Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: SZzuq/fv7dREnMBUpX66zKiKfwjiEtut3l0lG1bNRP4=
Subject key identifier: 5E:30:B8:E2:40:F4:18:19:63:7C:90:09:38:F2:0F:7F:80:5E:BF:E8
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019A4F2B85161F2FE61068FC6FE963CCCC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 1260
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: FUZe6fx2NjkxabCKg0w0xB5vLY5KYvY0/DXMws9822c=)
2: dCeSeEvJ80fiDLJDN1fGsoVbK-k.roa (hash: 3a4yszIZKCDvFLydfEkbG4N0SBZOOG/zu+YBX5G2W1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:85:16:1f:2f:e6:10:68:fc:6f:e9:63:cc:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=5e30b8e240f41819637c900938f20f7f805ebfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:25:a0:96:c2:c9:c9:7c:d4:b5:b7:ee:e4:
78:23:86:1b:52:d4:12:1a:c0:fe:c4:3d:4e:b6:f7:
af:1c:bb:e4:fc:63:ca:6a:b3:db:b0:20:5c:c0:a4:
1b:b5:58:49:49:91:04:b3:96:85:78:f9:73:4c:f5:
fe:0e:7b:ef:2a:8f:0c:33:db:3a:dc:74:17:8d:e2:
8f:65:c7:d1:ea:f4:38:c4:8f:75:dc:a5:b4:4c:6b:
be:26:f2:50:7b:e9:29:f8:3f:67:a7:f0:5f:95:ab:
97:84:f1:0f:3d:47:c6:52:fd:39:c4:7c:60:69:b7:
de:27:6a:20:bd:fa:20:46:df:8f:3e:7d:cc:50:6b:
f9:28:53:f7:db:dc:72:16:94:f1:f8:c5:e6:dd:ed:
3d:47:19:5d:f0:d7:8e:ce:5b:47:d0:48:bc:f2:c5:
37:e7:1c:99:0b:c8:1a:df:e5:42:e3:58:36:d5:c0:
ea:62:33:7d:67:ad:1d:bd:61:a3:89:44:6a:22:9a:
b9:ea:10:12:65:b1:fb:bd:f7:b1:c8:29:0e:72:7e:
e3:97:0c:50:ae:55:48:91:23:83:06:7c:da:72:e4:
ef:3b:c1:29:2a:96:64:1b:52:7b:42:42:01:ea:e7:
83:1b:b5:95:22:89:bf:76:09:f6:28:dd:57:19:c3:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:30:B8:E2:40:F4:18:19:63:7C:90:09:38:F2:0F:7F:80:5E:BF:E8
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:27:ef:2c:8f:43:4c:63:bd:62:f2:a9:53:c4:88:c4:a6:
96:f7:af:11:27:f7:0f:9a:90:e5:88:63:d7:22:1b:8a:e7:92:
39:50:82:59:20:c8:fe:34:48:5a:97:70:89:ea:cf:e8:02:5b:
37:11:33:06:64:5e:a0:5a:7c:56:c2:d7:e8:e0:7a:fe:88:f4:
86:b4:7b:51:82:76:1f:9b:19:b5:11:ff:48:dd:f5:8c:ff:19:
8e:1e:8d:05:0a:9d:21:8f:eb:c4:1b:48:3b:66:79:3c:18:39:
54:fb:56:4e:cb:58:d1:ab:48:c1:72:4b:da:e9:86:2e:4d:63:
97:52:20:d3:d9:68:b0:3a:30:6c:a3:05:64:06:d5:29:3f:8c:
3e:ed:80:a0:a9:4c:86:a4:65:86:05:de:83:13:3a:80:f0:98:
13:ac:dc:49:d3:78:a0:fb:36:09:c7:39:65:28:8b:1c:d4:24:
36:83:7e:88:de:1d:2f:18:b8:93:1f:35:d8:c4:70:3e:6f:bc:
5a:54:f3:3f:d9:12:68:58:5e:29:78:46:26:98:14:98:52:32:
24:9f:dd:6a:08:ab:d5:4a:74:1a:fe:90:84:72:bd:6e:39:6c:
7e:14:05:30:b0:6e:56:49:03:f8:30:ef:7b:28:2d:43:00:41:
af:4e:89:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4UWHy/mEGj8b+ljzMwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjUxMTA0MTQwMDQzWhcNMjUxMTA1MTQwMDQzWjAzMTEwLwYDVQQD
Eyg1ZTMwYjhlMjQwZjQxODE5NjM3YzkwMDkzOGYyMGY3ZjgwNWViZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny0loJbCycl81LW37uR4I4YbUtQS
GsD+xD1OtvevHLvk/GPKarPbsCBcwKQbtVhJSZEEs5aFePlzTPX+DnvvKo8MM9s6
3HQXjeKPZcfR6vQ4xI913KW0TGu+JvJQe+kp+D9np/BflauXhPEPPUfGUv05xHxg
abfeJ2ogvfogRt+PPn3MUGv5KFP329xyFpTx+MXm3e09Rxld8NeOzltH0Ei88sU3
5xyZC8ga3+VC41g21cDqYjN9Z60dvWGjiURqIpq56hASZbH7vfexyCkOcn7jlwxQ
rlVIkSODBnzacuTvO8EpKpZkG1J7QkIB6ueDG7WVIom/dgn2KN1XGcMLaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4wuOJA9BgZY3yQCTjyD3+AXr/oMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIgn7yyP
Q0xjvWLyqVPEiMSmlvevESf3D5qQ5Yhj1yIbiueSOVCCWSDI/jRIWpdwierP6AJb
NxEzBmReoFp8VsLX6OB6/oj0hrR7UYJ2H5sZtRH/SN31jP8Zjh6NBQqdIY/rxBtI
O2Z5PBg5VPtWTstY0atIwXJL2umGLk1jl1Ig09losDowbKMFZAbVKT+MPu2AoKlM
hqRlhgXegxM6gPCYE6zcSdN4oPs2Ccc5ZSiLHNQkNoN+iN4dLxi4kx812MRwPm+8
WlTzP9kSaFheKXhGJpgUmFIyJJ/dagir1Up0Gv6QhHK9bjlsfhQFMLBuVkkD+DDv
eygtQwBBr06JGA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:12 2025 by rpki-client