Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: 9b52Falh35qm0Ruh9vp0LN35UMLs5ys/GgxFMrYDoEQ=
Subject key identifier: 1E:9C:F5:EF:D7:44:3B:67:42:5E:82:6D:06:C0:EA:14:BF:E0:60:57
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 0199FFC7F840257428C6D64F80038CF216D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 07C0
Signing time: Mon 20 Oct 2025 04:01:59 +0000
Manifest this update: Mon 20 Oct 2025 04:01:59 +0000
Manifest next update: Tue 21 Oct 2025 04:01:59 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: WWU/f13UESD20fSd+laJaiovyy39r84wJ5hI/K5SImM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:f8:40:25:74:28:c6:d6:4f:80:03:8c:f2:16:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Oct 20 04:01:59 2025 GMT
Not After : Oct 21 04:01:59 2025 GMT
Subject: CN=1e9cf5efd7443b67425e826d06c0ea14bfe06057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:84:0d:2d:d5:db:9f:66:3b:cc:8c:f8:cd:
eb:76:80:5a:ee:a9:a6:80:09:84:8f:53:b4:ba:b1:
48:a3:a6:17:b3:22:2c:fd:37:2b:28:01:8d:86:0c:
02:77:a8:d0:42:f8:95:30:99:b3:d4:1c:87:57:3e:
eb:84:09:57:76:3b:c6:26:22:f1:a1:04:dc:51:0b:
40:8f:d1:21:96:ab:9c:19:cc:c0:6e:2a:75:a7:66:
54:1f:5f:fc:29:66:6e:84:ed:7e:e0:c0:0b:d8:5b:
52:1b:89:fd:a0:56:8b:53:42:b3:7d:75:8d:66:47:
aa:ee:a7:6c:d1:b7:b6:54:35:b4:de:ad:47:f8:31:
b9:65:e2:b2:f7:0f:b2:28:7a:b0:3f:ae:15:65:61:
e8:01:bb:b4:25:55:a2:84:b6:94:9f:89:4d:8d:ab:
75:96:c9:3e:11:75:a6:ff:d1:00:16:bf:4c:b0:3f:
02:33:93:77:ac:89:61:2f:93:45:9d:50:2a:0f:1d:
2c:7c:a5:92:43:60:11:76:8d:b7:e1:a0:ff:87:ab:
bb:dc:df:a6:45:ac:4f:6a:b2:7c:4f:85:cb:cf:e4:
36:15:44:14:79:ba:89:b3:e2:41:19:04:ef:97:51:
7a:e8:69:b6:7b:73:37:ef:d4:26:c7:80:83:99:b7:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:F5:EF:D7:44:3B:67:42:5E:82:6D:06:C0:EA:14:BF:E0:60:57
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:80:33:28:63:a4:07:4f:ea:00:41:a2:2f:6a:9d:22:8f:c3:
70:c1:03:bb:81:4d:49:32:03:c1:8e:bf:3f:9e:31:f4:33:cd:
46:e2:19:a9:dd:5d:7f:bd:f7:46:61:30:a4:48:28:f8:11:da:
8b:d4:21:44:60:f4:96:57:66:29:c7:18:98:6d:83:f0:1c:12:
95:b4:4a:71:b6:8e:fd:08:6d:cd:2f:a6:c9:ea:15:c9:77:78:
ed:62:70:54:6a:db:d4:5e:2e:ee:f4:9d:b0:62:5f:9a:59:cd:
bc:6c:15:ff:22:40:9a:42:47:38:46:f9:de:9e:59:f0:b0:a0:
84:35:55:8b:9e:d7:c3:43:17:29:1c:80:41:5a:45:83:2e:f6:
c1:87:e5:13:96:a5:0a:80:72:fe:36:40:1b:bf:64:93:ac:b4:
bc:2f:dd:42:15:1b:38:15:46:b3:a7:87:dc:34:0d:d5:b1:84:
fc:b7:32:a6:73:73:66:78:51:5d:bf:a7:ef:93:2e:66:8f:0b:
6e:64:27:25:1a:ea:ef:a9:a6:74:a6:12:5f:b1:bd:61:a1:45:
79:dc:d4:88:c5:46:81:cc:1b:87:88:8a:9f:b2:36:53:fe:a2:
1d:f2:6d:16:d1:e1:98:e6:1c:54:0e:52:d8:1a:ce:50:6e:54:
6c:72:c5:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x/hAJXQoxtZPgAOM8hbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZDA3Y2ZjMjhhYzQ3MDNkZjZhYjI2ZmNkMmUzOTUzY2Uz
OTA5NzkwHhcNMjUxMDIwMDQwMTU5WhcNMjUxMDIxMDQwMTU5WjAzMTEwLwYDVQQD
EygxZTljZjVlZmQ3NDQzYjY3NDI1ZTgyNmQwNmMwZWExNGJmZTA2MDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfGEDS3V259mO8yM+M3rdoBa7qmm
gAmEj1O0urFIo6YXsyIs/TcrKAGNhgwCd6jQQviVMJmz1ByHVz7rhAlXdjvGJiLx
oQTcUQtAj9EhlqucGczAbip1p2ZUH1/8KWZuhO1+4MAL2FtSG4n9oFaLU0KzfXWN
Zkeq7qds0be2VDW03q1H+DG5ZeKy9w+yKHqwP64VZWHoAbu0JVWihLaUn4lNjat1
lsk+EXWm/9EAFr9MsD8CM5N3rIlhL5NFnVAqDx0sfKWSQ2ARdo234aD/h6u73N+m
RaxParJ8T4XLz+Q2FUQUebqJs+JBGQTvl1F66Gm2e3M379Qmx4CDmbe4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6c9e/XRDtnQl6CbQbA6hS/4GBXMB8GA1UdIwQY
MBaAFADQfPworEcD32qyb80uOVPOOQl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQt
ODA1NDUyMDU0NTZjLzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83MzE1ZTAtNGUxYi00M2FiLTg1YjQtODA1NDUyMDU0NTZj
LzEvQU5COF9DaXNSd1BmYXJKdnpTNDVVODQ1Q1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoAzKGOk
B0/qAEGiL2qdIo/DcMEDu4FNSTIDwY6/P54x9DPNRuIZqd1df733RmEwpEgo+BHa
i9QhRGD0lldmKccYmG2D8BwSlbRKcbaO/QhtzS+myeoVyXd47WJwVGrb1F4u7vSd
sGJfmlnNvGwV/yJAmkJHOEb53p5Z8LCghDVVi57Xw0MXKRyAQVpFgy72wYflE5al
CoBy/jZAG79kk6y0vC/dQhUbOBVGs6eH3DQN1bGE/LcypnNzZnhRXb+n75MuZo8L
bmQnJRrq76mmdKYSX7G9YaFFedzUiMVGgcwbh4iKn7I2U/6iHfJtFtHhmOYcVA5S
2BrOUG5UbHLFoA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:57 2025 by rpki-client