Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: KC6UJ+0rVIj5IJUQM1aQaN0UrmefKNDRBodGn1ZfAzA=
Subject key identifier: B1:86:A1:95:61:69:7F:2A:8B:CE:B4:30:85:3D:61:EA:01:6B:A6:D8
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019A4EF4E63504308CFD86FDA081AA2F60A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 101E
Signing time: Tue 04 Nov 2025 13:01:03 +0000
Manifest this update: Tue 04 Nov 2025 13:01:03 +0000
Manifest next update: Wed 05 Nov 2025 13:01:03 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: 333lzBbwocQgJGjVkWS4jGqUXmapWH++bpVKAsRnr3k=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e6:35:04:30:8c:fd:86:fd:a0:81:aa:2f:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Nov 4 13:01:03 2025 GMT
Not After : Nov 5 13:01:03 2025 GMT
Subject: CN=b186a19561697f2a8bceb430853d61ea016ba6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:5f:05:22:98:64:f9:ad:62:ee:27:aa:65:
45:65:6c:e2:5e:ed:58:6e:7c:c5:44:7f:27:b7:c2:
b8:e8:b3:4a:0c:65:f7:90:23:59:55:b6:ed:c2:59:
b7:34:fd:9e:a1:28:c0:5c:c6:9e:e4:cc:ac:c7:be:
be:2e:17:70:9f:1c:02:a2:a6:91:85:28:55:b6:ab:
31:cc:c9:98:4b:fd:29:70:14:73:29:a8:bc:70:f3:
a4:a0:25:68:e1:f5:16:8a:d9:68:1b:33:fd:5b:34:
72:fc:d6:1d:7c:49:47:91:01:77:89:e3:b5:95:d7:
6e:a7:13:77:ee:52:f8:a6:6b:a8:de:53:bb:7b:a5:
cd:f8:44:85:75:a6:d8:83:4d:6c:8a:da:f9:92:da:
b0:8d:61:f7:02:02:3f:e2:7b:80:25:59:71:69:78:
1b:6f:bf:07:a1:c8:ca:08:12:db:c2:b3:90:15:dd:
14:cd:12:21:78:7e:1c:ae:65:ce:e5:aa:01:b1:ab:
58:43:86:a7:34:54:28:68:83:dc:de:d2:52:db:e4:
2e:56:97:93:1a:99:6e:67:f8:77:3d:f4:92:0a:9e:
b2:49:21:c3:cb:6e:70:e1:31:09:f2:29:a3:09:01:
c4:3b:a4:22:e4:73:5f:66:e8:14:7c:48:1c:a7:74:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:86:A1:95:61:69:7F:2A:8B:CE:B4:30:85:3D:61:EA:01:6B:A6:D8
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:d1:f1:1c:ae:5a:2a:2c:f3:7e:75:14:ef:b1:0d:8c:b2:
4a:95:da:40:7d:fb:1a:fb:a9:2c:0f:0c:ec:19:53:c7:31:4d:
03:f6:46:fe:d9:8a:3d:f1:bf:af:78:e7:ad:55:30:3c:cd:b3:
80:b0:90:bf:ed:5f:68:6b:f5:a9:a5:92:ad:bc:4a:5e:a3:9d:
86:c1:d6:0a:8d:61:6c:af:c3:5a:96:03:b6:bb:66:62:15:e1:
72:61:e2:0c:a6:3f:4b:f8:76:27:d5:ce:3d:14:de:a2:df:48:
c3:21:f7:3a:7f:3e:30:91:73:9e:9e:8e:2f:cd:41:0c:3e:db:
8f:98:55:4e:17:6d:f9:eb:9a:eb:fd:66:9e:d3:5d:c5:af:73:
de:fd:53:36:9b:8f:b5:83:30:38:bd:4c:27:92:94:00:2d:20:
c6:09:c2:da:e7:81:3a:da:ae:e8:06:00:5e:30:ed:31:2d:70:
d8:82:5a:8e:3b:38:b4:58:af:27:81:66:e9:c1:8e:ed:d6:0b:
1e:46:22:d6:57:a4:23:1e:46:82:4e:11:36:be:fb:83:18:23:
76:c2:79:cc:61:5e:d2:e7:f5:da:50:1c:cd:21:08:82:bc:e4:
36:65:f8:b7:f2:19:a4:17:30:9d:ce:8e:4b:cc:9c:8e:51:ac:
8a:94:f4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:22 2025 by rpki-client