Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: 87pZrLx2Ojz3+++vkv4s7oqYH0HjOMLTYhsiWDwoXJM=
Subject key identifier: 6C:73:9D:69:D2:61:D8:42:04:56:AC:D3:5B:DF:E4:0F:28:40:E2:E7
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 0197B6A215661DBD4C8EEC5282E107B70BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0691
Signing time: Sat 28 Jun 2025 13:02:44 +0000
Manifest this update: Sat 28 Jun 2025 13:02:44 +0000
Manifest next update: Sun 29 Jun 2025 13:02:44 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: Jk0Bjw2mrjwQ6rvDO0YYNmlYTrACjJQo5PY2N2NJbwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:15:66:1d:bd:4c:8e:ec:52:82:e1:07:b7:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Jun 28 13:02:44 2025 GMT
Not After : Jun 29 13:02:44 2025 GMT
Subject: CN=6c739d69d261d8420456acd35bdfe40f2840e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:30:60:63:8f:40:b6:98:cf:0b:30:b3:73:
57:39:2e:2b:1a:d2:e7:99:46:95:fc:cf:2d:4f:9a:
35:22:c0:38:38:ae:86:24:9f:64:e2:f4:2d:c8:a2:
35:23:b1:da:f7:74:14:75:f6:ce:26:f7:f8:b7:47:
44:4e:07:05:4d:b7:e8:ae:02:82:d4:4d:d1:98:aa:
aa:77:05:c6:da:72:95:ae:5b:7b:63:82:b4:ba:79:
fb:13:07:08:a5:ee:0c:0b:a6:d6:0b:a3:5e:c3:78:
08:92:f6:98:eb:b7:56:35:5d:34:1d:28:bf:44:5d:
d5:3d:3f:1f:6b:0a:3c:30:08:b9:d5:97:71:d7:65:
eb:fa:6e:ed:ab:80:c3:83:75:3a:86:4c:c2:24:e1:
ae:a8:4d:b7:90:af:04:37:9d:df:df:80:f7:ef:0d:
49:d2:1e:d1:22:b5:03:73:f0:7f:c4:4c:e4:d2:7d:
f4:26:da:c2:3c:f0:8b:8f:f9:fc:47:99:df:95:13:
07:69:78:6d:6c:80:b5:64:59:4d:59:07:c8:fc:4e:
8e:04:a5:1f:d0:a9:ac:71:97:d2:b9:07:ce:a4:29:
d3:2d:3a:02:a9:b0:d7:88:83:b2:0b:14:ee:cb:0b:
e4:00:7f:5c:84:9d:de:2d:62:38:36:b1:2f:2c:f2:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:9D:69:D2:61:D8:42:04:56:AC:D3:5B:DF:E4:0F:28:40:E2:E7
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:75:88:cb:a6:dd:53:0e:23:80:41:31:24:97:23:92:36:
69:a3:26:4e:4f:c9:18:dc:96:90:ca:bb:58:42:cc:c2:9a:b7:
b5:33:e7:34:92:cf:2f:09:09:73:bd:53:1c:aa:86:c8:0d:2d:
86:ae:d2:a8:53:74:b1:cb:6a:90:c8:2f:ea:4b:61:35:54:fe:
df:06:fd:52:eb:13:7c:01:9c:71:7f:ed:ae:1a:a8:a2:7d:31:
a6:f6:6a:00:8c:9e:f9:47:12:5d:99:5e:3b:c0:c2:3a:9e:e6:
8c:1a:b6:67:8c:e3:62:d3:ad:5e:d9:f4:61:2a:8d:f3:c3:17:
80:fb:c3:c0:d4:07:ce:4d:19:a0:2c:c8:f4:25:32:7b:59:90:
43:e1:d7:3c:39:a0:ea:98:2d:94:33:b3:03:31:03:a7:4d:f7:
62:af:03:53:e2:0c:5f:36:5e:8b:e2:62:d6:50:49:84:93:ab:
f3:43:9b:9b:1c:13:29:eb:bf:2c:ec:1e:93:cd:a7:f8:07:0b:
62:bb:ba:8b:ba:b3:54:ad:6f:1a:02:46:e8:b9:a2:52:56:3c:
ff:5d:ad:08:3e:22:af:42:7a:6d:55:78:b1:e9:0f:8c:23:3a:
7d:48:3e:61:59:bb:2b:a8:4d:bf:9a:ce:20:ba:ec:5b:f8:7b:
f0:ab:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:11 2025 by rpki-client