Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: PFoVucN792YMCFJqz9oKcnLMNiSOWTVCdJn4e4Vj0As=
Subject key identifier: 59:46:CE:83:E3:54:02:6C:D5:3D:C9:F0:0F:5D:FC:D6:96:31:07:75
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 01987E2EEFF28640798E4F4EEDD1E364CF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 122F
Signing time: Wed 06 Aug 2025 07:01:01 +0000
Manifest this update: Wed 06 Aug 2025 07:01:01 +0000
Manifest next update: Thu 07 Aug 2025 07:01:01 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: VNqj/iUOAluhJp9jgyvQZryKVirzLNElxq8jPXEvb4s=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:ef:f2:86:40:79:8e:4f:4e:ed:d1:e3:64:cf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Aug 6 07:01:01 2025 GMT
Not After : Aug 7 07:01:01 2025 GMT
Subject: CN=5946ce83e354026cd53dc9f00f5dfcd696310775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:70:c7:61:f7:8b:34:22:d1:c5:18:46:68:
30:38:ae:17:6b:53:5f:e6:6a:b2:90:ab:b5:a9:f2:
34:fd:19:06:a4:e9:3f:00:b8:4a:58:7f:9f:12:f3:
d7:f9:ac:c3:41:3c:1c:9c:3c:cc:99:ce:17:f4:78:
f6:a5:08:b1:a1:a9:60:6b:b8:66:23:50:73:82:96:
72:db:7b:98:92:73:76:e8:51:c6:b0:19:42:0e:0b:
99:32:0d:25:f7:94:7b:97:3e:38:35:55:fc:61:bb:
6e:7a:b3:23:35:83:0c:f3:ed:ec:b2:0e:27:fc:24:
d0:f5:20:7e:58:bd:59:6f:94:b7:09:2a:c6:41:2e:
4b:c9:1a:b9:19:96:4e:c0:09:d6:c7:cb:bb:99:86:
96:d8:49:5e:a5:86:9b:0a:9f:a5:6a:96:40:26:a7:
d1:93:be:c8:86:58:99:11:00:a8:ae:4e:f5:00:5d:
37:62:c7:99:97:85:12:50:52:24:f7:37:69:43:9d:
c1:ec:6b:29:98:04:e9:3d:4f:18:ba:8c:4f:28:0d:
d8:ca:26:06:71:af:a7:58:94:fb:2d:87:f9:3a:ee:
b8:02:50:b2:c1:38:6f:ab:9d:3b:ad:3d:a8:92:cb:
c4:e2:df:d3:ac:ff:9f:74:64:18:dc:0e:3d:11:b8:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:46:CE:83:E3:54:02:6C:D5:3D:C9:F0:0F:5D:FC:D6:96:31:07:75
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:0e:b0:9c:17:4b:6b:d6:2a:c3:94:ab:fd:ad:6c:c6:53:
75:11:ac:f4:17:a3:8c:18:0d:68:69:c1:bf:84:29:f3:c6:2f:
1a:1d:8a:22:1b:c9:d3:d4:b3:69:1b:b8:b6:52:4d:c2:a4:de:
3c:37:49:2a:cc:a1:bf:4a:89:08:c8:88:ec:dc:19:a0:43:21:
7e:4a:e3:bb:67:75:36:43:72:6d:e7:ee:c4:40:43:74:c5:5d:
c3:29:e9:40:02:89:1f:9d:b4:3f:78:e3:dc:0c:98:a6:5e:0c:
ad:ca:4b:7d:94:d6:7b:51:ac:03:53:96:81:82:da:53:8f:df:
d4:9a:ab:2e:8b:10:e9:91:74:49:3d:ef:fd:bc:10:bd:29:68:
f4:42:02:0b:c3:b7:7e:47:c7:3b:83:39:27:91:90:62:82:28:
ac:38:5e:02:86:5a:de:04:bc:6b:43:0b:a6:24:7e:a4:10:9d:
99:a1:2e:ec:d0:43:79:4e:ea:36:4d:40:e3:5f:21:85:0f:81:
2c:80:45:6c:2e:e5:9c:f7:d4:03:d7:2a:7c:6c:de:d9:05:ec:
a1:86:4d:e6:34:6f:b5:47:55:84:44:fd:b5:9b:d0:16:0b:64:
2c:66:76:ee:15:6c:69:64:e9:b2:1b:6b:ba:7b:12:19:08:36:
ac:a5:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:51 2025 by rpki-client