Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: nOqh69U65UN6bOPUzwOwcQvbxd5rM7liq/vI7l0DyPw=
Subject key identifier: FA:DE:DB:03:50:18:59:16:D2:46:64:37:A8:0A:3D:D1:74:E7:F2:C8
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 019A7226645715F4083EDA26158B40545431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 1332
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: azAUCRYq787m88oVVEVhgxUG08LFPUEtBrZUDqYnQG0=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:64:57:15:f4:08:3e:da:26:15:8b:40:54:54:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=fadedb0350185916d2466437a80a3dd174e7f2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:12:3a:4f:96:22:8a:6f:dc:78:7e:40:0b:
e2:d4:e7:a7:44:1d:f6:f2:69:fd:a0:31:3a:d7:18:
a9:2b:ba:40:00:0a:43:30:72:46:2f:2f:1a:fc:14:
13:79:9d:a6:1f:ec:e2:72:94:b2:90:8c:18:63:f1:
23:96:4c:a9:92:e1:8a:7e:cf:11:ce:83:62:eb:91:
62:d2:94:e1:5a:ff:d4:eb:6f:d8:d6:0b:f2:0f:82:
18:a8:73:87:97:c1:8f:fe:a0:b7:6e:b2:75:4e:2c:
7a:b8:aa:47:d6:02:c2:14:b4:50:68:58:d8:32:6e:
7f:2f:2d:63:70:fa:32:00:e8:ae:ac:3f:b7:77:09:
bb:e6:a2:af:e0:bf:d0:ee:db:68:b7:c7:b5:bb:f0:
5a:9f:96:67:ca:e2:38:aa:50:7b:37:27:c4:38:f4:
6e:57:18:2c:ce:ab:88:34:b4:2b:3f:cc:d2:f4:db:
fe:a2:c3:90:87:ab:1a:14:a2:7e:df:39:6a:d7:91:
4c:29:a8:9a:9c:c5:27:1d:38:73:0b:18:de:a0:2a:
b0:73:f0:b4:dc:d4:09:76:1c:03:90:1b:83:6f:a0:
08:19:75:e8:60:52:25:f8:a1:49:dd:f1:a8:5b:1c:
67:58:25:8c:4c:cc:a1:cc:89:a2:89:6a:d7:f1:22:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:DB:03:50:18:59:16:D2:46:64:37:A8:0A:3D:D1:74:E7:F2:C8
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b5:b3:d9:52:08:de:cf:41:59:12:f8:e9:71:e3:94:99:e8:
a9:13:33:5a:b2:16:51:54:5b:74:ce:d4:4a:ab:63:49:1b:56:
74:df:04:83:f4:a0:7d:44:0a:ab:14:9b:38:dc:df:0c:4c:c8:
8b:b6:fb:40:8d:cc:a4:86:0c:1a:00:67:d4:58:13:2e:26:e6:
b8:5a:fc:ac:23:a7:9c:bc:a2:20:e5:78:cd:a4:81:b9:b1:10:
d1:cc:e9:6b:b2:fe:ce:eb:11:11:24:4e:89:8b:1f:75:b3:e3:
5c:3b:d2:f3:a6:97:c3:70:20:ce:f9:9d:f3:b1:49:ba:ed:df:
64:98:b7:9b:cf:a1:89:bc:1d:3a:1d:14:2f:ee:d2:81:2a:20:
15:30:42:36:09:a8:75:cb:fb:be:29:1b:10:ff:e6:b5:05:e1:
50:29:ef:39:0d:1e:4f:18:45:b6:3e:9f:6b:af:ff:bd:5b:4b:
04:98:f5:f1:08:f0:75:e3:08:2e:3e:6a:3e:dd:e4:03:ec:1a:
6e:24:23:cb:3c:d1:e5:de:59:09:0e:c0:ce:5c:3f:eb:3e:ee:
ff:fc:4f:8a:0e:76:d3:2b:b2:66:22:58:7e:53:e7:7f:1f:bd:
fd:26:c3:0c:7a:69:75:ae:60:db:34:e0:d2:8f:fa:21:8d:50:
1e:25:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client