Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: GGN2OOcoGwgUNkN61ZtCZYDf9zl0FwKcxNMzN16c6Xk=
Subject key identifier: B0:83:44:DC:D7:09:5C:3B:0E:61:54:23:45:F6:B6:24:BF:6E:05:E8
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01976DAB3AA693998F353758AD14EB8DD249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0A32
Signing time: Sat 14 Jun 2025 09:00:27 +0000
Manifest this update: Sat 14 Jun 2025 09:00:27 +0000
Manifest next update: Sun 15 Jun 2025 09:00:27 +0000
Files and hashes: 1: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: nTFKNTrK4J55jo764lkbAaFd2deL0o5//pqp9ornMrE=)
2: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
3: hrEzN0ov7R8-CBntuFI6TOZ5J3k.roa (hash: F4t//75g9YseMJLav5TNry1YdPvomuVlb22mZdbwTXk=)
4: im9G3vS0k47RgPfIpas56TSYtkk.roa (hash: pZ2iLKA7r+EiY8r8ECrplg1OXK8MBjBC9bzHQ9geb7I=)
5: zVUWguf5pjghejhRd7Ny0TVMo5E.roa (hash: NjWrzzFudTL38mC/sj/7bSyVSobc+7VuDZH9qGUDXkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:3a:a6:93:99:8f:35:37:58:ad:14:eb:8d:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jun 14 09:00:27 2025 GMT
Not After : Jun 15 09:00:27 2025 GMT
Subject: CN=b08344dcd7095c3b0e61542345f6b624bf6e05e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:47:cb:f3:a8:66:fd:49:d0:b7:c9:70:80:
a8:bd:b0:2f:ee:e3:38:45:b5:8d:84:6e:28:27:c5:
d6:67:95:cd:42:95:4e:be:df:1d:06:a6:93:ce:74:
91:e5:ca:c2:af:09:88:4f:bb:08:bb:9c:f6:a5:80:
ca:64:77:3d:12:93:ea:15:12:18:1e:ff:2c:09:e2:
d7:6b:06:27:d4:1c:28:de:72:a4:09:c2:e4:0d:f8:
6a:52:29:34:4f:ab:2e:10:18:11:cf:d2:24:b9:d0:
6b:74:b9:3f:14:c2:1b:fd:a1:10:af:2b:85:e7:e9:
0f:22:58:b6:e6:4b:80:53:7e:85:b8:13:76:b1:02:
ed:26:c3:13:fc:a5:f5:e1:85:23:51:81:fd:b5:d7:
87:08:f5:75:74:b6:ea:bb:c5:ab:4b:ca:6b:d7:1d:
81:49:a7:67:3e:16:2a:bd:d0:c7:ba:f1:51:39:0f:
b6:75:0d:7d:e4:fe:17:2e:f0:81:da:51:0d:9f:31:
78:46:2e:6e:e9:0e:bb:9b:29:32:42:13:35:f1:7f:
07:7c:64:64:dd:14:ca:cc:47:30:8a:8e:51:63:4b:
dd:55:cd:ec:29:76:f1:1c:24:39:11:d6:16:24:71:
d0:b0:e0:98:1c:4b:4f:88:dd:5e:18:95:63:f1:5f:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:83:44:DC:D7:09:5C:3B:0E:61:54:23:45:F6:B6:24:BF:6E:05:E8
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d6:7c:62:b0:6b:24:66:67:dc:8b:b8:96:3c:bb:24:d2:3e:
cc:c6:ed:b6:f7:a5:c9:58:d3:1f:7b:6e:31:da:cd:07:2c:20:
a1:85:cb:6c:8d:a4:54:82:aa:39:c6:96:31:77:41:94:ac:ba:
97:e5:77:b1:a3:f0:26:c1:51:cb:c1:62:9c:02:db:1f:96:a3:
9b:6e:41:f3:15:48:bd:e8:4a:75:2b:04:71:88:48:58:c6:fd:
1a:68:87:53:85:5b:52:23:87:6a:e1:a2:89:d5:e1:8e:00:3a:
e7:75:f1:50:ce:e9:4c:0b:3e:89:5a:2f:1e:6f:b2:15:91:b5:
c7:f3:f0:bf:b1:bc:c6:c1:42:18:3c:31:7c:ac:7c:ca:40:d7:
54:2a:18:64:b8:5d:16:ae:83:f7:01:b7:db:b9:ce:bb:9d:60:
d9:bb:f4:36:a8:79:1b:65:68:52:7c:32:a4:ac:c3:e6:ef:4a:
a9:cf:86:99:1b:66:0f:8b:ac:8d:c9:a6:b2:44:b7:a5:fd:2c:
86:71:cb:4b:fb:35:7a:86:50:2f:90:5b:2c:7f:97:5a:02:50:
65:6f:fd:a3:56:6b:7b:4c:91:90:f5:63:e1:3f:94:b6:e1:3d:
86:16:59:8e:9e:c5:3e:1e:72:92:5a:4e:ae:32:c0:54:05:81:
75:3d:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:14:00 2025 by rpki-client