Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
File: EkSUR-va8tRKSYs9rlJaL1In8Yo.mft (raw, json)
Hash identifier: ZFLTy+CVlY3hzohrPuqzFNAWiq1d8ZA/acKQBwSgIAE=
Subject key identifier: 9B:4F:C5:D1:F3:4D:12:8F:50:55:83:B9:6D:67:96:9F:CB:19:FF:78
Authority key identifier: 12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
Certificate issuer: /CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Certificate serial: 01974742530FB7759A2E00146FAE19B08BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
Manifest number: 118E
Signing time: Fri 06 Jun 2025 22:00:18 +0000
Manifest this update: Fri 06 Jun 2025 22:00:18 +0000
Manifest next update: Sat 07 Jun 2025 22:00:18 +0000
Files and hashes: 1: EkSUR-va8tRKSYs9rlJaL1In8Yo.crl (hash: u3D30lsIbaS2DqRKzTiAMzCXPZcax04VliAth09d6qk=)
2: zSoi0zSs9jm361lSJvAsPlQrRG4.roa (hash: ZKAanfO9Bg7/JlNaV6O6aYkdPO+1tyQx28EMy/ge49w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:53:0f:b7:75:9a:2e:00:14:6f:ae:19:b0:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12449447ebdaf2d44a498b3dae525a2f5227f18a
Validity
Not Before: Jun 6 22:00:18 2025 GMT
Not After : Jun 7 22:00:18 2025 GMT
Subject: CN=9b4fc5d1f34d128f505583b96d67969fcb19ff78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:22:29:46:89:89:35:5c:c6:ea:5a:df:c2:
54:56:8c:fa:a5:81:fc:02:a2:03:41:de:b0:d9:35:
03:70:63:d4:1e:2e:fb:10:95:86:99:8d:65:c2:10:
c0:68:11:7b:14:1e:92:da:7d:98:1c:fe:4c:d7:49:
8c:1b:09:59:ce:17:f2:e6:b5:41:b2:00:37:eb:8e:
e6:d8:f1:b7:e3:88:a5:59:65:59:9f:ad:9d:f0:c1:
d6:b6:01:73:e4:ac:f0:4c:4b:5b:a9:9b:19:0a:ef:
a5:e9:b0:7a:48:9a:c6:94:c5:a2:2a:d0:0c:5a:43:
97:1a:56:54:fb:e7:ec:14:7c:3f:f6:4f:55:17:1e:
f8:48:aa:73:22:47:17:92:bb:1b:91:3d:50:8b:67:
f7:0a:c5:8d:2c:cd:98:0b:94:ad:30:3d:e0:c3:4f:
5e:ff:68:e2:cd:85:dc:ce:26:56:4b:12:4a:e9:d8:
d2:b4:98:48:9e:fb:a0:aa:a8:01:ef:33:43:27:d6:
da:c1:21:b5:4d:f0:8f:20:67:41:4a:85:18:92:4b:
91:8c:fc:49:79:c9:0b:f3:43:e7:ce:ff:e3:cb:bd:
d7:89:08:24:6a:2c:ad:ad:79:84:0a:12:6e:88:e1:
5a:fe:b6:3d:76:81:13:4d:fb:a9:82:a2:ca:f9:a0:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:C5:D1:F3:4D:12:8F:50:55:83:B9:6D:67:96:9F:CB:19:FF:78
X509v3 Authority Key Identifier:
keyid:12:44:94:47:EB:DA:F2:D4:4A:49:8B:3D:AE:52:5A:2F:52:27:F1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkSUR-va8tRKSYs9rlJaL1In8Yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9fb171-11f4-4c5f-83e7-2ed1fde68516/1/EkSUR-va8tRKSYs9rlJaL1In8Yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:66:0c:cf:04:3d:30:ba:1f:8a:15:53:11:65:0a:dd:49:98:
