Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: GYstUYqd4kX7KVxOq17v2zY+i4BrgJWgdwcXSoANLQU=
Subject key identifier: B8:40:62:46:98:79:A0:33:F9:EE:84:B1:20:1B:9E:D2:62:28:4E:08
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 0197B6A1563ADD394DF046B05AE11157C9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0EC6
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: UQ7V3nOxomkpD5i461KWWriE8B2m4pRRfnNKSrY+uFo=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:56:3a:dd:39:4d:f0:46:b0:5a:e1:11:57:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=b84062469879a033f9ee84b1201b9ed262284e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:d9:64:0e:2b:3f:26:4e:da:22:38:9e:5f:
53:53:62:62:84:56:56:ea:14:f2:d9:56:55:12:11:
2f:31:b4:f6:40:dd:f5:36:6f:6f:53:7b:cd:11:b5:
f8:a4:1f:ed:d9:77:db:49:4e:c7:87:cb:b0:6d:3b:
a5:3d:0e:04:07:4c:89:14:b5:c1:0f:1c:a4:e7:53:
85:a5:40:f4:18:45:a5:9a:c2:99:50:b3:b3:e9:41:
e2:1e:33:b2:6c:54:a0:2b:ae:bf:4f:48:b9:13:3f:
c4:c7:06:27:3e:18:c6:7c:5a:49:55:8b:cf:27:76:
75:d3:8e:a4:86:d6:6b:2b:1d:d2:f2:d1:c9:fd:ff:
b6:53:02:f2:c3:11:9b:25:d5:7d:e4:2a:af:62:51:
5d:93:62:10:ad:4d:5f:81:18:7a:4b:67:5f:0b:e1:
a3:cc:d1:e9:fe:54:35:20:30:cf:48:5d:69:a4:42:
bb:77:5c:fb:bc:e3:21:15:e9:2d:4b:a6:c7:86:80:
4e:91:c8:f5:74:b9:dd:16:aa:c8:c2:72:ab:37:1a:
a9:e9:55:d0:ba:be:be:cc:20:a8:0e:c1:31:74:56:
af:d0:9a:53:f4:4a:89:a4:75:aa:d6:56:5f:1d:d7:
24:ca:13:2a:ee:a5:94:9e:ab:15:fd:b1:ac:1f:6d:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:62:46:98:79:A0:33:F9:EE:84:B1:20:1B:9E:D2:62:28:4E:08
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a5:b1:5a:ee:ad:32:56:90:e4:78:4d:ec:90:2d:e8:10:61:
75:31:f7:8b:d8:f5:a2:a1:78:16:2a:a0:fd:95:54:9c:e9:be:
bd:8f:18:45:22:30:30:31:d8:ec:11:9a:02:2e:e0:24:61:6f:
a8:ce:a0:e3:3d:9b:ad:40:7b:2a:83:50:68:35:cf:86:1f:e7:
d6:4b:cc:af:6d:69:1b:9d:93:d1:b4:82:f3:b3:37:6c:84:a0:
9a:10:f7:24:00:78:de:5b:89:f6:14:2c:63:6e:11:44:40:df:
ca:2a:b3:41:f1:be:83:f8:3e:6a:ea:69:ac:f5:2a:67:ca:3a:
23:18:96:46:b2:00:d0:27:21:67:e5:3d:a4:1d:33:30:ad:6f:
be:b5:c3:8e:69:04:25:9b:40:e3:a3:73:04:56:32:ef:90:8f:
30:a0:cc:b7:6a:c8:83:15:0d:67:5f:72:61:d3:39:71:c9:f5:
39:2c:b9:a9:25:31:05:62:c0:85:73:92:19:80:e5:8f:fc:23:
e7:f3:df:eb:03:ca:60:ee:89:64:70:e7:78:84:b1:1e:07:f9:
5c:83:e4:7c:8b:cf:89:e9:8a:3e:37:2b:8e:2b:56:72:04:a8:
8c:83:36:2d:ed:54:0c:a9:d4:16:c7:2b:0a:0c:ad:d9:2f:cd:
b4:ff:83:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oVY63TlN8EawWuERV8nWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx
ODdlNDgwHhcNMjUwNjI4MTMwMTU2WhcNMjUwNjI5MTMwMTU2WjAzMTEwLwYDVQQD
EyhiODQwNjI0Njk4NzlhMDMzZjllZTg0YjEyMDFiOWVkMjYyMjg0ZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhXZZA4rPyZO2iI4nl9TU2JihFZW
6hTy2VZVEhEvMbT2QN31Nm9vU3vNEbX4pB/t2XfbSU7Hh8uwbTulPQ4EB0yJFLXB
Dxyk51OFpUD0GEWlmsKZULOz6UHiHjOybFSgK66/T0i5Ez/ExwYnPhjGfFpJVYvP
J3Z1046khtZrKx3S8tHJ/f+2UwLywxGbJdV95CqvYlFdk2IQrU1fgRh6S2dfC+Gj
zNHp/lQ1IDDPSF1ppEK7d1z7vOMhFektS6bHhoBOkcj1dLndFqrIwnKrNxqp6VXQ
ur6+zCCoDsExdFav0JpT9EqJpHWq1lZfHdckyhMq7qWUnqsV/bGsH23gMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhAYkaYeaAz+e6EsSAbntJiKE4IMB8GA1UdIwQY
MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt
YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy
LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKWxWu6t
MlaQ5HhN7JAt6BBhdTH3i9j1oqF4Fiqg/ZVUnOm+vY8YRSIwMDHY7BGaAi7gJGFv
qM6g4z2brUB7KoNQaDXPhh/n1kvMr21pG52T0bSC87M3bISgmhD3JAB43luJ9hQs
Y24RREDfyiqzQfG+g/g+aupprPUqZ8o6IxiWRrIA0CchZ+U9pB0zMK1vvrXDjmkE
JZtA46NzBFYy75CPMKDMt2rIgxUNZ19yYdM5ccn1OSy5qSUxBWLAhXOSGYDlj/wj
5/Pf6wPKYO6JZHDneISxHgf5XIPkfIvPiemKPjcrjitWcgSojIM2Le1UDKnUFscr
Cgyt2S/NtP+DQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:15 2025 by rpki-client