Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: bIqv2SeHSjT95Bxu5XM8XL/N0px1T1RwpPtKlgIdcHA=
Subject key identifier: 68:55:CB:63:29:E7:4E:8C:D6:46:C0:0A:1F:C9:15:86:D7:83:15:F0
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019776E5A90C1551AB5B646ABDF4377DE7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 0670
Signing time: Mon 16 Jun 2025 04:00:51 +0000
Manifest this update: Mon 16 Jun 2025 04:00:51 +0000
Manifest next update: Tue 17 Jun 2025 04:00:51 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: XziA7FB+/Awkp/JwtO1Naa3KgwP3a8SY98SeBbCQMWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:a9:0c:15:51:ab:5b:64:6a:bd:f4:37:7d:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Jun 16 04:00:51 2025 GMT
Not After : Jun 17 04:00:51 2025 GMT
Subject: CN=6855cb6329e74e8cd646c00a1fc91586d78315f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:72:13:ac:88:8f:ca:ba:55:da:9a:23:70:
61:fc:fd:4f:c7:97:6e:14:71:00:b7:15:3b:56:ab:
35:c4:87:97:c3:a5:84:76:d2:0b:a2:ac:f6:67:65:
37:40:a8:67:7c:33:ea:64:71:2b:72:32:ca:bd:ff:
ca:d1:bc:21:47:27:2a:c8:17:5d:4e:cc:90:e7:2e:
b4:f8:f9:0a:d0:f0:63:c1:51:1c:3f:fd:d2:88:e6:
de:73:70:8b:e1:0a:c4:b0:c5:86:0b:ff:fb:81:03:
da:8c:94:3a:c4:08:66:55:37:25:69:c5:9c:f2:cf:
18:1d:ed:91:8c:65:07:a9:c8:20:c3:9a:fa:f6:91:
a7:37:98:64:bb:70:53:cc:76:03:27:b7:22:ac:fe:
1c:09:c5:e8:2c:a2:6c:3e:2a:46:62:85:00:ed:42:
17:ea:bc:2a:2a:3c:4e:9b:a4:f8:5d:76:5c:2b:f3:
1d:bc:d6:b0:af:17:57:9a:af:36:0e:d8:86:96:1e:
1f:e0:2b:96:2e:35:e2:c0:4a:03:7b:4b:12:20:7d:
be:84:d2:79:26:e2:cc:0f:e5:a7:24:26:81:3b:3e:
de:a7:72:f3:c5:38:62:bb:a0:f4:fe:16:93:eb:7e:
c1:e7:45:b7:55:12:e4:74:b0:f5:9e:b5:6c:81:3e:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:55:CB:63:29:E7:4E:8C:D6:46:C0:0A:1F:C9:15:86:D7:83:15:F0
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1b:7a:95:f0:6b:23:20:d0:1d:de:82:c5:8a:20:3d:a3:42:
0f:b3:bd:37:20:1b:48:ba:18:b4:28:60:d1:62:43:f9:49:18:
f7:3a:fc:6f:00:f3:19:5f:17:6d:e2:4d:ed:c6:cc:a3:86:62:
d6:68:13:17:5f:6e:ac:42:b5:32:5a:91:f6:b6:41:8a:3b:98:
68:98:9c:b4:7a:4d:3d:6d:ac:d6:9f:17:18:66:f8:76:0f:a7:
d3:cb:6f:1b:76:b6:a3:9e:f8:31:99:1f:65:4b:7f:9a:53:87:
ae:62:51:65:21:8b:77:66:90:99:ec:26:d0:73:cd:16:55:c9:
3f:05:31:73:9b:be:eb:b7:75:9d:0b:11:e1:67:eb:8b:75:7d:
80:29:3e:63:f4:b6:2f:a3:29:57:a8:34:e0:3e:8b:4e:15:bd:
9e:99:a6:00:a3:7c:c6:bd:0f:d6:9a:a0:2c:e3:b0:bd:7f:9b:
41:d6:54:68:b4:3a:5f:11:a4:75:1b:eb:c7:25:e7:ff:32:07:
92:b4:7e:f0:6f:f5:32:ca:8c:6b:42:bb:1d:64:b0:e1:50:60:
49:59:ce:d2:9a:37:fa:07:14:37:e6:bb:b9:6c:13:7a:a3:a1:
8f:c3:28:4a:2d:8b:f8:e1:06:df:63:81:10:7f:96:29:d7:12:
06:22:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:23:47 2025 by rpki-client