Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: aytB0rfB+PNA+jQkWF5/tybGTSP68TjUSds8rFZcqOk=
Subject key identifier: 46:4E:AA:41:9C:E9:42:A3:BF:53:A7:77:74:89:4F:7D:65:63:95:15
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 0197488D4BFCE1BD441F00C250C01CD6AEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0E8D
Signing time: Sat 07 Jun 2025 04:01:48 +0000
Manifest this update: Sat 07 Jun 2025 04:01:48 +0000
Manifest next update: Sun 08 Jun 2025 04:01:48 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: uYeoE55uiv7ftQWnePLlk1hUqjL77G6r+I+gwaY+06A=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:4b:fc:e1:bd:44:1f:00:c2:50:c0:1c:d6:ae:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jun 7 04:01:48 2025 GMT
Not After : Jun 8 04:01:48 2025 GMT
Subject: CN=464eaa419ce942a3bf53a77774894f7d65639515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:82:dc:ca:8c:51:5b:20:d5:15:5b:c7:df:c9:
f2:09:13:70:50:eb:57:a5:36:6e:1c:65:57:20:e5:
ad:26:ee:ca:8a:db:85:28:53:b9:b4:cc:11:a7:76:
1b:35:c5:25:11:72:48:5c:25:7d:a3:da:c1:4c:87:
be:da:48:3b:ad:b6:cf:ba:74:bf:68:44:ba:19:6d:
26:1e:1f:db:11:a6:ea:08:6a:19:0a:01:72:59:58:
d7:45:63:d6:0b:1c:1b:19:0c:ff:e0:4b:2b:40:7f:
68:af:4e:14:38:ac:c5:86:1c:d5:45:c5:f5:5d:72:
c2:ae:a1:57:da:44:8d:d5:7d:a8:f8:48:ba:7f:a5:
21:7a:0d:e3:59:9e:e8:19:3f:ee:ab:12:9b:19:cd:
59:63:4f:07:58:09:81:30:13:d5:8e:88:66:44:74:
8e:91:86:6f:fb:48:de:ce:26:96:b7:09:63:17:db:
d2:d8:cf:7a:a8:2a:7a:9f:76:37:15:13:aa:23:e2:
d4:12:0b:f7:22:64:40:68:8c:c4:ae:46:25:31:1d:
a4:3c:11:fa:40:46:2c:dd:51:8a:49:59:70:ed:0a:
ee:73:fa:68:f9:47:d8:a2:4d:fb:9b:7d:9a:06:56:
f7:03:d5:dd:c5:c0:b1:43:28:90:9c:e3:21:a1:a2:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:AA:41:9C:E9:42:A3:BF:53:A7:77:74:89:4F:7D:65:63:95:15
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:52:ff:55:08:6e:8e:47:f5:0e:ed:f3:be:67:ee:70:1f:47:
52:0a:e1:14:72:4d:46:c1:90:eb:3c:e0:74:61:f9:49:0f:14:
6e:c8:0d:c6:13:af:e5:d2:21:29:1d:e6:2c:21:a0:0b:d7:7c:
d6:64:99:46:20:99:6c:eb:6f:88:b8:d3:7d:81:1c:f3:80:c4:
6b:ec:7d:d0:a7:e8:c0:d2:8d:20:d2:c0:1c:cf:78:f5:3d:8d:
7e:6c:a0:ec:7f:1a:6f:84:d6:2f:f9:ee:bf:7b:ff:d5:29:bd:
76:49:95:e3:69:a6:98:70:16:f0:d5:dd:92:86:d7:b1:bc:c8:
b8:78:ba:cd:be:00:ff:fe:e2:85:db:4d:12:69:a5:1b:d2:04:
0e:fe:f5:f6:09:f2:91:19:71:23:49:8a:da:d4:96:f7:ee:97:
ae:5b:d2:2f:ca:85:08:56:d1:0a:a9:32:3e:86:7d:79:d2:f9:
49:b7:20:7e:39:d1:77:12:9f:47:0a:b5:64:ae:2e:37:77:4f:
f7:a4:e8:4d:b8:8c:45:26:41:f5:67:5d:af:ec:2f:89:5b:7a:
90:f3:35:cc:c1:22:b9:ec:b8:b1:b5:db:d4:34:20:1f:ca:55:
7a:77:2b:ec:06:ce:6c:46:6f:f2:3c:4b:50:86:e6:72:42:09:
99:41:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:53 2025 by rpki-client