A9:5D:F4:4A:D5:B4:7E:56:2F:F8:62:E5:BD:43:98:AD
Certificate issuer: /CN=044349ada95df44ad5b47e562ff862e5bd4398ad
Certificate serial: 01936AEB3E72C10F1A5723F9548097C06C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BENJrald9ErVtH5WL_hi5b1DmK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.mft
Manifest number: 09A9
Signing time: Wed 27 Nov 2024 00:00:22 +0000
Manifest this update: Wed 27 Nov 2024 00:00:22 +0000
Manifest next update: Thu 28 Nov 2024 00:00:22 +0000
Files and hashes: 1: 8wzOn5rmAGX1gg3waDbQJUEquqA.roa (hash: /6W7lWoxXzSU0TEBR1EsH9YghpStOWaZAqnpxDlvHoM=)
2: BENJrald9ErVtH5WL_hi5b1DmK0.crl (hash: 8wiU3dTKpr597CBO0CxkYw6mzpaNGOzOVdNmNERE/QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BENJrald9ErVtH5WL_hi5b1DmK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:3e:72:c1:0f:1a:57:23:f9:54:80:97:c0:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044349ada95df44ad5b47e562ff862e5bd4398ad
Validity
Not Before: Nov 27 00:00:22 2024 GMT
Not After : Nov 28 00:00:22 2024 GMT
Subject: CN=df426cc4a4a942de9c388edffa8f6a87db55485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:77:2d:49:b6:2d:98:e6:db:4d:6a:15:76:
46:d9:2b:d2:e7:de:d2:2d:39:10:be:a8:79:76:7a:
2c:c3:b7:b8:62:27:b6:26:78:88:e5:62:2c:12:36:
1b:19:64:57:e9:3b:98:24:ef:e8:5b:bc:be:8d:79:
13:cf:67:46:6b:85:e5:bb:63:76:7a:ee:55:af:47:
ff:97:29:d4:f0:2e:4f:dd:73:f2:d7:f1:50:c2:80:
16:03:ac:75:a4:93:1e:81:1d:ee:60:ac:bf:3b:af:
34:ad:fa:00:bf:c9:ae:44:4f:1f:49:83:f8:82:3a:
15:3b:a9:8f:fe:b6:01:d6:c2:e4:c5:cc:1b:68:e2:
5f:21:af:4c:89:46:94:9e:62:fc:a1:e8:73:d2:57:
80:c8:f8:9f:d3:b2:47:ac:b0:97:41:9c:58:3f:21:
57:6c:25:9f:43:57:ea:68:45:8a:a8:7c:0b:e9:7f:
bf:c9:b8:6d:82:f7:f5:16:72:79:ad:36:8a:f6:85:
fc:b9:03:09:a1:cb:36:dc:5b:03:5f:ea:ad:ba:ad:
c0:cc:61:7d:f9:8e:48:d3:06:96:57:0e:e7:dd:8e:
97:34:54:85:cb:72:a3:6e:5c:fe:c5:d8:bd:06:75:
ef:54:02:f5:2d:28:24:05:26:e6:bd:88:3a:a1:b2:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:6C:C4:A4:A9:42:DE:9C:38:8E:DF:FA:8F:6A:87:DB:55:48:5E
X509v3 Authority Key Identifier:
keyid:04:43:49:AD:A9:5D:F4:4A:D5:B4:7E:56:2F:F8:62:E5:BD:43:98:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BENJrald9ErVtH5WL_hi5b1DmK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c6ef8-543b-4886-829e-40a20dd2cfbe/1/BENJrald9ErVtH5WL_hi5b1DmK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:23:cf:39:59:10:81:c5:f4:8e:29:2e:8c:f8:eb:30:f1:
2c:76:45:d9:68:47:6b:dc:bd:b0:aa:6a:94:c4:25:6f:ff:a9:
93:5a:54:95:0f:81:ea:03:37:f8:b6:99:6c:a1:b8:16:53:0c:
e5:71:0a:d0:19:26:9a:0c:9e:8e:42:9d:4b:f7:5f:a0:8e:48:
9b:0c:93:4f:3a:a4:2e:02:ef:49:62:0e:3c:39:74:40:0a:4b:
c8:30:9b:fe:3c:cc:1b:1e:d0:82:a2:0a:dc:ca:db:42:ba:09:
57:06:51:e2:22:dc:86:7e:f9:00:ba:65:15:e7:04:9e:95:0d:
1a:6e:90:5c:41:91:83:01:95:fe:10:e8:f0:86:55:df:15:90:
d0:6a:5f:43:0e:a2:79:30:23:c7:14:82:0c:4b:32:78:8b:5f:
96:52:86:20:80:69:13:13:31:40:1b:8e:4c:21:3c:57:2a:a2:
62:15:c9:c0:66:4d:e5:f0:e5:e6:9d:2b:94:86:e3:a4:18:9c:
75:ea:16:d2:f7:b6:f3:4e:fc:64:c1:eb:7a:a8:25:3c:1f:8f:
69:b3:b3:27:c9:91:17:0e:8a:d1:8c:55:9c:43:8a:5d:15:e8:
15:1d:1c:e5:08:54:33:8e:6e:63:25:f9:38:8b:eb:fb:94:7d:
49:61:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:59 2024 by rpki-client on console-ams.rpki-client.org