Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: v6zbVZEGzLQmLrW5y3WlcUAsFAaHyLS1SbVx+4P3FYo=
Subject key identifier: 66:CB:AB:CF:2A:29:54:D0:99:6B:61:7B:68:C9:2F:43:F3:2D:52:19
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019890DACE6273F678048B542A1C68CA4CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0F37
Signing time: Sat 09 Aug 2025 22:01:55 +0000
Manifest this update: Sat 09 Aug 2025 22:01:55 +0000
Manifest next update: Sun 10 Aug 2025 22:01:55 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: ILwY26fBa/QVwlNGngjOVD4Ebqtl93J5tC0w2yxgrcE=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:ce:62:73:f6:78:04:8b:54:2a:1c:68:ca:4c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Aug 9 22:01:55 2025 GMT
Not After : Aug 10 22:01:55 2025 GMT
Subject: CN=66cbabcf2a2954d0996b617b68c92f43f32d5219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:a2:1b:13:ce:f4:40:0a:2e:a9:6b:95:07:
99:1c:1b:37:bc:f5:5e:b2:df:72:b0:1c:31:43:aa:
e7:ce:98:6c:71:cc:12:a4:ec:7e:b5:8b:2f:86:57:
84:40:b1:c5:61:02:af:32:cb:ac:43:02:3e:6b:55:
6a:3f:0f:01:1b:a8:f4:cd:62:01:8c:d6:35:d1:2a:
63:22:cd:6b:65:3d:ec:84:fa:61:4f:b9:86:f9:d3:
ac:35:2a:8c:0f:3d:91:ad:d5:ff:e0:51:ee:22:86:
be:b8:59:3e:60:e9:a9:13:80:8c:29:da:bd:8a:f8:
9a:40:1d:55:fa:04:d7:85:83:68:5d:7f:86:ef:8c:
4d:85:9e:bb:bf:dc:c4:51:0e:33:73:9b:d0:62:12:
e2:cb:a6:cd:9d:cf:43:8c:35:6a:22:4a:18:b1:36:
d6:12:9f:17:e7:ea:79:94:1a:0d:7e:15:dc:75:2f:
66:01:3c:38:b8:1e:56:57:32:e7:4a:52:6d:6b:01:
3a:1f:67:07:6b:2f:3f:e8:02:aa:fc:93:8e:00:53:
f4:79:03:2e:7c:f0:15:e4:58:fb:ee:86:a9:04:dc:
75:bc:5e:12:04:e8:b5:0a:00:12:26:99:d7:87:fe:
22:e2:71:85:13:22:0b:f6:1b:28:33:e4:a2:5b:98:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:AB:CF:2A:29:54:D0:99:6B:61:7B:68:C9:2F:43:F3:2D:52:19
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4b:42:0a:f3:e6:31:f0:c1:7c:1d:b4:ed:c4:9e:7e:7b:54:
b7:bc:d0:bf:b6:5a:ad:14:a7:1a:2c:1d:31:9f:5c:89:cc:c7:
ed:78:71:bf:2b:5b:c4:00:8c:cd:06:df:f2:35:cb:47:7b:f1:
42:ac:15:5d:c3:d6:db:48:fb:a0:9a:c1:4c:c4:f5:57:74:da:
d3:fa:46:e8:33:eb:90:88:04:f0:f0:8f:09:97:b8:be:64:ed:
09:2b:ff:f8:80:1a:f2:1c:29:b4:4e:fb:5d:bb:f4:dd:28:54:
74:6c:4c:d5:ad:4b:c4:b0:02:07:d5:ed:70:cd:a5:23:cb:88:
85:a1:d2:50:a6:1f:a3:2b:a3:7b:60:d4:3a:32:fa:aa:2b:b3:
de:74:91:09:e9:7a:5a:0e:e0:ad:ea:22:4f:9c:9a:a1:35:6b:
39:90:96:a5:8c:65:cc:03:5d:d2:ed:6c:f7:85:2a:09:27:0e:
17:28:21:59:5b:c8:c7:a9:8a:c3:59:93:29:e3:4e:5d:da:3c:
a9:21:4c:0b:82:75:6e:16:50:ea:cd:36:3f:02:62:2e:ec:2b:
2f:5c:84:df:a0:14:bd:11:b2:d1:0c:e2:8a:ea:39:ca:f2:31:
66:18:75:c3:e6:8c:f8:24:c4:f0:2f:63:0f:82:26:18:eb:e9:
ee:5a:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:45:06 2025 by rpki-client