Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: Hg6pIToIy71S2JWkGofTWyDM2ogAYZQYUUzvFR46kHA=
Subject key identifier: A8:34:3C:B4:A3:FF:85:BF:73:3F:BE:7A:48:71:B4:91:02:B9:3F:0E
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019923A0D3D5660584CF48C6C66427562280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 074E
Signing time: Sun 07 Sep 2025 10:02:46 +0000
Manifest this update: Sun 07 Sep 2025 10:02:46 +0000
Manifest next update: Mon 08 Sep 2025 10:02:46 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: OY9daedO4FOe7lECZAc7S0t4YwsdJLE2pNAVuzFx6Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d3:d5:66:05:84:cf:48:c6:c6:64:27:56:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Sep 7 10:02:46 2025 GMT
Not After : Sep 8 10:02:46 2025 GMT
Subject: CN=a8343cb4a3ff85bf733fbe7a4871b49102b93f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:9b:c6:e8:3c:40:f7:54:2f:de:8e:be:e2:
3f:52:76:5e:19:e7:15:47:d5:58:71:39:ff:f1:db:
3f:4f:24:6f:cd:a0:88:32:f1:8a:59:50:c4:2e:43:
00:db:7e:01:1d:2a:33:3e:96:e2:db:7e:f1:3f:fb:
82:51:2f:d1:e5:75:95:03:cf:e3:a3:fc:eb:57:23:
a8:57:25:a7:97:49:49:23:91:fa:16:5a:4e:d4:3f:
15:64:3b:99:fb:8a:0e:b6:ae:67:36:6f:21:50:10:
9d:67:64:25:cb:de:bf:1a:7d:31:f0:37:65:36:81:
0e:b5:81:7c:0b:fa:22:91:b2:47:19:7c:83:47:2a:
80:8c:b2:d5:fd:98:a4:db:df:e4:5a:ef:25:a1:17:
ad:8d:d3:44:c5:55:f0:0a:82:67:c9:da:c5:81:b1:
0d:df:1d:2a:b4:4e:61:fa:7e:c1:8a:c6:84:96:2e:
75:12:ab:3e:62:0c:19:8e:89:e2:be:aa:75:db:b9:
16:cb:0e:e3:6e:98:1c:c8:e5:bc:25:7f:ba:27:4a:
ed:36:61:40:16:dc:2f:ac:c6:24:b0:0a:b4:e7:9f:
33:d1:3f:52:47:c6:ce:72:ea:a4:35:25:b6:5f:fb:
18:00:22:75:d2:f0:bc:3c:aa:1d:a8:f7:39:bd:2f:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:3C:B4:A3:FF:85:BF:73:3F:BE:7A:48:71:B4:91:02:B9:3F:0E
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:93:e7:4c:12:ae:31:59:1f:07:13:bb:6d:74:e1:98:1b:42:
d4:86:fc:ea:56:c1:40:ec:e7:4e:82:d9:a8:af:5d:1d:86:5b:
93:88:f7:ea:b3:e5:c6:82:48:f0:9f:e2:c9:90:b4:78:df:94:
0b:16:88:6e:0f:28:d6:a1:0a:ce:56:b6:fe:48:24:32:d4:c0:
f1:11:0c:75:be:bd:b4:6e:6e:63:f9:49:ce:c0:4d:a8:5f:9e:
cf:68:84:4f:c9:aa:95:d7:a9:d4:1b:75:fc:80:24:b0:10:ca:
2c:69:b2:5b:76:14:9e:69:26:15:9e:1f:dd:d4:3c:55:2f:97:
88:a8:95:89:50:5b:43:8f:fc:59:09:1d:6c:6e:43:62:db:bc:
c8:42:dd:28:37:5d:b3:01:32:a0:dc:3f:67:66:1c:25:db:0d:
80:f0:9b:ad:cf:ec:b6:55:c9:f5:d0:18:96:cb:26:23:40:d1:
0d:fa:e8:9d:d7:67:2f:1d:5d:a6:63:97:5f:15:e0:d3:3a:e6:
54:b4:8a:0f:cf:c0:97:6d:eb:f1:78:60:19:90:76:8f:65:df:
fe:18:76:75:bd:5b:f9:5f:a1:f7:5d:10:64:22:6a:75:40:3a:
d7:94:d8:81:81:69:37:a3:d2:62:8a:c1:b8:c0:82:18:8d:b3:
6d:60:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:25 2025 by rpki-client