Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: RNZr7gk8kcfcygJ9ry5atg+1rx4c/nicKNmsjbwimK8=
Subject key identifier: D9:95:8A:E3:96:6C:3A:C5:FE:BB:2E:7C:40:53:01:01:27:DF:8C:15
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019653EE29A0E4EDAD62A63492FA59BE4EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 1110
Signing time: Sun 20 Apr 2025 16:00:39 +0000
Manifest this update: Sun 20 Apr 2025 16:00:39 +0000
Manifest next update: Mon 21 Apr 2025 16:00:39 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: PtYhhQF0l8xiSVuZjP20wLltk5FlN7nLsv+CW5g3+2E=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:29:a0:e4:ed:ad:62:a6:34:92:fa:59:be:4e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Apr 20 16:00:39 2025 GMT
Not After : Apr 21 16:00:39 2025 GMT
Subject: CN=d9958ae3966c3ac5febb2e7c4053010127df8c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:64:a6:37:ff:bc:38:da:6a:88:1d:e1:cd:
7e:ad:24:1d:dc:5e:c4:5e:0a:95:4b:e0:ee:cf:14:
11:1a:14:5f:9e:cf:e6:64:e2:e0:22:96:aa:27:4d:
e9:b7:e5:65:5f:90:9f:e6:ed:20:36:06:d9:61:b1:
02:4a:81:13:b9:c3:54:88:aa:76:32:75:f1:fe:6b:
5b:0a:12:cb:1a:bc:3a:13:52:b3:77:5f:69:f8:85:
a6:b3:cc:63:06:5d:45:85:21:58:e2:7b:05:3d:46:
8b:2b:13:e7:d8:6f:4c:2e:da:19:ca:89:88:f8:1e:
46:8a:5f:6b:af:8d:23:ad:0b:2d:fe:35:4d:8d:98:
d8:e3:3a:78:82:ec:fb:37:b2:e0:7d:25:fe:c9:a7:
be:2b:2d:76:bd:93:13:11:bd:4b:6a:f4:33:f4:98:
93:ad:8a:1d:ec:6b:a1:69:2a:27:97:58:99:85:78:
5f:10:76:5c:87:a0:f1:be:63:18:88:d6:85:4c:d5:
c3:47:c6:a8:4a:43:02:4b:ac:d2:63:03:1d:29:71:
32:46:7b:0e:48:d4:65:e8:81:42:f7:ff:94:38:49:
21:e2:55:65:1a:81:32:73:60:51:42:45:b5:11:ec:
0a:17:21:8a:af:f7:d9:5e:08:a2:6e:b6:fb:09:51:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:95:8A:E3:96:6C:3A:C5:FE:BB:2E:7C:40:53:01:01:27:DF:8C:15
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:b5:95:d3:1e:a3:52:e2:70:aa:1d:c7:e2:d0:ff:df:f8:
78:d4:ad:32:6e:e1:fc:09:7f:e9:db:58:25:5e:e0:96:22:ef:
57:9b:8b:5e:17:ba:1f:7f:5e:3e:26:d1:5e:2e:9a:27:27:dd:
7a:3c:cd:e6:af:94:d5:d5:2c:6a:b1:09:ed:a8:7a:3a:de:d6:
5c:c8:e5:b7:29:56:55:1d:20:17:73:30:cd:a3:2a:97:e7:ff:
73:c9:76:37:be:65:a0:b7:97:7f:52:9e:9e:c4:b2:c8:bd:2b:
9d:ae:52:51:01:c5:a5:71:10:f7:52:59:89:37:4b:b1:96:18:
7d:fd:d4:3d:53:fd:6f:9f:d1:c3:71:60:2b:31:65:8c:91:18:
1f:a7:c0:e8:4d:47:ec:a6:c6:b1:37:46:ba:a8:06:c0:2b:4c:
45:c6:4e:5b:1f:c5:37:b1:b4:50:f5:82:fe:48:f2:60:bc:a8:
56:4a:7e:ac:dc:71:ee:05:39:e0:3f:f8:c3:f5:61:4b:b1:6c:
4a:1f:f4:00:11:9b:d6:00:ab:fb:db:b9:87:63:a8:39:5a:2b:
2c:0b:d4:68:3f:fa:e4:51:52:b1:47:bf:5e:1f:9b:bb:81:a7:
a5:25:bf:58:5c:46:7d:30:61:da:22:1c:b0:95:65:4c:d5:37:
c8:15:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:08 2025 by rpki-client