Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: ajf/LGITpOVIu4oveL783ajmxl3iVztKxVWFC1vnvno=
Subject key identifier: 25:9B:FC:35:6F:1C:57:9A:D1:0F:B6:B9:A5:A3:56:93:03:D6:63:62
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019847AD9F33BF1DBED0AAA0CEE783EAD5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 1153
Signing time: Sat 26 Jul 2025 17:00:17 +0000
Manifest this update: Sat 26 Jul 2025 17:00:17 +0000
Manifest next update: Sun 27 Jul 2025 17:00:17 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: 2l56QSOnYtJmRZ5BQW6aISK9QcYwI89AKAH6UG85Y18=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:9f:33:bf:1d:be:d0:aa:a0:ce:e7:83:ea:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Jul 26 17:00:17 2025 GMT
Not After : Jul 27 17:00:17 2025 GMT
Subject: CN=259bfc356f1c579ad10fb6b9a5a3569303d66362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:c4:cd:b8:a3:5f:cc:bf:b5:b4:cc:36:1f:
69:65:b5:f5:d4:36:10:84:a3:3e:90:1b:c6:34:0e:
1c:48:3d:e1:e1:57:ba:ef:23:16:db:90:1b:df:bf:
69:08:9f:55:51:7b:95:19:22:c5:81:02:50:fe:8c:
fb:cd:52:11:28:87:87:55:48:44:73:1e:74:a5:39:
cf:21:a4:6f:f2:51:04:b5:4d:c1:4a:b5:85:19:81:
2f:5e:7f:52:45:56:5a:a6:5e:e5:b0:65:cc:32:74:
0f:96:5b:e3:3d:17:af:14:5f:cd:ee:4a:3b:b5:46:
06:de:78:ac:74:64:52:57:83:44:c7:13:42:fa:04:
d4:3b:ab:41:19:37:f5:3c:76:b2:9c:0f:a3:47:de:
b6:ee:d7:b3:a5:7e:c1:9a:e6:a8:4c:1d:05:03:73:
8b:de:cf:16:a9:8e:40:42:5b:30:36:ef:ff:c0:71:
d0:c6:1f:73:ce:74:e6:20:40:c8:77:df:6c:42:67:
14:f1:75:a0:a4:ba:b0:06:1b:40:ed:24:65:04:f2:
2c:95:1a:cf:4b:8d:d9:b1:60:a1:19:4f:66:0f:68:
65:af:1f:22:7e:0c:df:a6:8b:f0:28:49:5a:24:cf:
dc:ef:9f:1c:1c:10:40:ac:9f:52:d5:9d:27:a7:d1:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:FC:35:6F:1C:57:9A:D1:0F:B6:B9:A5:A3:56:93:03:D6:63:62
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:03:58:f2:44:86:54:7d:eb:a8:e0:d0:f1:b8:df:e0:f8:
ab:88:55:f6:09:13:23:73:c1:dc:40:62:36:b9:66:77:b6:78:
b7:e5:a1:0f:95:6a:dc:f6:05:dd:a3:52:f5:ba:16:33:53:e4:
3a:a3:6e:4c:43:80:13:26:f0:2e:a7:0d:26:a0:3d:3a:72:b9:
4b:f3:db:12:4a:e9:0f:ae:25:09:db:92:58:a2:62:31:67:6e:
97:ff:65:1c:ef:fd:89:a2:0d:ed:90:f3:4b:88:96:eb:c0:65:
1f:a2:29:8c:08:b3:66:ae:33:ab:4a:5e:a5:53:ed:d7:14:ba:
97:fa:64:b2:b6:d5:c7:d7:4e:b2:a3:40:b4:f4:21:a7:f1:13:
f3:7a:02:00:2d:c2:35:f1:ac:e0:87:ff:8c:98:92:f1:63:a6:
92:92:34:d6:e1:f0:1e:c4:ce:ad:24:75:b4:a2:53:7c:3f:bb:
66:dd:9e:7e:a0:be:9d:7e:b8:8e:12:36:0a:cf:68:d4:cc:39:
9d:6e:c6:d5:1b:4a:99:85:fd:02:37:8a:0f:ac:d1:ed:00:0e:
bb:fa:07:34:fa:b2:35:b4:33:46:62:31:a7:e4:ff:cf:f8:b1:
44:75:cc:a8:e0:0f:26:7e:44:47:c7:4b:ab:d2:e4:b7:71:ee:
64:24:14:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrZ8zvx2+0KqgzueD6tXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjUwNzI2MTcwMDE3WhcNMjUwNzI3MTcwMDE3WjAzMTEwLwYDVQQD
EygyNTliZmMzNTZmMWM1NzlhZDEwZmI2YjlhNWEzNTY5MzAzZDY2MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDjEzbijX8y/tbTMNh9pZbX11DYQ
hKM+kBvGNA4cSD3h4Ve67yMW25Ab379pCJ9VUXuVGSLFgQJQ/oz7zVIRKIeHVUhE
cx50pTnPIaRv8lEEtU3BSrWFGYEvXn9SRVZapl7lsGXMMnQPllvjPRevFF/N7ko7
tUYG3nisdGRSV4NExxNC+gTUO6tBGTf1PHaynA+jR9627tezpX7BmuaoTB0FA3OL
3s8WqY5AQlswNu//wHHQxh9zznTmIEDId99sQmcU8XWgpLqwBhtA7SRlBPIslRrP
S43ZsWChGU9mD2hlrx8ifgzfpovwKElaJM/c758cHBBArJ9S1Z0np9GigwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWb/DVvHFea0Q+2uaWjVpMD1mNiMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLYDWPJE
hlR966jg0PG43+D4q4hV9gkTI3PB3EBiNrlmd7Z4t+WhD5Vq3PYF3aNS9boWM1Pk
OqNuTEOAEybwLqcNJqA9OnK5S/PbEkrpD64lCduSWKJiMWdul/9lHO/9iaIN7ZDz
S4iW68BlH6IpjAizZq4zq0pepVPt1xS6l/pksrbVx9dOsqNAtPQhp/ET83oCAC3C
NfGs4If/jJiS8WOmkpI01uHwHsTOrSR1tKJTfD+7Zt2efqC+nX64jhI2Cs9o1Mw5
nW7G1RtKmYX9AjeKD6zR7QAOu/oHNPqyNbQzRmIxp+T/z/ixRHXMqOAPJn5ER8dL
q9Lkt3HuZCQU0A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:55:45 2025 by rpki-client