Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
File: ANB8_CisRwPfarJvzS45U845CXk.mft (raw, json)
Hash identifier: I5wbH9YKLONPVJSZ5/I9Sv7ANvBdtb/KrMmFOGMQp4I=
Subject key identifier: B6:18:76:E6:B6:4C:41:6D:DD:07:BA:AE:29:50:2A:F3:1D:30:9E:6D
Authority key identifier: 00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
Certificate issuer: /CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Certificate serial: 019A4D06AFBF88A0FAB9AC9589E9FBDAF432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
Manifest number: 07E8
Signing time: Tue 04 Nov 2025 04:01:15 +0000
Manifest this update: Tue 04 Nov 2025 04:01:15 +0000
Manifest next update: Wed 05 Nov 2025 04:01:15 +0000
Files and hashes: 1: ANB8_CisRwPfarJvzS45U845CXk.crl (hash: BsCDufDif9pQQfQyCMREpv5KVcp/uWiucKofoK4IuQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:af:bf:88:a0:fa:b9:ac:95:89:e9:fb:da:f4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d07cfc28ac4703df6ab26fcd2e3953ce390979
Validity
Not Before: Nov 4 04:01:15 2025 GMT
Not After : Nov 5 04:01:15 2025 GMT
Subject: CN=b61876e6b64c416ddd07baae29502af31d309e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:d4:b0:9c:b1:37:18:95:d5:03:de:cc:fc:
a1:ab:42:f5:cd:e9:77:df:df:5a:46:b7:bc:b0:92:
4f:e7:e3:40:a0:1b:1c:73:70:ad:71:e3:7c:df:9d:
e2:22:1e:cf:33:2b:fa:18:b1:69:89:6f:cb:e2:7e:
05:9d:cc:6f:17:e7:00:33:47:30:79:9f:17:01:f0:
e5:b9:e2:b9:a1:f7:c7:14:a4:f5:8d:3b:65:e6:fb:
6a:df:9c:7a:f0:61:93:05:5e:bb:87:f2:90:77:32:
b6:83:ae:ad:4a:57:da:02:ae:c1:82:a7:ed:92:ff:
7b:78:6e:14:b3:44:fc:45:56:21:93:c9:79:40:3c:
8e:18:29:e5:15:17:aa:1e:31:fa:f7:93:06:44:fe:
a9:14:99:bb:fb:93:47:75:04:d2:c7:ad:01:56:40:
38:3e:db:f7:c5:fd:7b:e5:bf:7c:3a:00:a1:0d:9e:
99:67:ca:67:33:08:b4:49:7b:9f:6a:92:fa:17:51:
69:65:39:2c:30:9a:33:f5:80:bf:12:ac:7c:db:1f:
c1:96:d4:fb:2d:ae:d9:75:4c:e7:be:69:be:03:41:
a9:82:bc:12:82:71:03:be:13:92:fe:c1:4b:86:75:
48:ff:46:4c:39:23:33:1e:32:be:0a:1b:cc:81:2b:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:76:E6:B6:4C:41:6D:DD:07:BA:AE:29:50:2A:F3:1D:30:9E:6D
X509v3 Authority Key Identifier:
keyid:00:D0:7C:FC:28:AC:47:03:DF:6A:B2:6F:CD:2E:39:53:CE:39:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANB8_CisRwPfarJvzS45U845CXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7315e0-4e1b-43ab-85b4-80545205456c/1/ANB8_CisRwPfarJvzS45U845CXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ef:b3:b9:f1:2e:7a:32:81:6d:38:4b:68:21:56:bf:92:57:
5b:b0:c6:c3:23:4b:42:e8:ee:16:e1:e8:ee:bb:07:1d:91:d4:
a5:5b:4c:e6:8d:de:cb:78:2e:f4:ff:48:7a:1a:12:e9:d4:32:
b2:b6:78:32:15:cb:03:5b:65:e9:1e:03:01:e9:fc:a9:a6:32:
14:e5:36:7b:0c:80:fb:b2:dc:6c:77:8c:7d:59:66:0d:b1:4d:
19:40:6e:64:22:56:11:e5:c6:1b:f3:40:72:0f:c1:f3:52:fe:
54:8c:1d:37:d0:69:6b:c4:1a:3c:6f:8f:84:ad:92:e6:e5:27:
1f:3c:b2:60:df:bb:f2:16:90:64:54:8b:f4:a1:2d:51:78:87:
11:5c:00:de:0d:66:cb:2f:8e:da:4a:6c:6d:dd:23:eb:ea:7a:
4a:1c:e8:ca:89:64:78:d5:91:06:9f:9b:4c:b2:1e:fe:77:ec:
eb:a9:55:6d:55:e2:d9:5d:47:c1:43:c5:e6:36:b1:51:7d:dd:
49:1e:11:09:67:0a:86:b6:92:07:5d:19:5d:c1:77:a3:aa:47:
3f:46:52:8f:07:96:18:08:c7:95:ca:07:6b:f7:81:a1:91:58:
6a:61:88:ff:57:0d:0d:00:5a:49:27:47:d8:05:c6:9c:5e:c2:
08:1e:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:09 2025 by rpki-client