Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: KkEnqFMrlIguafZqGZMNvGvVI636gCSrtiadCYOt4lY=
Subject key identifier: 93:35:E1:65:AF:47:18:BC:29:9A:8B:C4:9E:AB:8A:83:F8:D7:6B:CD
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019746D4920A76C6C59C5E7A2E80AD5B1265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 10CE
Signing time: Fri 06 Jun 2025 20:00:25 +0000
Manifest this update: Fri 06 Jun 2025 20:00:25 +0000
Manifest next update: Sat 07 Jun 2025 20:00:25 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: gh6aMMJg6p7g/fWRlbDE99cNJzHCazmib68dByYg6bM=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:92:0a:76:c6:c5:9c:5e:7a:2e:80:ad:5b:12:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Jun 6 20:00:25 2025 GMT
Not After : Jun 7 20:00:25 2025 GMT
Subject: CN=9335e165af4718bc299a8bc49eab8a83f8d76bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:6a:7e:9a:a4:83:0c:4e:a2:95:74:54:64:
a1:25:d5:c7:3f:fb:f0:00:94:4a:fc:f3:b3:8a:cd:
57:2d:a9:3a:ec:2c:29:c9:18:aa:ad:e8:9e:28:51:
86:cf:3c:19:3f:6a:0c:c4:fb:10:7e:a8:b6:21:75:
d4:80:60:3b:58:02:39:14:04:64:e1:ed:13:58:20:
a1:72:6a:0e:42:d1:e7:ff:5d:ec:0d:59:a3:cf:76:
ef:a6:35:d5:04:34:6a:5f:53:6e:20:f4:b9:cb:db:
a9:d8:ec:25:31:0a:74:88:c9:a1:8e:13:b8:38:24:
32:fe:c9:82:71:de:5d:02:4a:c1:3f:91:31:ea:60:
fd:e0:4a:80:11:a5:30:04:2d:11:b2:f1:58:17:d2:
b3:4f:e3:7e:9a:af:6c:f4:30:e4:a7:71:09:ba:39:
ec:62:2d:3c:e1:ca:7b:ef:5b:1d:37:c3:66:be:7b:
59:79:3c:c5:8a:e2:84:56:9f:a2:75:2d:13:71:cc:
11:04:a9:fc:ff:f3:72:0c:bc:83:45:d0:e1:7d:fa:
90:ac:e6:c2:18:3f:59:fc:03:73:9a:b2:73:9d:29:
51:3d:cb:ac:90:35:cc:08:48:41:30:76:9c:2b:ee:
27:0c:4d:dc:53:c2:25:11:b6:d5:9c:39:65:df:ac:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:35:E1:65:AF:47:18:BC:29:9A:8B:C4:9E:AB:8A:83:F8:D7:6B:CD
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:92:e6:94:e7:36:6c:f4:fa:af:d4:3d:c9:a4:e1:ab:99:23:
1d:f9:de:3e:ee:04:ce:32:9e:7d:b5:a0:ee:4a:6c:93:bf:b8:
ff:da:ec:4d:f9:5a:aa:f1:15:d4:11:e8:05:ee:c4:79:c5:e8:
28:4e:46:81:af:60:f7:42:4d:4f:09:60:18:85:60:06:9b:ea:
c2:58:45:91:bf:36:f7:09:ca:d5:18:48:de:cf:8f:5b:63:ba:
80:a5:1c:ab:c1:f6:a8:05:dc:2c:14:a2:8f:8f:86:84:17:1c:
a7:fd:b5:0a:10:40:07:8c:3a:74:ae:ed:16:3b:ae:43:d1:bb:
9f:d1:fb:8c:3b:d4:54:9a:ae:20:bc:08:62:d0:69:58:74:38:
e7:83:ab:74:47:ab:71:8c:61:d8:a3:49:e9:91:75:87:9a:80:
89:8a:cf:46:0d:af:35:df:be:b9:cc:7c:21:55:5b:85:c9:77:
61:6d:3b:7b:ff:ee:e6:05:ff:07:51:b3:a9:42:b3:e6:90:c1:
bb:1e:ca:f1:7c:82:0b:fb:9b:85:aa:5a:f1:3c:2a:90:ba:a6:
f3:e1:16:aa:83:12:03:96:ab:17:04:dc:fe:32:9c:27:5c:74:
0c:0c:eb:10:a9:e6:58:d3:e4:fd:33:3e:be:35:75:5d:31:2b:
cf:29:13:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1JIKdsbFnF56LoCtWxJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjUwNjA2MjAwMDI1WhcNMjUwNjA3MjAwMDI1WjAzMTEwLwYDVQQD
Eyg5MzM1ZTE2NWFmNDcxOGJjMjk5YThiYzQ5ZWFiOGE4M2Y4ZDc2YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfxqfpqkgwxOopV0VGShJdXHP/vw
AJRK/POzis1XLak67CwpyRiqreieKFGGzzwZP2oMxPsQfqi2IXXUgGA7WAI5FARk
4e0TWCChcmoOQtHn/13sDVmjz3bvpjXVBDRqX1NuIPS5y9up2OwlMQp0iMmhjhO4
OCQy/smCcd5dAkrBP5Ex6mD94EqAEaUwBC0RsvFYF9KzT+N+mq9s9DDkp3EJujns
Yi084cp771sdN8NmvntZeTzFiuKEVp+idS0TccwRBKn8//NyDLyDRdDhffqQrObC
GD9Z/ANzmrJznSlRPcuskDXMCEhBMHacK+4nDE3cU8IlEbbVnDll36zQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM14WWvRxi8KZqLxJ6rioP412vNMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJLmlOc2
bPT6r9Q9yaThq5kjHfnePu4EzjKefbWg7kpsk7+4/9rsTflaqvEV1BHoBe7EecXo
KE5Gga9g90JNTwlgGIVgBpvqwlhFkb829wnK1RhI3s+PW2O6gKUcq8H2qAXcLBSi
j4+GhBccp/21ChBAB4w6dK7tFjuuQ9G7n9H7jDvUVJquILwIYtBpWHQ454OrdEer
cYxh2KNJ6ZF1h5qAiYrPRg2vNd++ucx8IVVbhcl3YW07e//u5gX/B1GzqUKz5pDB
ux7K8XyCC/ubhapa8TwqkLqm8+EWqoMSA5arFwTc/jKcJ1x0DAzrEKnmWNPk/TM+
vjV1XTErzykT3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:38 2025 by rpki-client