Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: /+/RY9lrI/tAMJjPNnfiJn0IBs3aNiau1Knzdhs0ZhM=
Subject key identifier: 69:94:01:AE:5A:75:0D:A9:AA:39:F5:3F:0F:52:6E:DD:50:81:31:98
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 01976DE276BC31B0B0D37662B7485F0F1298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 11A2
Signing time: Sat 14 Jun 2025 10:00:47 +0000
Manifest this update: Sat 14 Jun 2025 10:00:47 +0000
Manifest next update: Sun 15 Jun 2025 10:00:47 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: 8gUfy00L0w6WKC5frfPHnaaiILGPU/AxN6sdcopfGrk=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:76:bc:31:b0:b0:d3:76:62:b7:48:5f:0f:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Jun 14 10:00:47 2025 GMT
Not After : Jun 15 10:00:47 2025 GMT
Subject: CN=699401ae5a750da9aa39f53f0f526edd50813198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:72:4e:2f:56:5e:40:ed:d4:ce:d0:92:5e:
96:48:1b:ec:0a:44:68:af:02:b8:a4:2a:b4:6a:64:
de:33:1d:d9:fe:7b:8f:76:cd:18:99:ab:74:70:ab:
fa:78:ab:13:bd:e8:b2:ce:86:38:32:aa:c9:1c:32:
4a:2b:2f:1a:40:db:2e:84:44:5f:65:8c:42:27:36:
0c:c0:40:41:a3:ef:74:dc:0b:94:72:9e:9f:22:04:
94:a5:e4:79:95:86:0c:9a:60:1b:66:c3:30:04:1b:
16:88:24:e7:50:c8:9a:7a:fb:d1:c0:20:fc:eb:e9:
3c:1c:26:84:ff:30:56:8b:f3:26:52:8a:2f:98:11:
e2:0d:6f:b9:a6:65:11:a9:69:71:e1:41:30:cc:ac:
9f:3c:6f:63:55:b8:fc:c0:e7:50:1a:fc:8b:8e:60:
07:07:5a:12:6e:d9:a3:85:cc:8d:f2:9f:3c:10:ca:
fb:09:7d:3f:9b:a7:31:6e:85:f1:37:1b:c5:9d:15:
60:fe:1d:48:22:a1:d3:0f:ba:e4:2c:f3:06:7c:7d:
45:0a:6c:9b:04:98:4a:bd:d0:af:e8:75:86:42:54:
67:b8:45:ed:8b:4e:a6:87:9a:b7:ef:40:5c:40:1a:
6f:ce:ef:98:45:ae:77:08:82:38:d9:cb:c0:27:83:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:01:AE:5A:75:0D:A9:AA:39:F5:3F:0F:52:6E:DD:50:81:31:98
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:86:c4:90:fa:69:0a:d0:22:44:2c:f7:92:61:98:dd:52:16:
fc:84:9a:67:3c:bd:9b:3e:a6:6b:1a:74:e8:63:25:57:ce:8a:
0c:d6:20:2a:fe:03:91:d3:17:bc:1d:81:72:f9:70:b9:63:e4:
d3:4e:9a:fd:36:5a:2d:6e:e2:73:83:78:7b:03:21:58:08:c9:
e9:d4:cf:e2:de:af:0e:70:5d:90:d0:c7:dd:5e:ad:a4:84:cb:
79:a1:ed:d9:fc:ab:90:58:e0:8e:16:c5:ee:04:43:e8:bb:a7:
4e:cc:d2:d3:d8:99:27:ab:91:a4:39:54:cd:85:07:fe:85:33:
f1:1d:69:f2:bf:af:00:6d:9d:9a:d7:38:b1:dd:58:47:ce:e8:
c8:7b:0d:46:a3:86:b9:c1:66:82:89:1d:5a:35:87:1f:c8:40:
c3:12:8e:d8:bb:58:4e:99:60:2a:48:b3:90:c9:5e:70:28:8b:
43:8b:1e:31:5e:20:87:4f:ed:21:1e:4a:16:54:bf:96:2a:a3:
7a:1e:25:9e:91:60:8a:64:9f:37:70:19:01:73:fb:e7:09:93:
4c:28:45:3f:65:4e:ec:71:75:12:77:74:f0:ac:18:a4:82:7f:
a5:2c:5b:cb:cb:1f:12:90:0d:a0:09:04:91:bf:d4:72:c1:2e:
45:ce:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:59 2025 by rpki-client