Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: Ma1VZM8W7YPtqGKFQeMzjjJ9jAMzixDg1s3b+wiPydg=
Subject key identifier: A3:70:96:67:4E:EE:3D:77:E1:65:15:21:20:57:10:E0:16:85:68:8E
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019A71EEA77EF26065E87EABDA7496A1DF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 1272
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: a65jyD3Otnq2EfsnDmnlzH3laB7HafKbyNmf2f35AeA=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:7e:f2:60:65:e8:7e:ab:da:74:96:a1:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=a37096674eee3d77e1651521205710e01685688e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:17:99:5d:fc:81:76:9b:86:f9:f6:45:72:
17:af:c5:01:a4:89:ac:ed:65:15:cc:a0:e8:72:7f:
ab:a1:e7:48:5e:ba:25:83:0d:47:b5:d1:0b:35:93:
b6:5b:68:97:93:b2:24:93:13:a6:e7:32:cd:cf:c7:
f9:bb:69:84:6a:26:0d:21:1c:01:95:bd:75:7f:0b:
83:75:e6:0c:f9:d7:28:62:88:46:9b:e7:7b:4a:42:
a6:e5:ec:7a:86:ea:77:28:30:55:7d:18:ae:9d:ea:
65:a5:35:e4:e9:9f:d2:19:5a:bb:b6:b6:b2:94:7d:
c5:64:81:42:7d:3f:0b:75:7c:37:79:f3:e2:7a:96:
9f:cf:b7:38:bd:9b:a6:ed:98:b7:da:bf:47:e8:a4:
77:86:b5:3c:59:cc:cc:0f:8b:61:b6:91:7a:e8:6c:
5c:19:a3:33:49:b0:4a:fd:6f:36:b0:54:30:47:00:
f1:d6:f5:61:81:21:2e:07:40:8d:41:b3:4f:fb:ce:
31:41:08:4f:c2:df:28:c7:0c:1e:b9:d4:9c:f2:81:
76:de:55:88:91:41:44:ea:f3:c6:9c:48:47:1c:31:
f0:68:51:ad:c2:de:8f:94:e9:02:6a:30:37:97:ba:
df:66:8f:5e:3b:cc:50:99:41:6c:2c:e1:0b:f6:0e:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:70:96:67:4E:EE:3D:77:E1:65:15:21:20:57:10:E0:16:85:68:8E
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:26:57:cb:92:6f:4b:98:b2:6c:72:39:2b:72:62:1a:95:2f:
ae:5e:3d:82:77:fa:2a:47:a5:e7:b5:5d:d4:93:0a:4e:d2:c1:
ef:9e:15:0d:d8:a0:4e:14:ff:2d:f6:96:fc:6e:4f:97:08:1a:
92:e8:17:45:ea:70:65:02:0d:1c:32:e9:f9:75:37:fc:e1:64:
12:ab:e0:99:77:d9:5f:f7:7f:fe:5c:0d:d3:b8:83:6e:06:7d:
18:70:2a:a0:11:8e:fa:47:4f:8b:01:c0:03:a2:44:a1:ce:94:
a8:3e:06:9b:ab:21:48:44:67:5e:0b:32:5e:8a:73:a2:40:c1:
18:57:23:09:59:c0:ac:db:9d:88:db:d9:51:03:fb:57:b7:89:
a6:f6:4e:fc:1b:e5:36:47:0f:17:b2:82:3a:3b:e8:2b:9c:0f:
ba:da:69:00:07:c3:19:49:66:42:2f:76:6a:95:63:f9:6e:ad:
e3:8c:c6:57:1f:42:3e:29:c4:e8:82:1d:ca:bb:07:1d:e5:ca:
ea:83:3f:ac:05:e0:fd:48:2c:86:a5:7a:78:b1:0a:8a:53:1c:
84:2d:d7:ee:66:9e:15:4c:25:8d:78:de:c9:5a:41:bf:6e:a6:
ec:5c:22:6a:12:64:a3:6b:bc:d4:da:ff:92:64:87:83:ca:40:
c1:3e:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:42 2025 by rpki-client