Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: SKbYHQDb2ySwzWtzmQcX5pmY+MNIN46pM06N4Ii9JTU=
Subject key identifier: 56:66:3D:38:E8:4E:A6:08:63:3C:B8:F8:9F:64:B0:1B:AC:5C:74:5B
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 019636521F2F9F3F0A69ECB86C8D42FE1515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0DFF
Signing time: Mon 14 Apr 2025 22:01:13 +0000
Manifest this update: Mon 14 Apr 2025 22:01:13 +0000
Manifest next update: Tue 15 Apr 2025 22:01:13 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: pRz7Hg8XEM0wBJW2D5QsBE8YZ7I0LmSElTOTWKsMDhc=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:52:1f:2f:9f:3f:0a:69:ec:b8:6c:8d:42:fe:15:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Apr 14 22:01:13 2025 GMT
Not After : Apr 15 22:01:13 2025 GMT
Subject: CN=56663d38e84ea608633cb8f89f64b01bac5c745b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:9b:54:3b:11:be:0e:cc:f0:5b:00:7e:3c:
dc:b9:db:c5:d2:9b:9e:b1:f5:fb:10:42:42:a4:c3:
d5:1f:22:15:86:04:ba:a4:a0:db:8a:bb:06:e2:4b:
7c:82:c8:27:29:e5:0a:6e:a0:2d:d7:41:f3:6e:a1:
21:e2:8f:a6:d2:8a:d2:76:82:7f:b0:00:0a:96:df:
0e:6b:77:ab:26:67:90:62:c5:4a:df:e9:c3:00:23:
2f:19:1c:55:c4:3f:87:45:ed:19:ca:4f:fe:81:97:
ad:06:c8:cb:c4:14:11:28:af:74:63:ad:12:17:8a:
f4:20:8c:03:c0:53:ab:ce:67:f6:96:2b:04:28:d7:
63:37:77:6f:b9:5f:77:00:6a:36:ce:bc:6b:28:a9:
c8:09:e3:b0:2f:7d:54:bc:8a:2f:ea:c8:fb:0f:0d:
12:13:fa:2f:a0:f8:d6:22:de:fa:a5:fc:24:77:06:
fd:52:a4:a1:26:98:e3:16:41:4d:45:d2:3f:c8:b0:
dd:fc:ea:44:24:8a:ae:66:41:5b:44:c5:b9:b9:a0:
3e:d5:87:73:9f:25:22:28:4a:f6:4f:08:7b:57:b6:
87:92:e8:85:eb:07:f3:16:38:67:d2:2c:58:8b:8e:
af:7e:8f:5e:0a:e3:59:2a:30:8e:f2:05:b6:ff:9a:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:66:3D:38:E8:4E:A6:08:63:3C:B8:F8:9F:64:B0:1B:AC:5C:74:5B
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a0:a2:55:f0:e2:ad:03:97:a8:18:49:44:6f:b4:ff:59:98:
82:92:d2:18:e9:d3:11:cb:8b:ba:09:9e:47:e1:ed:9c:db:a7:
67:f0:ae:b3:61:3b:2e:71:e7:18:48:57:a8:03:c5:e5:3f:89:
a2:43:c0:bd:97:00:b9:60:c8:a1:0b:6a:6f:db:e4:27:2b:70:
2b:79:f6:a7:c3:b3:4f:22:a2:ae:6c:e2:be:76:15:0a:4a:0a:
87:d3:03:d8:29:83:69:b9:2b:d4:a2:86:ee:6d:0b:3b:82:29:
f0:22:8f:f0:a2:a5:f5:c9:c9:3f:d4:14:d3:27:b8:52:7b:ae:
c6:0c:7a:7b:3d:67:ff:c8:65:b6:ed:61:c0:f9:6d:dd:01:17:
fe:b2:d7:46:8b:2f:75:80:23:d4:8d:52:61:0b:3a:f4:33:4a:
da:71:af:b5:cd:05:8c:11:45:5f:61:f3:66:05:2f:23:84:23:
82:e8:db:c3:29:f2:2e:ee:59:0a:ce:3e:d7:7e:1e:85:db:3e:
43:aa:05:2e:1c:40:25:54:8c:b4:e3:04:02:7a:60:60:62:65:
e2:fa:cc:1a:5e:8e:09:d0:59:f9:9c:54:25:a3:1b:f6:6c:9d:
eb:0c:72:92:7f:05:bd:9a:85:64:45:d0:51:4a:a3:ab:b6:1e:
0c:16:fb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY2Uh8vnz8Kaey4bI1C/hUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx
ODdlNDgwHhcNMjUwNDE0MjIwMTEzWhcNMjUwNDE1MjIwMTEzWjAzMTEwLwYDVQQD
Eyg1NjY2M2QzOGU4NGVhNjA4NjMzY2I4Zjg5ZjY0YjAxYmFjNWM3NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ebVDsRvg7M8FsAfjzcudvF0pue
sfX7EEJCpMPVHyIVhgS6pKDbirsG4kt8gsgnKeUKbqAt10HzbqEh4o+m0orSdoJ/
sAAKlt8Oa3erJmeQYsVK3+nDACMvGRxVxD+HRe0Zyk/+gZetBsjLxBQRKK90Y60S
F4r0IIwDwFOrzmf2lisEKNdjN3dvuV93AGo2zrxrKKnICeOwL31UvIov6sj7Dw0S
E/ovoPjWIt76pfwkdwb9UqShJpjjFkFNRdI/yLDd/OpEJIquZkFbRMW5uaA+1Ydz
nyUiKEr2Twh7V7aHkuiF6wfzFjhn0ixYi46vfo9eCuNZKjCO8gW2/5qenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZmPTjoTqYIYzy4+J9ksBusXHRbMB8GA1UdIwQY
MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt
YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy
LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKCiVfDi
rQOXqBhJRG+0/1mYgpLSGOnTEcuLugmeR+HtnNunZ/Cus2E7LnHnGEhXqAPF5T+J
okPAvZcAuWDIoQtqb9vkJytwK3n2p8OzTyKirmzivnYVCkoKh9MD2CmDabkr1KKG
7m0LO4Ip8CKP8KKl9cnJP9QU0ye4Unuuxgx6ez1n/8hltu1hwPlt3QEX/rLXRosv
dYAj1I1SYQs69DNK2nGvtc0FjBFFX2HzZgUvI4QjgujbwynyLu5ZCs4+134ehds+
Q6oFLhxAJVSMtOMEAnpgYGJl4vrMGl6OCdBZ+ZxUJaMb9myd6wxykn8FvZqFZEXQ
UUqjq7YeDBb72A==
-----END CERTIFICATE-----
Generated at Tue Apr 15 04:35:53 2025 by rpki-client