Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: N8D4713dNPGVI4xOTvP35f+5ErnrcW4eMsyVZfthwvc=
Subject key identifier: BA:8E:25:66:E2:1D:ED:CC:34:6D:A7:58:84:6C:F9:2C:E4:FC:2F:4A
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 0198D697F6E9263F021E90F0556C861BABC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 119D
Signing time: Sat 23 Aug 2025 11:02:19 +0000
Manifest this update: Sat 23 Aug 2025 11:02:19 +0000
Manifest next update: Sun 24 Aug 2025 11:02:19 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: A4F/lhMIgs67tSjwckMhd9e678AIkjU/uRgcpX6pb+4=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f6:e9:26:3f:02:1e:90:f0:55:6c:86:1b:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Aug 23 11:02:19 2025 GMT
Not After : Aug 24 11:02:19 2025 GMT
Subject: CN=ba8e2566e21dedcc346da758846cf92ce4fc2f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:78:97:16:58:31:0d:00:08:c5:13:87:f0:
f1:5e:7a:9c:1e:c5:56:91:68:28:ad:cb:27:c7:c9:
e9:28:1d:ad:38:23:b8:05:f8:fd:5e:7e:2f:73:d0:
5e:14:21:a8:6e:11:bb:e7:ad:28:e0:7b:90:01:62:
41:86:66:0d:d1:f3:74:9a:75:60:56:2f:07:97:76:
3b:4f:a5:09:2a:7c:e5:73:92:b5:71:49:91:92:a2:
0f:03:59:36:89:9c:a7:e4:a7:87:44:bc:4d:09:63:
4d:d6:16:62:23:bd:a3:68:4a:29:fd:30:b0:7f:60:
31:96:4d:7e:5c:bc:30:fb:4c:60:8a:31:eb:05:d5:
a5:3e:bb:fc:f7:be:a8:5f:58:b0:55:ff:ee:3c:e0:
67:a6:2f:71:2b:e4:fa:7d:b1:c6:45:8e:02:98:6f:
95:45:9c:95:d7:91:cb:ec:c4:19:84:49:1e:8d:1e:
71:a7:f1:64:14:12:cc:08:cd:54:3a:df:df:49:45:
56:31:69:b5:ac:77:0a:2b:80:14:2e:fc:3e:7c:8b:
d3:2a:15:b7:4a:3a:7c:bf:9e:2c:1e:97:c5:8b:c5:
7b:19:31:20:4c:22:44:3f:99:3e:e1:fd:cb:ec:7f:
c6:c5:7d:9e:93:4c:a1:13:73:af:6f:64:fc:56:54:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8E:25:66:E2:1D:ED:CC:34:6D:A7:58:84:6C:F9:2C:E4:FC:2F:4A
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d7:75:f5:a8:63:41:1e:6b:a3:da:77:70:2c:0c:fb:0b:82:
81:2c:ce:af:dc:78:83:a7:d8:b5:b2:03:70:ba:96:f3:74:fb:
7e:7c:6b:0a:67:93:bb:0c:3e:aa:45:f5:16:bc:bd:3e:96:5e:
44:7d:fd:d0:c0:05:e4:a2:f0:ff:05:aa:2b:58:67:1c:09:fc:
ee:c8:d8:c8:b8:95:32:c4:58:f1:5e:aa:8d:ee:b1:15:72:0c:
00:97:a1:4a:f3:57:5c:73:e7:64:04:e6:21:50:84:a2:74:64:
71:3d:a0:83:5e:77:5f:a9:d3:f9:55:d6:68:46:a7:9c:96:87:
25:31:fc:39:b2:ed:92:ce:5b:ac:df:4d:5a:81:ac:51:90:53:
9a:b6:a5:44:05:60:f0:c4:a1:98:b4:0a:23:8f:ab:4b:db:5c:
6e:bc:39:64:22:51:24:3b:8c:b6:3d:4f:80:48:fe:3e:cb:f2:
7f:27:cd:c0:f1:0c:8b:dd:d7:9f:de:90:26:a2:2a:79:d3:d4:
f6:f9:2c:71:08:36:fd:f5:57:0e:e6:f4:6f:25:15:b5:38:26:
f0:cc:60:60:32:6e:30:20:fd:9d:4c:d3:7c:7a:71:f9:64:0a:
e8:75:5a:16:df:86:2b:c9:5c:54:bc:7d:cd:25:f5:a7:89:72:
62:31:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:58 2025 by rpki-client