e7:01:33:7d:58:ef:e0:7b:81:b4:97:b9:41:ff:09:78:6c:78:
3f:a3:15:bc:f6:36:39:17:9d:4c:55:70:51:6f:86:5b:ca:49:
7e:10:6a:fb:ce:fb:6b:bb:f7:6e:85:91:56:27:08:fe:4c:af:
71:b0:dd:11:5b:81:03:0b:48:eb:c9:8a:8b:4c:1d:80:70:b9:
da:9f:5a:72:54:2a:96:f7:27:26:8b:dd:9d:02:90:c7:9b:f1:
69:24:9c:b6:08:1f:c2:da:61:1d:26:68:61:dd:ab:49:a0:8e:
de:0c:36:d0:01:e8:9f:12:6a:33:a0:cf:84:f7:67:8e:ad:ad:
49:f3:48:e0:38:37:44:a5:28:68:41:6d:1b:f0:2f:0d:f1:3c:
14:91:78:d5:09:60:d5:08:44:4d:e2:2b:d0:7d:20:1d:61:b4:
05:6a:c7:f0:08:b0:5a:25:7b:f3:6d:e3:9e:9a:6f:ff:68:20:
8c:ff:b5:f3:f0:63:cc:a1:57:36:5a:ec:3c:a6:68:24:d5:35:
27:eb:88:16:e5:63:85:e7:3c:dc:14:b4:1b:ea:bf:64:d5:d4:
5a:39:35:30:da:ba:32:dc:fa:55:13:e4:00:61:28:89:9e:96:
11:b2:3f:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQlMPt3WaLgAUb64ZsIu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNDQ5NDQ3ZWJkYWYyZDQ0YTQ5OGIzZGFlNTI1YTJmNTIy
N2YxOGEwHhcNMjUwNjA2MjIwMDE4WhcNMjUwNjA3MjIwMDE4WjAzMTEwLwYDVQQD
Eyg5YjRmYzVkMWYzNGQxMjhmNTA1NTgzYjk2ZDY3OTY5ZmNiMTlmZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnciKUaJiTVcxupa38JUVoz6pYH8
AqIDQd6w2TUDcGPUHi77EJWGmY1lwhDAaBF7FB6S2n2YHP5M10mMGwlZzhfy5rVB
sgA3647m2PG344ilWWVZn62d8MHWtgFz5KzwTEtbqZsZCu+l6bB6SJrGlMWiKtAM
WkOXGlZU++fsFHw/9k9VFx74SKpzIkcXkrsbkT1Qi2f3CsWNLM2YC5StMD3gw09e
/2jizYXcziZWSxJK6djStJhInvugqqgB7zNDJ9bawSG1TfCPIGdBSoUYkkuRjPxJ
eckL80Pnzv/jy73XiQgkaiytrXmEChJuiOFa/rY9doETTfupgqLK+aA/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtPxdHzTRKPUFWDuW1nlp/LGf94MB8GA1UdIwQY
MBaAFBJElEfr2vLUSkmLPa5SWi9SJ/GKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTct
MmVkMWZkZTY4NTE2LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZmIxNzEtMTFmNC00YzVmLTgzZTctMmVkMWZkZTY4NTE2
LzEvRWtTVVItdmE4dFJLU1lzOXJsSmFMMUluOFlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWYMzwQ9
MLofihVTEWUK3UmY5wEzfVjv4HuBtJe5Qf8JeGx4P6MVvPY2ORedTFVwUW+GW8pJ
fhBq+877a7v3boWRVicI/kyvcbDdEVuBAwtI68mKi0wdgHC52p9aclQqlvcnJovd
nQKQx5vxaSSctggfwtphHSZoYd2rSaCO3gw20AHonxJqM6DPhPdnjq2tSfNI4Dg3
RKUoaEFtG/AvDfE8FJF41Qlg1QhETeIr0H0gHWG0BWrH8AiwWiV7823jnppv/2gg
jP+18/BjzKFXNlrsPKZoJNU1J+uIFuVjhec83BS0G+q/ZNXUWjk1MNq6Mtz6VRPk
AGEoiZ6WEbI/Ow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:37 2025 by rpki-client