Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: zSGuRHhXzHZWhUb7j0J9hdPQYK8XzSjFankz3Dk/g7w=
Subject key identifier: 80:32:72:8A:C3:BE:45:CE:3E:95:2E:14:DF:D7:25:D6:BC:CD:F8:6C
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 0199FBEB85D689F124FF0B6D229E574D4B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0FF3
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: 56RJrO0ix3ARYDq/wCbPy0PyCUQtPkjpWkAmIV06pJs=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:85:d6:89:f1:24:ff:0b:6d:22:9e:57:4d:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=8032728ac3be45ce3e952e14dfd725d6bccdf86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:91:5b:ba:0b:78:a4:27:d7:e1:23:f9:ba:
d8:8a:63:7f:5f:3e:01:6b:10:f3:53:2a:a9:1a:d7:
7a:e0:d1:a4:c6:72:fb:a8:72:ae:41:a3:c8:7e:ab:
18:8c:6a:0e:ac:fb:d7:b3:e8:d0:7b:96:94:c9:8f:
9c:3e:8d:38:ce:b8:0d:4a:5e:24:8e:22:6b:6a:2d:
73:75:0e:05:e3:8b:56:c6:b1:73:05:27:dc:d0:2f:
42:8c:83:49:18:b9:18:1b:f7:1b:9b:1b:12:f2:ed:
6f:32:7f:11:26:e6:2f:f4:f8:66:ae:4a:b6:2e:4b:
5b:f6:d1:a2:a4:95:40:b4:03:c2:d6:6c:b6:d6:3d:
c9:b8:69:ee:73:5f:0f:3b:53:db:30:4d:57:ac:f7:
0b:9b:89:0b:33:63:98:80:b9:26:62:ba:9d:a7:db:
fe:25:81:b2:d5:fb:3a:04:20:f5:89:e0:6c:eb:74:
5a:0e:f0:a3:5d:f1:4c:df:1d:bd:31:c5:cd:10:d5:
86:1d:46:ea:17:75:8f:c7:22:f5:f4:00:74:aa:2c:
46:bb:fc:9c:65:83:a4:f4:be:60:96:de:8a:21:4b:
2d:82:df:1a:8d:35:fa:1f:57:74:0d:07:68:31:aa:
98:88:92:ab:5f:a5:63:20:03:0e:12:71:f1:8a:85:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:32:72:8A:C3:BE:45:CE:3E:95:2E:14:DF:D7:25:D6:BC:CD:F8:6C
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b0:37:dd:b2:37:c2:df:0a:ef:96:29:f8:2c:18:03:54:18:
4f:0f:0a:4f:f0:78:f1:77:83:97:0c:ce:e3:34:83:59:dc:58:
37:ba:6c:a7:dd:d7:72:ee:d6:39:ed:b2:9a:c0:90:4c:21:ff:
cc:3e:03:fc:d2:2c:1d:fa:17:93:24:eb:41:86:a8:05:9e:a0:
4c:a2:ee:43:32:37:f9:91:a8:40:ee:ae:6a:60:5b:27:fc:a7:
4e:79:90:54:1e:aa:cf:13:f2:08:a3:f9:d3:fa:c3:90:eb:1d:
e5:3f:7f:ca:1e:14:04:5b:b0:1d:a8:aa:9b:38:db:26:df:00:
7c:da:2d:eb:85:4d:d5:a1:d4:38:52:a3:c6:8c:5a:af:55:58:
63:53:13:76:38:c5:83:8e:4a:97:79:f0:ee:a0:35:39:bc:6c:
8c:0c:83:0f:ad:db:f8:f1:c4:9d:42:7b:d9:c0:89:ce:ca:c9:
d6:1a:c1:56:64:04:d0:53:e2:c0:c2:b4:01:99:67:15:79:84:
4a:8a:d8:0a:24:ca:71:3a:72:29:6b:ce:4d:29:51:86:b4:b8:
da:fc:c1:9d:4f:43:3f:48:01:f3:93:d3:43:69:84:cc:4f:a6:
81:14:f5:fe:b3:81:0e:9f:69:96:e8:99:84:8b:ec:d1:d3:58:
09:f1:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:37 2025 by rpki-client