Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: qECHLZQYA0dAr1elCEJw/uAwSnckPDiF5dR8HL/Oijw=
Subject key identifier: 08:4A:33:1C:B5:6A:A5:01:84:D3:83:B3:5E:93:2D:C4:AF:89:01:10
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019A4F62B117B10D343BDC56B823046B43C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 1320
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: Ey3k6YoYN6W9MxOqEidc/vk/ZnlzpRfaUXsyl+4SG/g=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b1:17:b1:0d:34:3b:dc:56:b8:23:04:6b:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=084a331cb56aa50184d383b35e932dc4af890110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:b9:c9:59:78:5c:64:d2:04:f0:68:ee:cf:
0e:b0:09:77:4c:01:a3:08:e6:47:77:e0:d7:61:ff:
c3:1b:b9:d7:ba:fd:53:eb:c4:7b:6c:39:d7:d9:e0:
e8:b1:6e:7a:f1:58:d1:d0:3c:b8:0f:02:ae:be:36:
04:5d:2a:8b:e0:b7:db:12:2b:61:29:78:99:72:15:
21:6d:79:be:fa:0f:77:8f:c9:b9:c8:d2:7f:fb:2d:
01:e7:d6:77:84:93:b2:b6:a5:1b:fd:83:48:5f:65:
17:9a:75:4e:44:c8:b5:72:35:c1:3a:ae:3b:2f:7d:
fa:05:ca:19:0d:56:58:ad:f8:ea:f0:f7:3b:b4:aa:
d6:81:c4:7b:84:ed:f1:05:c1:6b:76:da:62:33:a1:
5f:d8:d9:56:f0:91:87:ea:fa:c3:42:dd:31:48:7e:
16:03:2f:d6:b7:e2:c1:b1:f0:46:fa:25:30:b7:19:
33:54:e6:e0:c8:a1:8c:92:a2:43:69:e0:32:8f:02:
3a:51:bc:1e:53:a9:dc:3a:81:49:ef:86:86:1b:54:
86:80:c9:b1:da:b4:87:a7:3b:01:9c:eb:8a:e8:17:
03:06:1c:01:ee:46:8b:a1:5b:84:c0:58:1a:7a:66:
5b:08:5b:cf:eb:cc:6e:a5:b9:8b:58:59:f8:ca:af:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:33:1C:B5:6A:A5:01:84:D3:83:B3:5E:93:2D:C4:AF:89:01:10
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c3:f6:86:e5:85:50:ce:4f:46:ac:54:e4:0d:59:7a:51:e8:
a8:02:33:3b:ee:c0:f0:13:14:2f:50:e5:5a:0c:2c:d0:f8:27:
87:87:bb:dd:1c:69:c9:a2:16:dc:32:24:0c:ee:fe:dd:37:50:
77:c3:af:9a:9a:6d:03:ac:d5:0d:41:51:f6:8c:30:c9:75:07:
61:09:0b:0a:30:73:a9:ee:b5:41:ac:68:fb:ba:0b:ad:52:ea:
a2:38:d2:74:04:43:cd:3f:3c:dd:0d:13:ee:1a:b3:d3:51:74:
d1:1b:fa:8b:e4:ca:b2:47:9e:d5:17:73:1e:9e:42:d2:ff:fd:
14:35:b6:b5:d3:49:2a:0f:10:15:f3:7e:03:3d:da:02:cb:d4:
f9:1c:23:b4:4f:96:79:ee:37:4e:f0:59:e4:f0:16:99:47:ff:
b4:2f:07:94:83:65:52:4c:65:f6:d8:21:ec:8b:bc:5b:33:0a:
bf:71:8e:79:dc:2b:7b:89:01:59:e5:ce:fa:89:52:1d:b0:54:
34:d3:5b:cf:35:a2:00:fa:6f:c0:48:a3:15:62:fc:14:e1:1b:
d1:d1:18:f8:e9:9a:6d:77:46:4c:65:15:26:94:8b:7c:fa:8f:
d1:8b:28:90:14:07:a1:5f:0b:39:d5:74:8b:f8:5b:0a:4a:d9:
3e:0b:9c:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYrEXsQ00O9xWuCMEa0PGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy
N2YxOGEwHhcNMjUxMTA0MTUwMDU5WhcNMjUxMTA1MTUwMDU5WjAzMTEwLwYDVQQD
EygwODRhMzMxY2I1NmFhNTAxODRkMzgzYjM1ZTkzMmRjNGFmODkwMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss+5yVl4XGTSBPBo7s8OsAl3TAGj
COZHd+DXYf/DG7nXuv1T68R7bDnX2eDosW568VjR0Dy4DwKuvjYEXSqL4LfbEith
KXiZchUhbXm++g93j8m5yNJ/+y0B59Z3hJOytqUb/YNIX2UXmnVORMi1cjXBOq47
L336BcoZDVZYrfjq8Pc7tKrWgcR7hO3xBcFrdtpiM6Ff2NlW8JGH6vrDQt0xSH4W
Ay/Wt+LBsfBG+iUwtxkzVObgyKGMkqJDaeAyjwI6UbweU6ncOoFJ74aGG1SGgMmx
2rSHpzsBnOuK6BcDBhwB7kaLoVuEwFgaemZbCFvP68xupbmLWFn4yq82xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhKMxy1aqUBhNODs16TLcSviQEQMB8GA1UdIwQY
MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct
MmVkMWZkZTY4NTE2LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2
LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcP2huWF
UM5PRqxU5A1ZelHoqAIzO+7A8BMUL1DlWgws0Pgnh4e73RxpyaIW3DIkDO7+3TdQ
d8OvmpptA6zVDUFR9owwyXUHYQkLCjBzqe61Qaxo+7oLrVLqojjSdARDzT883Q0T
7hqz01F00Rv6i+TKskee1RdzHp5C0v/9FDW2tdNJKg8QFfN+Az3aAsvU+RwjtE+W
ee43TvBZ5PAWmUf/tC8HlINlUkxl9tgh7Iu8WzMKv3GOedwre4kBWeXO+olSHbBU
NNNbzzWiAPpvwEijFWL8FOEb0dEY+OmabXdGTGUVJpSLfPqP0YsokBQHoV8LOdV0
i/hbCkrZPgucWw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:40 2025 by rpki-client