Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: nntQJYtCGPqry1p7pVzUJVtJ/FqxWXw/392SrtLiPrU=
Subject key identifier: 5D:15:5D:8C:33:56:4E:3C:25:ED:7F:93:19:E0:EB:C4:20:58:15:79
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019938DF309ABA52FCECB69584DB8C0BABCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0F8E
Signing time: Thu 11 Sep 2025 13:02:54 +0000
Manifest this update: Thu 11 Sep 2025 13:02:54 +0000
Manifest next update: Fri 12 Sep 2025 13:02:54 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: IiAwDkCvMLeNxg41a2nWAdb6PbVahWJL1vr+xVN2c1Y=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:30:9a:ba:52:fc:ec:b6:95:84:db:8c:0b:ab:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Sep 11 13:02:54 2025 GMT
Not After : Sep 12 13:02:54 2025 GMT
Subject: CN=5d155d8c33564e3c25ed7f9319e0ebc420581579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:af:0c:9f:d9:19:a9:73:10:49:a1:71:aa:
f8:f6:b7:d7:b8:2b:46:49:45:65:5e:3d:b4:cb:32:
8e:54:23:92:fe:d5:8a:1f:e1:20:e3:24:f9:75:61:
94:b5:02:f8:31:66:87:3a:cc:0c:22:cc:b2:d5:1b:
df:55:11:3b:27:4a:4b:00:72:74:b4:6c:fc:d9:27:
fb:0d:b1:c3:a9:5c:ed:ed:16:ce:2d:71:24:fe:c3:
f6:8e:90:17:ab:56:0e:d3:66:21:4d:02:66:3e:8b:
43:69:71:4f:f9:fb:cd:2a:6f:d6:61:a3:b6:54:ce:
94:62:e8:d9:cf:32:91:05:a0:ae:0d:ff:9a:38:4a:
37:54:7b:aa:32:da:70:14:b1:59:3d:75:58:8b:b6:
3e:8f:7d:bd:f4:f3:cb:87:1d:bb:39:2e:27:7d:57:
67:3e:34:5f:8a:e2:c1:64:bd:f6:7f:02:f9:8f:ee:
6e:2b:3e:fb:4b:6d:75:6f:c2:f3:1d:09:a5:75:ac:
a9:59:4a:73:f1:22:f5:3a:8c:de:03:71:ea:b4:4b:
de:ff:2f:32:ae:00:46:78:0a:f4:07:a7:6b:62:6f:
9c:88:13:4b:28:e0:40:6c:8c:1f:63:07:f7:b1:74:
4a:85:9d:20:cc:4b:06:20:cd:57:96:94:98:5f:e1:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:5D:8C:33:56:4E:3C:25:ED:7F:93:19:E0:EB:C4:20:58:15:79
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:44:0c:60:ef:b2:8b:7f:4d:7f:23:03:d1:2f:2d:9a:9a:bf:
d3:dc:05:bf:fe:38:62:47:45:de:88:f7:e7:9c:5a:f5:ba:da:
06:cb:a9:cd:20:61:df:fe:ab:8a:cd:08:f1:06:58:76:7e:73:
46:28:ed:08:79:b8:08:9d:e0:ed:ba:fc:4d:8e:b4:38:01:51:
07:73:e0:6b:54:3f:b6:93:73:31:7c:eb:82:43:d7:aa:a4:b4:
19:2e:0a:e8:c9:ed:b7:f2:23:92:15:35:68:1a:1c:03:c5:4a:
a1:e5:a5:e3:15:87:49:c6:0d:b2:0b:98:3d:52:d4:56:e8:42:
43:e6:64:34:da:1c:40:3e:0c:81:67:5b:06:ff:7b:7a:93:82:
4b:0c:a0:bf:45:3e:9e:25:6c:96:eb:88:da:bc:cd:01:1e:59:
6e:40:6f:72:44:7d:6b:64:90:54:41:00:d5:21:97:bc:c8:ff:
f7:1a:e7:c0:9a:b0:15:1f:10:ae:57:c4:87:74:c9:64:ad:09:
08:1a:e3:2b:a0:df:00:57:56:6a:41:83:d5:7c:93:3c:03:fa:
39:11:fc:59:ae:5f:41:33:d2:bb:06:35:af:99:a3:7f:29:8f:
d8:c9:8e:38:1b:18:7f:b2:84:78:d9:7f:d1:a1:a8:cf:cb:15:
75:99:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:29:44 2025 by rpki-client