Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: Lifr8scmk+OF5pOa70uo0AaOc17sRED9RvnGdxoU8gY=
Subject key identifier: 25:96:10:6E:A6:E4:76:67:17:A4:9D:6A:10:1F:A0:82:99:56:86:D0
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019679E972E949929D3B55EC81074B6E5877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0E22
Signing time: Mon 28 Apr 2025 01:01:04 +0000
Manifest this update: Mon 28 Apr 2025 01:01:04 +0000
Manifest next update: Tue 29 Apr 2025 01:01:04 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: ZFnexG23kCvwi2ZLNx9WXZZNmHUsRbV0rrYtnE5esLM=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:72:e9:49:92:9d:3b:55:ec:81:07:4b:6e:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Apr 28 01:01:04 2025 GMT
Not After : Apr 29 01:01:04 2025 GMT
Subject: CN=2596106ea6e4766717a49d6a101fa082995686d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:f4:33:e6:32:09:85:01:40:4e:58:a1:5a:
75:74:7a:ca:a6:0b:b2:82:27:ac:d4:7d:d7:a3:34:
e3:74:c9:e8:2b:cd:f7:c8:5f:69:ad:0d:1a:96:24:
a5:84:47:f0:49:b8:d8:7f:bd:be:2c:7f:f5:c0:43:
b6:d8:69:2d:87:ec:93:3f:79:55:dd:11:41:54:56:
12:f9:35:4b:63:0f:97:43:ab:ad:97:f5:71:fb:aa:
7f:bb:20:a3:d9:15:02:ac:45:21:05:2f:3e:b9:47:
6f:6a:f6:e2:e6:18:17:14:f2:a3:a3:1d:0f:6e:cd:
d4:90:a0:ed:2d:9f:bf:86:f0:a6:d6:9a:8f:5f:89:
92:51:58:81:65:fa:09:2d:26:82:e1:b7:57:48:68:
40:e7:55:5a:8c:77:05:f2:2a:a7:e2:49:2c:91:76:
90:15:59:3b:23:69:0d:26:67:fa:c0:62:97:91:15:
fc:fc:41:ff:02:01:40:b6:01:91:ae:a3:66:7d:98:
68:44:bb:fe:0d:3e:67:78:77:8d:55:33:f1:b4:a0:
2d:8d:d2:aa:05:29:a5:c3:76:67:45:be:7a:2c:da:
02:d7:4c:1e:25:b3:8b:73:a7:d3:36:48:7e:3b:cd:
24:7c:51:3b:b2:b1:62:b0:62:c8:4c:d5:e2:24:ee:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:10:6E:A6:E4:76:67:17:A4:9D:6A:10:1F:A0:82:99:56:86:D0
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8d:6d:f4:4b:0e:be:13:17:0a:93:e4:9d:34:58:fd:31:d6:
43:44:85:57:12:78:b0:3a:61:99:21:69:c5:62:26:27:41:61:
22:b4:22:98:5f:4d:22:c7:e4:a5:33:59:12:c7:53:9b:40:31:
a0:bd:0c:24:0f:b6:92:dc:5b:16:9d:7b:aa:11:a0:90:19:51:
3f:fc:c7:df:d4:2d:e7:03:ef:04:c4:7a:57:67:ff:c6:0a:3f:
48:95:a8:ac:0a:fd:39:5a:19:14:89:b2:c1:f2:32:ce:c3:94:
70:a1:01:59:8d:ab:c9:ed:e5:ae:6e:c4:65:7e:94:2c:3c:78:
79:de:17:28:3e:ff:09:95:75:ba:9c:ba:53:31:27:5d:d1:1e:
95:1d:13:e8:25:f0:a7:40:74:7a:96:2f:0c:e7:dd:fb:2f:2f:
6a:a1:01:2e:dc:92:ce:8d:0d:60:90:8e:5b:d0:99:95:6e:0f:
d6:5e:f4:95:a2:8d:15:48:b1:d4:f4:a0:1f:0c:f2:ac:f4:33:
eb:53:ee:89:b7:64:05:a7:34:b6:7e:92:ba:de:d7:b6:21:6f:
50:ff:b7:48:d8:08:4d:cc:43:04:84:3e:f7:04:f6:3b:e8:81:
6f:40:31:db:bf:33:f8:a3:0c:c0:ac:fe:6a:85:b7:66:b7:34:
54:5f:8b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56XLpSZKdO1XsgQdLblh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx
ODdlNDgwHhcNMjUwNDI4MDEwMTA0WhcNMjUwNDI5MDEwMTA0WjAzMTEwLwYDVQQD
EygyNTk2MTA2ZWE2ZTQ3NjY3MTdhNDlkNmExMDFmYTA4Mjk5NTY4NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp70M+YyCYUBQE5YoVp1dHrKpguy
gies1H3XozTjdMnoK833yF9prQ0aliSlhEfwSbjYf72+LH/1wEO22Gkth+yTP3lV
3RFBVFYS+TVLYw+XQ6utl/Vx+6p/uyCj2RUCrEUhBS8+uUdvavbi5hgXFPKjox0P
bs3UkKDtLZ+/hvCm1pqPX4mSUViBZfoJLSaC4bdXSGhA51VajHcF8iqn4kkskXaQ
FVk7I2kNJmf6wGKXkRX8/EH/AgFAtgGRrqNmfZhoRLv+DT5neHeNVTPxtKAtjdKq
BSmlw3ZnRb56LNoC10weJbOLc6fTNkh+O80kfFE7srFisGLITNXiJO5KKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWWEG6m5HZnF6SdahAfoIKZVobQMB8GA1UdIwQY
MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt
YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy
LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi41t9EsO
vhMXCpPknTRY/THWQ0SFVxJ4sDphmSFpxWImJ0FhIrQimF9NIsfkpTNZEsdTm0Ax
oL0MJA+2ktxbFp17qhGgkBlRP/zH39Qt5wPvBMR6V2f/xgo/SJWorAr9OVoZFImy
wfIyzsOUcKEBWY2rye3lrm7EZX6ULDx4ed4XKD7/CZV1upy6UzEnXdEelR0T6CXw
p0B0epYvDOfd+y8vaqEBLtySzo0NYJCOW9CZlW4P1l70laKNFUix1PSgHwzyrPQz
61PuibdkBac0tn6Sut7XtiFvUP+3SNgITcxDBIQ+9wT2O+iBb0Ax278z+KMMwKz+
aoW3Zrc0VF+Lfg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:30 2025 by rpki-client