Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: lYeLSMkxFNp4YdKWpnsFMiCQkBnG8cXRAU3wGd1VkFg=
Subject key identifier: 27:AA:CE:59:11:1B:54:4E:99:1B:84:CC:A0:F5:75:BD:0D:6E:BA:D9
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 01974E57792A5E0098F4A279BB79E17717AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 065B
Signing time: Sun 08 Jun 2025 07:00:44 +0000
Manifest this update: Sun 08 Jun 2025 07:00:44 +0000
Manifest next update: Mon 09 Jun 2025 07:00:44 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: Apz7wHvPfGtI5efOAZuH9VlVKQVcTqACsfqrzcSBKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:79:2a:5e:00:98:f4:a2:79:bb:79:e1:77:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Jun 8 07:00:44 2025 GMT
Not After : Jun 9 07:00:44 2025 GMT
Subject: CN=27aace59111b544e991b84cca0f575bd0d6ebad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:95:82:85:72:3e:94:17:ee:08:b0:9a:ec:
d3:84:12:b7:b2:72:58:b3:73:b8:7a:fa:2e:5a:b1:
1a:76:b8:c2:ae:38:02:98:1d:c4:d9:35:b5:15:cd:
71:32:b2:d9:ac:bd:66:8e:9a:3b:f9:f5:86:88:a4:
50:db:20:6c:de:06:0a:0f:c1:44:1b:a5:0c:7a:e5:
ac:34:fb:bb:ca:49:25:ab:d8:a5:bd:c3:b9:2c:3b:
6b:c9:6f:96:a6:95:4f:f5:07:f9:1a:79:e7:23:13:
89:34:c7:9d:3f:d0:6f:14:fc:57:c4:8b:af:97:d6:
fb:56:dc:d5:65:23:6e:54:32:e0:88:a5:e3:19:07:
87:d0:d7:e5:3a:2d:98:98:f4:07:09:3d:f4:c2:d6:
9e:74:40:ef:47:2f:d9:e7:f0:33:84:7d:c9:42:f4:
36:2f:db:2d:ba:33:b3:dd:aa:e3:54:ad:a4:17:ba:
8c:c6:f7:13:c2:98:b4:c8:52:df:88:dc:17:8b:7c:
e6:11:0f:49:6c:a2:23:6e:b6:f6:4d:d3:ce:36:4a:
85:89:c7:d4:19:5b:15:5e:4e:43:01:a0:73:8e:66:
82:32:d5:9b:7b:10:45:9f:ef:4b:05:61:f8:8f:88:
7d:1b:d7:78:5d:db:ae:88:9d:b8:03:2d:ba:4f:40:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:CE:59:11:1B:54:4E:99:1B:84:CC:A0:F5:75:BD:0D:6E:BA:D9
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e1:4b:d6:a6:b1:fd:db:2f:b6:12:a2:f7:2d:09:fb:b2:96:
31:89:7b:80:55:95:38:fd:61:21:a6:71:6b:b5:28:2a:4d:dd:
5a:f9:f2:69:4f:6f:13:5b:de:89:b9:46:31:94:fd:83:02:69:
66:67:42:85:03:f3:69:35:78:e5:78:95:e8:f9:45:54:55:bc:
d6:d5:4a:06:73:86:72:8b:d1:6b:f6:76:ea:57:5a:b5:11:b0:
8a:9f:ea:19:13:33:5d:ae:fc:f2:06:8e:ac:ab:26:7d:8d:0d:
51:ce:68:74:54:78:45:87:09:c1:cb:6a:06:0f:e7:27:c0:03:
da:3f:33:a5:39:53:84:00:0c:fb:56:5f:51:b8:38:4f:f7:f3:
06:40:37:86:2c:48:3a:6f:c0:99:ce:c6:55:4c:ba:81:47:b5:
f5:c9:81:d9:85:53:62:72:d2:56:11:de:c9:74:e9:10:93:14:
ee:2a:63:37:57:ec:a7:e6:ee:16:73:79:bc:2a:5b:8f:0e:a4:
63:a0:df:db:40:cc:24:3b:e9:95:07:b5:53:06:cc:56:db:f3:
41:18:04:35:db:a7:45:52:d3:a6:c2:c2:d9:07:fd:86:89:74:
5e:2d:a5:4d:6f:77:d3:5c:c0:ef:3c:5e:82:82:d2:b9:4f:b4:
a4:af:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:28 2025 by rpki-client