Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: aibxc2iNZxEQNc8WrdB63rX9NcawelJJR5hLFBPD2RE=
Subject key identifier: CE:AD:90:78:E1:84:C1:ED:73:5C:FE:2B:BC:7C:77:2D:D3:4C:5E:FC
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 0199FFFE9C40B245D3CBD7389923F38A4FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 1237
Signing time: Mon 20 Oct 2025 05:01:40 +0000
Manifest this update: Mon 20 Oct 2025 05:01:40 +0000
Manifest next update: Tue 21 Oct 2025 05:01:40 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: JLGn9rZpWRBbS9Jqmy4P0WHqUh5VMa/Nqqgd9m0hwcs=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9c:40:b2:45:d3:cb:d7:38:99:23:f3:8a:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Oct 20 05:01:40 2025 GMT
Not After : Oct 21 05:01:40 2025 GMT
Subject: CN=cead9078e184c1ed735cfe2bbc7c772dd34c5efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:be:08:f1:ab:28:0e:22:05:bc:91:1b:80:
00:b0:64:04:a0:84:04:6a:26:0b:ba:27:06:e1:27:
79:ee:db:45:45:58:21:56:0d:37:bd:a5:a1:7c:8f:
8e:8c:94:4d:16:35:18:22:32:c2:1f:89:2d:d4:ba:
52:f3:1e:20:5e:9d:a9:eb:c9:03:88:b0:06:a6:74:
fd:93:79:be:4f:75:11:0f:c4:e5:68:da:81:06:2c:
0b:31:69:56:cd:71:a8:40:8a:90:6c:17:1e:09:c2:
19:3b:03:2e:0e:54:f1:37:50:02:5e:b6:a9:2e:79:
59:20:88:42:cb:d1:cc:80:eb:7f:9c:95:f8:17:6d:
12:aa:b4:75:0b:10:b1:b0:41:a7:3c:40:de:a0:4d:
9b:1b:d8:cd:47:8a:85:6e:dc:8d:2b:b3:ed:40:7a:
5a:bb:56:67:f2:f9:44:f0:07:1e:b1:13:8c:a7:c2:
19:e4:28:67:cb:b5:eb:f7:6d:bd:4a:3d:f0:cb:11:
e1:55:59:32:10:4b:fa:82:b3:99:59:3a:dd:95:da:
7a:15:e4:55:e1:21:f7:4e:6e:a8:02:23:97:46:62:
96:cc:e8:68:68:bc:9c:d9:6c:d8:ea:22:7a:ae:f1:
4a:f0:87:75:71:95:92:20:4e:0d:18:f0:6c:be:da:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:90:78:E1:84:C1:ED:73:5C:FE:2B:BC:7C:77:2D:D3:4C:5E:FC
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:4b:7e:67:28:d5:f0:ff:f0:a2:4e:7f:c3:5c:fa:a1:1a:
f1:bd:71:b8:4f:cc:ba:25:91:b7:1d:44:c1:20:38:82:86:33:
01:27:68:7d:31:f7:36:36:c4:aa:bc:bb:3a:8e:69:fe:77:7d:
1a:ca:33:0e:85:95:ec:94:be:62:2e:fa:96:b2:cc:c4:03:f8:
ad:d9:b3:c7:76:b2:62:a5:a2:18:60:19:66:7d:e5:fb:66:ef:
ad:23:9c:61:7e:cc:5f:e6:7d:ed:55:04:91:11:31:4f:9a:75:
ca:19:a8:00:49:2b:64:73:d4:ea:c8:e0:81:bd:1d:72:22:76:
c5:2f:f5:78:01:af:45:30:5f:8f:34:b7:bf:fd:f3:fe:51:01:
72:59:fd:72:1f:30:6e:22:30:03:3c:29:55:df:9d:03:66:41:
14:db:a7:e7:79:b6:ed:dc:59:67:d2:49:2b:43:88:4a:9e:71:
6c:cb:9d:65:53:65:b3:db:93:7c:0a:d5:62:a3:cf:a8:74:f7:
eb:61:32:87:09:ba:99:68:fd:cc:85:13:e1:57:9f:5c:60:f4:
c2:00:51:b4:72:09:11:bc:53:c9:dd:9c:8b:83:47:8e:0a:9d:
2f:dd:9e:1a:3e:09:e7:05:7c:26:5d:6a:2f:3e:19:15:fb:22:
99:39:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:12 2025 by rpki-client