Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: TV5jw2/qYTOFFXRdunSd3/azrAftQXFavC/Mdil9zhg=
Subject key identifier: C4:37:E1:94:25:33:B1:94:0F:D0:C2:08:16:D0:3A:87:A2:3D:C8:3C
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019676B0FFF215736AB2D6DC698CF4BC6359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 1122
Signing time: Sun 27 Apr 2025 10:00:33 +0000
Manifest this update: Sun 27 Apr 2025 10:00:33 +0000
Manifest next update: Mon 28 Apr 2025 10:00:33 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: ZoJBBU47okxeM/FNpCo0wp275YWoy/EhvbHUhaaNrFo=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:ff:f2:15:73:6a:b2:d6:dc:69:8c:f4:bc:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Apr 27 10:00:33 2025 GMT
Not After : Apr 28 10:00:33 2025 GMT
Subject: CN=c437e1942533b1940fd0c20816d03a87a23dc83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:e8:3b:ed:7b:56:44:85:c4:69:96:3a:38:
6d:75:97:85:26:05:ba:a9:4d:13:2e:c9:92:9b:23:
a3:24:0d:ff:4e:6f:41:66:ab:eb:48:a4:d6:d6:60:
b0:3c:96:d3:2b:0f:5d:e7:7b:9a:17:1f:a0:7f:8b:
66:d1:a1:5f:68:5e:8c:c7:57:f8:b1:75:c8:26:e7:
4d:2e:68:59:d2:ed:90:6d:e3:7a:44:9a:f6:5f:61:
5b:85:e6:1e:ec:10:23:15:3e:52:38:c4:b9:9e:dc:
58:53:57:5e:1f:de:bc:8d:b2:be:79:31:bc:2b:4e:
c4:32:ac:a1:22:49:81:07:74:7e:91:aa:9b:15:19:
05:86:e3:d5:49:d8:96:28:9f:ab:63:4e:48:1e:cc:
2b:a4:f7:25:e9:27:10:c7:81:6c:ce:4e:af:9c:97:
fb:8e:20:fc:20:06:6a:fa:c6:67:a6:86:e1:9c:0f:
f9:07:14:e2:7c:f8:ab:43:cf:b4:2f:a0:27:11:0f:
bb:ab:90:49:ff:74:1a:0c:7a:e3:c2:d1:10:c0:61:
65:ab:71:eb:a3:e8:c2:05:f7:92:97:37:d5:02:20:
c6:93:37:fc:43:88:65:42:63:a1:22:45:5e:ef:8e:
f2:79:96:15:00:7c:6b:5e:dc:cd:9f:af:51:0b:dc:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:E1:94:25:33:B1:94:0F:D0:C2:08:16:D0:3A:87:A2:3D:C8:3C
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:e1:6a:48:07:b8:b1:cf:10:a6:74:76:48:ec:ea:1b:8a:
83:5e:cb:6c:f4:b2:47:df:93:67:e8:df:a2:d1:58:61:b1:e0:
f0:1a:c2:62:3c:f3:c4:f0:e4:ff:2c:93:6f:61:35:f7:98:38:
bb:17:3e:e1:30:81:e5:43:a0:e2:f1:ae:a0:dd:e2:29:6c:9d:
cc:76:e6:1e:a5:44:20:8c:60:68:9c:20:27:01:3c:49:9f:2a:
b8:ac:62:e3:61:38:95:d4:2a:e7:54:f2:fb:4c:ac:91:4c:14:
a9:4a:ee:fb:12:d6:2a:75:c9:ba:68:fe:b4:7e:ea:66:c7:ae:
fa:b0:62:05:e1:26:33:b6:f8:0c:6a:14:b3:26:75:8b:bd:99:
22:03:10:74:38:1d:a2:34:ad:f0:ad:d8:74:74:21:6d:76:1c:
4d:00:53:8e:84:9f:51:93:1c:8d:a7:88:53:7a:2c:80:30:05:
54:04:d3:2c:b3:a3:3d:e4:37:08:4c:91:1f:df:5c:a9:94:1e:
2f:f7:7a:83:88:14:c9:82:4b:e7:d6:56:16:93:39:89:75:1f:
af:95:4e:0a:5f:f7:4b:fa:34:13:d1:d2:01:6e:62:6a:d0:41:
89:2e:21:0f:b1:a2:f5:29:4d:47:dd:5f:1a:7f:53:d9:93:a1:
da:31:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:32 2025 by rpki-client