Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: cJoK7/Gbd/9cFh0C+bBZjlI3acoSTfrxnuo3PgGN4IU=
Subject key identifier: 44:AF:23:8C:F5:5D:49:16:A0:50:3E:24:58:62:17:AD:00:E0:41:2F
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 01978661BCC167557A9FFA5FA8E1A60E5499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0EAD
Signing time: Thu 19 Jun 2025 04:10:41 +0000
Manifest this update: Thu 19 Jun 2025 04:10:41 +0000
Manifest next update: Fri 20 Jun 2025 04:10:41 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: Oc+CgklZzGqEN48huWOxUfdvKKedECEj7S91osSLJps=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:bc:c1:67:55:7a:9f:fa:5f:a8:e1:a6:0e:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jun 19 04:10:41 2025 GMT
Not After : Jun 20 04:10:41 2025 GMT
Subject: CN=44af238cf55d4916a0503e24586217ad00e0412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:ce:49:64:db:22:c2:61:26:fd:56:0d:c1:
1f:ec:01:8f:ec:9a:24:ce:6b:16:87:f6:e4:47:67:
72:d7:da:2f:4f:e6:ce:20:ad:f3:a8:2f:8d:41:fa:
32:f5:6a:34:53:90:80:1f:64:49:72:5f:e0:dd:45:
dc:4a:22:a4:f9:96:84:e2:fe:39:10:cc:89:dd:14:
cc:9b:52:e3:88:ea:54:b7:b4:b4:98:d5:d3:4b:49:
f7:46:df:3b:1f:d0:c3:69:0f:88:8a:b4:2b:9e:fc:
84:2e:ad:ab:99:36:c3:74:a3:89:e8:85:82:14:83:
32:6f:8a:f8:b0:ce:bc:f8:e9:66:87:63:e6:20:8a:
68:2a:34:b4:70:ed:f0:94:06:8c:cc:03:17:92:a1:
ac:77:c7:ae:da:47:d7:c0:2b:08:2b:09:54:11:9c:
b3:c7:bf:e3:71:28:fa:b7:4e:0d:8b:62:d0:07:0b:
85:54:e7:68:e0:f0:19:6a:8e:94:33:1c:5a:ff:4d:
0a:c9:be:ff:a8:73:4f:4c:c9:65:a4:e6:cb:b6:ee:
13:40:70:9c:87:f0:d8:3b:7d:78:82:42:7f:e2:3f:
0c:5b:f8:5a:37:fc:ef:49:a2:19:dc:8d:da:37:74:
d3:4e:71:fe:f7:dc:45:5f:77:55:21:59:06:49:99:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AF:23:8C:F5:5D:49:16:A0:50:3E:24:58:62:17:AD:00:E0:41:2F
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:db:ec:b6:0d:14:46:88:c5:63:61:d6:ac:df:da:d1:bd:2f:
a9:bd:67:64:00:38:d6:c7:79:4f:e7:76:40:83:64:cb:10:e5:
63:73:c2:bb:92:9f:01:47:64:77:09:33:5a:d1:49:d0:81:2c:
8e:d6:84:d1:e1:5c:2a:16:a7:5a:2a:67:98:e5:d2:5c:a4:a8:
9f:6d:67:b0:fa:a8:36:96:32:8e:c6:72:fb:ef:77:8a:0e:ab:
c4:2b:da:0a:8f:1d:f9:c2:17:7d:61:cc:4b:3b:b1:e1:34:a0:
28:a3:8a:b1:a7:2e:0b:52:9a:f2:b7:ae:2a:a7:cb:f5:20:d8:
6e:47:3f:1a:11:a7:e8:48:88:34:68:5c:98:48:2b:05:e6:1e:
26:e8:44:53:d3:33:01:82:19:c8:30:5e:7e:f5:65:9a:04:7a:
7e:c9:c7:77:4f:d2:2d:f8:72:2a:eb:78:36:b2:ee:5e:47:3f:
d9:83:46:08:89:49:e1:a3:2e:56:9c:a6:4f:e0:63:c6:21:eb:
6d:f1:44:f2:fd:63:2f:ab:fc:46:5a:b9:4c:0f:3d:8b:41:38:
c9:24:97:52:4c:3c:50:67:86:43:a2:18:0f:07:60:86:ca:15:
14:84:cd:8b:22:b4:9c:93:ba:d6:c8:a9:f9:13:01:59:ac:6e:
66:85:0c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:19:26 2025 by rpki-client