Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: hRoGuu+RWUgrwYdc8zPPzeu/Z9ewWBfB7rdIKtXB1X8=
Subject key identifier: CE:2C:07:E3:EA:BF:DD:E7:FF:B0:64:CC:98:EC:19:65:2E:74:D6:8D
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 0198D660FEF845FB972E1B4B4013BAB719D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0726
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: Gy8Mz1IGUzwVFVaPeN11r4bl5zUVeigbV7/pptFmy1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fe:f8:45:fb:97:2e:1b:4b:40:13:ba:b7:19:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=ce2c07e3eabfdde7ffb064cc98ec19652e74d68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:9d:53:05:fe:85:d9:de:5d:19:c4:03:54:
df:57:41:26:b0:6b:b9:f3:85:1a:ca:40:66:ca:26:
88:ad:f1:5f:5d:34:c6:f9:5f:ff:0f:b3:86:91:12:
6c:0c:85:b8:75:99:e8:98:e9:6d:b6:8e:6c:c4:d9:
69:f5:5a:de:f2:e1:d1:46:8b:4b:76:0b:34:6c:dc:
bf:58:c6:b2:9e:51:3f:c6:20:82:19:c1:fa:ab:4b:
d0:41:18:b2:d2:09:a5:98:5d:d4:6d:03:0f:c9:b1:
e9:8f:89:15:c1:0e:48:16:9c:8d:ee:e5:f6:28:42:
4b:aa:53:7e:fe:6c:16:de:31:4c:49:e0:b4:fd:29:
1d:42:ab:46:8f:d3:0e:cd:b3:c3:8b:02:26:a4:a0:
ce:8f:a5:d4:d8:de:76:94:3a:8a:75:0c:07:bc:4b:
32:18:6f:5b:a0:fe:e9:89:74:7b:4b:95:72:6b:f8:
7d:f6:3f:2e:90:6a:a1:0f:ab:10:0b:ca:a5:46:96:
3a:91:63:48:98:78:93:ba:10:73:bf:9a:b3:06:f0:
34:70:e6:5b:c4:d2:97:a8:23:f4:fe:cf:35:42:9b:
52:8f:ee:68:75:0e:cf:9b:bc:36:a4:9f:82:39:5e:
e7:a7:db:11:2c:d8:dd:ba:f4:02:03:4c:10:bc:e4:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:07:E3:EA:BF:DD:E7:FF:B0:64:CC:98:EC:19:65:2E:74:D6:8D
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:68:a3:f6:51:73:f0:5f:42:21:71:f6:23:27:2c:92:23:
c4:8c:21:b8:2b:43:1d:cd:88:2c:44:61:b3:1a:79:28:e2:20:
aa:6c:aa:07:cd:4e:a4:46:3a:4e:03:9d:ce:9f:ad:24:20:2d:
0f:dc:90:66:0f:66:f7:98:81:ce:08:c5:86:5f:53:b4:af:57:
e0:38:37:84:9b:73:6c:bd:06:52:f9:4d:1e:24:3f:df:8e:e2:
d2:0d:90:73:84:4f:ac:91:46:55:51:87:67:84:cb:ee:db:0e:
70:ce:bb:74:42:e0:69:53:f1:a4:d2:a4:69:c7:e8:d2:5c:74:
2d:f9:db:ec:0f:49:e6:c6:d9:19:ce:90:ae:74:43:40:de:d5:
49:31:e6:98:fd:dd:61:97:6d:78:ea:2b:fc:da:1d:a9:52:40:
db:d3:11:54:60:a6:de:1d:72:bf:25:72:45:8c:63:d0:45:1d:
ea:d8:13:5e:04:06:d2:91:59:89:61:cd:9c:8b:b7:96:98:9d:
1d:ff:3f:11:f0:21:93:b9:30:77:ea:70:2e:a2:06:02:62:51:
39:d4:fa:87:f7:b3:63:cf:9d:ea:0e:70:b5:57:30:85:f4:32:
0c:34:fc:fa:fc:62:a4:64:8c:b3:37:c4:75:07:19:47:e7:6c:
c9:7b:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:56 2025 by rpki-client