Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: EutTp3KCbTBweza2JKfS7J0mGaYBlTTvX6aZXEttHc0=
Subject key identifier: ED:AE:7B:FF:28:2B:45:EA:C9:7B:B5:04:3B:12:49:CD:14:B7:6D:FE
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 0198D66047F278FB23FDACBDEE0CDFAD3733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0F5B
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: eA3vcWpfbFf1f5j2WZL0DGSGv11DHBc5VLtsyjL574k=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:47:f2:78:fb:23:fd:ac:bd:ee:0c:df:ad:37:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=edae7bff282b45eac97bb5043b1249cd14b76dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:b4:aa:ac:db:d8:5a:79:43:de:43:bd:e7:
68:22:36:65:c1:79:8a:d4:ab:00:bb:5f:e3:b1:e8:
90:8b:b6:58:32:5a:bc:32:ea:62:95:45:ce:b1:39:
89:be:56:d2:69:0a:fb:4d:2a:e4:fb:07:93:db:fc:
45:22:3b:fe:09:8c:9e:a1:25:7a:51:a2:a7:e7:dc:
f9:ae:8d:dc:b2:22:64:e0:e1:54:11:e9:91:e8:70:
d9:ad:e1:cd:a8:19:92:14:f2:27:19:19:9a:dc:9c:
67:17:33:cb:a2:6c:17:f9:68:2d:dd:39:9a:28:55:
ad:4a:31:15:6b:d6:61:f2:ce:07:01:21:16:ac:89:
2a:c8:b4:2f:3a:30:6f:99:be:f4:89:41:17:46:a9:
28:f1:61:49:9a:95:da:7e:9d:7d:bf:50:29:81:96:
30:f8:09:4b:2b:a5:0a:ec:fb:b3:45:95:6e:11:e3:
e5:52:ab:e3:10:f3:02:13:d8:18:d7:d4:bc:75:96:
36:6f:3b:4d:bf:63:f7:b7:ae:5a:34:e9:d3:37:cf:
4d:be:0e:b1:49:3a:1f:5f:51:b2:ad:3e:e3:f1:d8:
eb:21:2f:f8:23:1c:dd:5f:6c:ca:0a:4d:d2:36:44:
f5:89:fb:29:8b:51:c0:dd:0e:24:ec:43:04:c4:2e:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:7B:FF:28:2B:45:EA:C9:7B:B5:04:3B:12:49:CD:14:B7:6D:FE
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:45:e5:d5:ab:18:a3:63:87:d4:61:97:54:10:c1:bc:d0:5b:
9d:57:f7:b6:7e:90:14:3f:60:89:db:2b:52:bc:78:e0:ec:e9:
48:20:77:02:1d:42:ac:41:30:28:1d:0a:e1:50:a1:2b:8e:83:
92:6f:3e:3c:74:60:4b:95:42:ec:f7:04:64:66:63:87:0f:e6:
02:84:89:5b:c7:0a:47:4a:61:69:75:6a:55:83:c4:92:8c:1e:
fe:ce:c3:e7:8a:63:5c:a1:5c:da:5e:a0:a5:24:7b:87:e9:ee:
29:05:64:12:55:ab:fc:c7:4e:76:34:41:5c:96:c2:4a:9d:21:
09:d5:fd:dc:c9:78:cd:47:58:fb:56:e6:4f:89:83:ef:fb:c5:
65:cd:ad:ba:7d:af:f6:7e:d4:71:0d:9b:42:70:73:d8:b1:d9:
9f:18:d1:f6:83:f5:5c:f6:42:36:23:8a:03:1d:02:4b:7b:2c:
3b:b1:41:cb:fc:07:c1:2b:48:a7:ca:9d:fc:11:5e:06:6b:e0:
10:1d:a5:25:9a:ad:df:52:c9:33:a4:b6:9a:89:bf:69:fa:20:
ee:d1:bb:64:57:33:76:a5:20:64:58:c5:88:7f:0d:09:99:d9:
00:e6:c1:80:46:2a:4a:44:dc:03:a2:d0:4f:79:90:bf:a7:12:
06:70:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:17 2025 by rpki-client