Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
File: xf9_LizUq2EooxIgpTBBqUmlbDk.mft (raw, json)
Hash identifier: dOacvfHcMmofM/DDIdrRByBZ2rbBmXJ0SnBlIe+LYlo=
Subject key identifier: C1:7C:91:C2:2C:AB:1D:EC:1F:92:E2:79:A0:8B:F2:1A:0E:E9:8E:E0
Authority key identifier: C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
Certificate issuer: /CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Certificate serial: 019A7225B4E85C298CE08B5A7F0D712EBB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
Manifest number: B8
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: xf9_LizUq2EooxIgpTBBqUmlbDk.crl (hash: SRVFku+WCrxv5rF2d/0jYS3GKHaNV/haPs6CqnwJM4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b4:e8:5c:29:8c:e0:8b:5a:7f:0d:71:2e:bb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=c17c91c22cab1dec1f92e279a08bf21a0ee98ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:e2:f4:27:ac:6e:49:7e:b8:72:22:c4:ff:
5b:03:fb:fe:17:33:39:6c:bb:91:31:24:f2:2b:47:
c6:62:78:30:3a:09:33:d2:fc:45:82:f8:6c:b8:d4:
52:2e:e4:88:63:61:61:5e:4b:39:b1:75:56:82:65:
4d:ca:34:aa:b2:42:c1:f5:5b:88:e7:ff:26:3c:61:
9a:d3:56:fb:4b:0e:52:09:6c:71:e6:8d:a2:f1:e2:
a3:37:bc:a6:8b:95:64:5f:6f:d9:57:20:b0:32:4e:
4c:e9:b1:d0:96:8f:3e:6e:76:f5:3b:88:ec:89:3e:
46:79:51:0e:2a:b7:3b:94:2c:ba:10:c9:dd:3a:95:
3e:cd:c9:2c:12:3d:3c:b8:38:7d:3e:34:38:45:15:
b5:5a:67:1e:b9:1c:2e:00:ed:0c:25:b6:dc:13:ec:
2f:1a:0d:0c:8d:c6:48:0c:4a:ea:92:ea:4d:ae:1c:
3b:36:25:c5:9e:c0:02:c5:36:4b:fb:9a:00:ff:53:
99:c7:33:60:8c:8c:89:cf:d3:46:79:1e:60:24:25:
d8:f9:c5:41:41:4b:55:ce:2f:33:35:54:99:a8:49:
02:79:b4:6e:f3:5c:0c:62:80:68:fe:20:2b:12:a2:
6c:73:ca:6c:5c:cc:69:4d:fc:d6:3f:a5:8b:8d:91:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7C:91:C2:2C:AB:1D:EC:1F:92:E2:79:A0:8B:F2:1A:0E:E9:8E:E0
X509v3 Authority Key Identifier:
keyid:C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e5:5e:46:56:cd:49:6d:db:e8:5a:18:dc:6c:bc:d6:3c:3b:
aa:15:e9:11:bc:e9:7b:58:9d:24:a5:d9:2c:7d:17:c2:87:f6:
e6:1f:d3:06:33:88:3a:85:65:29:7d:2f:10:68:79:3b:da:f3:
75:d9:45:5d:8a:f7:ca:70:20:9f:a9:de:d1:e6:5b:27:86:1e:
4d:6f:4a:27:92:36:fc:cf:c5:91:ba:78:e0:e5:9e:8c:63:1e:
63:ea:06:95:6e:1c:25:e1:0f:d8:46:01:c7:98:63:53:92:0f:
4f:0f:6f:bd:e7:5a:31:d4:cc:fd:04:45:85:bc:b4:07:9e:3a:
2c:32:ab:20:27:10:a6:cc:cf:82:21:9a:08:58:07:01:57:82:
f8:80:39:03:83:62:ce:e2:a3:22:7d:33:bd:74:dc:71:8a:75:
17:df:e8:9d:13:98:c7:2b:e5:fb:ca:01:65:41:e6:68:44:94:
5c:57:87:84:a3:80:eb:03:7c:5f:a0:08:be:b3:38:09:5d:bd:
8b:15:eb:44:ec:76:da:d9:72:75:35:7c:0c:b6:c9:d2:97:43:
90:13:d5:09:64:6f:08:e7:9a:0d:b9:f3:f8:9c:27:ec:24:1b:
e8:b5:04:58:41:ef:0e:fd:a4:95:af:96:c0:a0:55:8c:6a:e1:
c2:bc:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:47 2025 by rpki-client