Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: Uauw3JURoae5zpGQ6cBq2Fas17vhpiasTeTNhBwioFE=
Subject key identifier: D2:BA:56:7E:1C:B9:C6:98:E8:E2:71:DB:B1:55:10:6E:E0:95:F5:E2
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 01984B547346800F433C7A0B67CD4C08708F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0F13
Signing time: Sun 27 Jul 2025 10:01:22 +0000
Manifest this update: Sun 27 Jul 2025 10:01:22 +0000
Manifest next update: Mon 28 Jul 2025 10:01:22 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: iXLI8A3mptwOHtRV4SRGTQfdGnuRZZGNpe+lCn/y51M=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:73:46:80:0f:43:3c:7a:0b:67:cd:4c:08:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jul 27 10:01:22 2025 GMT
Not After : Jul 28 10:01:22 2025 GMT
Subject: CN=d2ba567e1cb9c698e8e271dbb155106ee095f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:27:3c:2a:48:bb:77:86:6b:46:30:5c:72:
0a:80:8c:72:da:6e:92:df:dd:ab:44:fe:60:81:c8:
9e:61:04:7d:8c:9f:55:b2:24:4c:01:47:33:2c:40:
1a:75:f2:10:dc:7c:54:72:e0:85:01:ee:f8:75:32:
27:48:5d:de:1c:b9:44:6b:4f:52:ba:e2:1c:0e:c9:
44:97:2e:f8:87:cc:9e:8a:5e:6a:e9:37:55:4f:10:
23:40:6b:ca:ff:63:b8:07:98:bd:56:6a:c3:fc:c7:
22:5a:f6:aa:60:72:22:5b:77:7b:f6:7a:74:e4:59:
85:a7:8e:71:dc:a4:e4:1b:87:9d:29:2a:59:1d:3b:
00:58:6a:ef:68:49:5b:7a:8b:01:cf:9e:d8:ce:98:
1a:fe:c5:b7:e3:e4:46:5a:03:0a:8e:cd:51:99:51:
f3:72:d4:77:e0:b7:f1:d6:34:89:73:f6:b8:01:06:
a8:95:c2:5b:3e:24:ad:3f:f5:5a:7f:20:bc:62:43:
f9:cd:d0:38:3c:fb:27:92:a1:55:5d:59:01:15:cb:
9d:c3:c5:f9:d2:85:71:42:eb:9c:2e:f2:f8:b6:47:
6b:22:cd:7e:db:13:cc:85:a0:84:64:b5:d3:83:6c:
c3:e7:55:43:1a:ff:04:17:1e:0f:98:29:1d:78:c0:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:56:7E:1C:B9:C6:98:E8:E2:71:DB:B1:55:10:6E:E0:95:F5:E2
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:dc:4f:ee:d4:37:61:bb:dd:13:b9:73:a0:e5:6b:bd:b5:
d7:31:84:ae:8c:1e:79:eb:58:f8:25:0d:a9:05:67:91:ae:8b:
a9:fd:e8:9a:1a:3d:85:f0:6d:a2:a5:e6:c0:92:a8:d9:c1:13:
c3:b5:e5:8f:5f:ae:a1:03:f6:fe:d0:3f:6b:00:67:9d:c7:69:
fb:28:60:63:1b:e5:c8:a2:2a:72:16:eb:c7:ac:58:97:bf:5b:
aa:71:f6:84:c4:ce:16:82:6f:da:90:b6:28:33:36:3d:be:34:
f3:74:11:40:eb:b8:16:f9:db:87:b0:4a:7a:bb:36:d9:42:58:
26:e3:95:bf:01:97:e8:f3:fd:e2:cf:05:84:f7:f7:4d:16:99:
25:b0:be:09:c4:a9:eb:74:39:27:10:69:e5:2b:59:9a:32:96:
a8:2c:be:38:13:2a:ef:85:37:f8:56:22:aa:02:5a:31:c5:04:
20:0e:69:df:aa:54:44:f5:47:c7:ca:85:02:54:e8:a4:1f:ac:
59:31:08:ec:36:cc:3d:12:cc:10:4f:03:a2:d0:e7:61:17:7e:
92:e6:a9:cf:9d:99:9f:54:23:89:7d:89:b3:25:4a:69:7d:1e:
9e:2c:53:9b:47:09:47:99:87:bc:b9:d9:e2:68:0a:02:3e:c8:
65:46:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:33:21 2025 by rpki-client