Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: pYDQFCBlo9ZHtsGW2GeYi7aguiGouEGT+qosQe7iX0E=
Subject key identifier: 7F:3F:16:78:7E:5C:26:8D:01:7A:2A:F4:A7:8F:47:47:B6:17:C3:BB
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 0196BB91E2A5AF4613377FE96F0225BA8340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0E44
Signing time: Sat 10 May 2025 19:00:22 +0000
Manifest this update: Sat 10 May 2025 19:00:22 +0000
Manifest next update: Sun 11 May 2025 19:00:22 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: ZKxCKMCcfaw9EQSkoRtrmaJqDXA222p9vnhlEcabeCI=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:e2:a5:af:46:13:37:7f:e9:6f:02:25:ba:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: May 10 19:00:22 2025 GMT
Not After : May 11 19:00:22 2025 GMT
Subject: CN=7f3f16787e5c268d017a2af4a78f4747b617c3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:d2:fe:7f:4a:44:81:f5:e7:9e:27:31:5a:
5e:e8:73:81:e9:d7:cf:6f:1b:0b:0d:86:24:c2:84:
ea:13:f7:37:17:13:18:2a:83:18:8b:e8:f8:16:24:
d8:73:94:be:13:72:ad:2e:4b:93:3b:7b:ef:bb:7a:
ad:75:70:e7:e4:e6:15:0b:2f:1b:e0:ab:e5:d3:aa:
d0:83:a9:5d:4c:8f:30:a4:e1:ec:ec:0c:9c:c7:98:
b5:2c:c2:93:ff:17:ae:a2:bd:55:eb:6f:28:39:bd:
6d:e5:36:b5:2e:21:1c:16:06:ca:29:9c:db:85:73:
99:a7:d8:11:2d:4c:d2:a3:57:86:55:7e:58:ae:c2:
00:db:80:50:19:59:a4:b5:ac:d8:b9:0f:da:98:b8:
95:8f:8d:1c:a1:1c:90:56:53:06:f4:c1:2d:97:9d:
3b:25:a7:c5:50:61:3e:e2:db:e7:c1:b0:ee:20:22:
b1:9d:04:d9:9a:22:58:af:aa:c3:d7:80:c6:65:69:
a4:c1:40:82:24:77:5d:64:82:e8:b1:a6:d7:0c:0c:
ec:68:61:a7:fe:17:71:66:8b:a2:97:89:f9:2a:91:
25:dd:11:21:fb:f3:13:a6:fe:2b:e4:23:ec:28:98:
31:d0:38:de:df:f4:1e:ee:0e:f3:78:13:85:92:ac:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3F:16:78:7E:5C:26:8D:01:7A:2A:F4:A7:8F:47:47:B6:17:C3:BB
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fc:35:73:ca:7b:5d:69:b2:40:76:a4:12:df:60:5e:d3:b3:
dc:4d:61:bb:c3:84:29:13:93:8f:0e:33:0c:ae:1d:dc:58:da:
63:e7:d3:6c:e2:f7:27:c3:39:fb:72:0a:80:dc:ab:ed:fa:50:
c8:73:37:73:12:ca:e6:40:94:43:3b:9a:57:2d:93:86:ba:bc:
61:cd:bf:83:5b:bd:a8:be:3d:49:cf:62:09:b8:62:96:e8:48:
f7:a7:03:e5:41:bd:a4:07:cd:f4:11:d0:e2:d5:5c:1a:1e:83:
2b:98:7c:52:4b:35:6b:37:89:38:1a:3a:e0:4b:8b:7e:ab:db:
b9:83:56:9b:d4:f0:56:2e:72:26:e7:84:92:e1:e4:05:6f:d0:
95:46:7b:6a:3f:93:53:93:a4:8e:a7:38:62:ac:d0:d2:b7:d1:
65:b2:ef:5a:4d:c5:ab:58:6e:8f:49:a8:98:e2:8d:87:6f:07:
e2:a0:dd:03:0c:82:76:1a:83:a9:b8:c9:1c:bf:d7:e6:02:4d:
10:72:3b:74:74:cd:94:50:e4:23:87:1c:82:5b:36:15:c3:e0:
6c:3f:10:c1:aa:70:a9:db:de:f0:ac:15:2b:65:ce:9c:e8:80:
2d:b5:61:e4:c1:80:c4:94:3e:90:4a:17:3f:5b:23:0e:82:48:
c7:d7:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:12:22 2025 by rpki-client