Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: Xh5v9p0b7N+avlFtE+TDgX1kK34sbdHPJV/oc7pnCpY=
Subject key identifier: DF:01:94:7F:A8:98:42:71:1A:2F:40:4D:56:3E:EA:88:2B:7F:05:D6
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 0197B6D7A5C67AFE9EEAC2924077913C8923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 1108
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: Rfq9e0XoJ6FZL9R/FA/uvkEGA0pdlSU16MEk6owl+2w=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a5:c6:7a:fe:9e:ea:c2:92:40:77:91:3c:89:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=df01947fa89842711a2f404d563eea882b7f05d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:30:f2:96:89:bc:28:8b:a2:48:da:e5:41:
c3:ab:4f:46:1c:5b:04:80:01:12:c0:2b:bf:f4:6c:
88:35:97:15:e3:3b:e9:90:99:25:e0:33:79:c6:54:
22:89:1d:0a:2c:ab:cb:27:53:f0:6f:47:69:84:5c:
86:c0:dd:eb:b1:58:4a:a5:d7:a3:7f:da:99:71:15:
d0:41:3a:38:cf:1f:da:4a:95:9b:1a:05:30:bb:77:
df:45:b7:40:01:ea:71:37:15:e7:97:cd:04:b7:60:
a4:da:c0:62:0a:10:cb:5f:9c:0d:62:f5:77:70:0f:
84:0e:94:2a:6a:0d:ea:a0:78:d8:91:7e:3c:62:27:
1d:d9:1e:87:6a:e4:20:03:37:74:2f:0b:ef:74:e0:
89:bc:b1:30:6a:4c:3b:00:f5:ad:06:a4:c9:50:87:
a7:13:e4:b4:80:dd:91:bd:ce:0c:a0:61:ea:51:de:
f3:0d:0e:ad:1e:e3:af:e2:d8:e0:05:a5:19:a0:94:
f4:ac:5b:24:5f:ff:fa:b6:e5:ae:eb:b9:b7:c5:60:
20:c6:3c:44:d1:9b:39:b3:09:b7:83:50:94:0b:46:
3a:53:ae:35:08:bb:77:15:84:24:32:8b:30:81:e2:
77:9c:d3:43:56:24:ca:53:f6:70:bf:34:a1:f5:98:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:01:94:7F:A8:98:42:71:1A:2F:40:4D:56:3E:EA:88:2B:7F:05:D6
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ea:d0:8a:02:3c:46:d6:c3:ab:ae:84:36:da:ec:92:ae:5c:
74:c0:3f:1c:9c:2f:21:fd:e3:e3:2a:c7:de:0c:90:bb:e4:b7:
7e:24:0c:2a:7a:66:1e:37:8c:21:a7:50:bc:db:6c:fb:15:7b:
cb:8a:b7:6b:7c:e2:e0:1a:96:56:ad:57:89:98:f5:4b:49:64:
d1:66:c1:90:c5:01:74:c7:b3:23:fa:6b:17:e5:18:a5:61:5f:
20:70:b7:aa:8c:77:a3:5d:b5:5e:86:6b:91:a1:b7:e3:2f:01:
5f:ce:40:5a:4b:1e:2e:eb:2d:93:dd:df:41:4b:ec:65:48:03:
15:8d:52:44:96:c2:95:d4:09:2d:c0:be:b8:f9:84:5e:37:a6:
b7:e9:68:66:dd:b9:e0:a7:d3:40:a7:63:14:38:d8:0c:f7:c9:
43:17:5d:8e:c7:82:7d:c0:1e:c0:38:f5:b6:a7:91:e9:30:41:
0a:b8:7f:50:57:a4:ef:51:4f:b9:ea:5f:6b:bc:6b:83:52:34:
d6:71:f3:8a:f5:fd:fe:21:11:a7:09:58:e8:6c:30:a7:f5:68:
b1:0a:9e:8b:9f:f9:52:06:ec:ef:27:1a:ec:d3:f3:62:ae:d6:
97:77:43:90:bb:f7:bb:23:38:dc:e9:31:42:28:13:dd:a2:50:
2f:15:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:33 2025 by rpki-client