Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: XV/trM6iQwpqdrqV3A66XK/JIllbmgIu2HCVDTMG5YY=
Subject key identifier: B3:EE:BF:A0:76:26:F6:3F:5A:F9:38:20:9A:2B:DF:64:13:C0:2A:4D
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 019A4EF470105DB3BEB73440E6D4934BBE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 14D8
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: yG6ifRrVR6TOR+YNf2ZYsDNTATHR6sYula67sz0X2G8=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:70:10:5d:b3:be:b7:34:40:e6:d4:93:4b:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=b3eebfa07626f63f5af938209a2bdf6413c02a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:84:30:cf:5b:e9:81:2f:23:8e:c3:67:0e:
cd:b1:1b:d6:f9:92:d9:17:ab:e7:4a:31:fe:c2:2d:
2c:02:09:ba:9d:cf:4a:df:1a:e1:9f:b4:74:64:14:
36:57:29:ee:2a:19:6c:08:f8:84:84:a8:b4:8c:e1:
0c:c5:4f:9e:39:c0:31:25:f0:92:90:71:6d:40:60:
44:30:c4:7b:8f:bd:7b:d4:ef:a0:09:8d:d9:a4:fc:
87:8b:25:31:95:cf:e7:51:ef:da:96:f7:ee:e3:8a:
7c:14:00:72:e8:8d:64:be:3a:ca:88:2a:8f:35:f6:
c9:e0:59:1c:d0:8f:07:23:f6:5b:91:a2:b6:59:ba:
d7:e5:a1:70:f3:64:ff:e7:4f:8f:dc:32:7e:a1:fd:
1a:1e:0a:40:e6:71:a0:95:be:83:00:66:d3:90:78:
ab:1c:b9:b7:3a:32:29:0e:45:fe:45:e5:42:de:e3:
d6:02:19:22:97:f7:a7:2e:b7:1e:77:65:8a:7b:71:
a9:a7:e2:7d:d9:bc:3d:08:b9:63:d9:17:6e:c8:64:
a5:26:b8:d2:ba:55:5c:c6:64:e4:c1:37:74:80:97:
a2:ce:ca:4a:2d:84:37:15:75:a4:7d:c8:aa:16:12:
af:bd:85:d3:62:50:01:91:7f:bc:93:50:a8:04:af:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:BF:A0:76:26:F6:3F:5A:F9:38:20:9A:2B:DF:64:13:C0:2A:4D
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7b:2c:f1:d1:0b:31:15:e0:d2:5a:70:7f:96:aa:28:cf:a8:
f9:d4:13:a6:2f:bd:61:ca:db:ac:7b:4c:b3:b2:7e:2b:9b:00:
a2:e1:97:69:c8:64:fe:f1:3a:a1:7c:d5:ce:e9:ce:fe:1e:22:
21:8c:08:1c:dc:44:6c:bf:96:b7:45:76:57:1d:bb:9d:ab:f9:
a5:3e:48:2a:62:ae:ca:df:49:bd:b6:cb:53:1f:c0:62:7e:c8:
2d:5e:d8:0a:c7:30:1f:6b:81:ee:81:29:00:5f:0b:33:83:5e:
a1:ca:5f:ce:92:97:49:8b:03:41:ab:e5:f0:13:7d:27:d3:ff:
1f:21:8f:d7:a1:5a:f0:ba:a1:8f:cd:7a:0f:7c:9d:01:84:d8:
83:e4:c8:46:24:0b:3f:0b:f9:14:17:4a:f0:1e:3a:7b:88:b1:
a5:d5:45:1e:97:2d:9f:42:91:eb:e7:70:53:35:7c:a4:44:7e:
c5:e8:50:58:6b:47:d5:3a:12:05:fe:de:43:e0:18:f9:b6:6f:
75:27:f8:19:ba:e8:ad:7a:98:ca:eb:41:c8:9f:18:28:01:44:
46:83:1a:3d:c3:5b:fc:ef:48:11:58:e4:74:d0:56:be:33:83:
18:48:71:91:5f:0e:8a:4c:4b:f2:fb:9f:f2:0c:94:71:0f:dd:
5f:13:0a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HAQXbO+tzRA5tSTS74kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjUxMTA0MTMwMDMzWhcNMjUxMTA1MTMwMDMzWjAzMTEwLwYDVQQD
EyhiM2VlYmZhMDc2MjZmNjNmNWFmOTM4MjA5YTJiZGY2NDEzYzAyYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pGEMM9b6YEvI47DZw7NsRvW+ZLZ
F6vnSjH+wi0sAgm6nc9K3xrhn7R0ZBQ2VynuKhlsCPiEhKi0jOEMxU+eOcAxJfCS
kHFtQGBEMMR7j7171O+gCY3ZpPyHiyUxlc/nUe/alvfu44p8FABy6I1kvjrKiCqP
NfbJ4Fkc0I8HI/ZbkaK2WbrX5aFw82T/50+P3DJ+of0aHgpA5nGglb6DAGbTkHir
HLm3OjIpDkX+ReVC3uPWAhkil/enLrced2WKe3Gpp+J92bw9CLlj2RduyGSlJrjS
ulVcxmTkwTd0gJeizspKLYQ3FXWkfciqFhKvvYXTYlABkX+8k1CoBK87AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPuv6B2JvY/Wvk4IJor32QTwCpNMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3ss8dEL
MRXg0lpwf5aqKM+o+dQTpi+9YcrbrHtMs7J+K5sAouGXachk/vE6oXzVzunO/h4i
IYwIHNxEbL+Wt0V2Vx27nav5pT5IKmKuyt9JvbbLUx/AYn7ILV7YCscwH2uB7oEp
AF8LM4NeocpfzpKXSYsDQavl8BN9J9P/HyGP16Fa8Lqhj816D3ydAYTYg+TIRiQL
Pwv5FBdK8B46e4ixpdVFHpctn0KR6+dwUzV8pER+xehQWGtH1ToSBf7eQ+AY+bZv
dSf4GbrorXqYyutByJ8YKAFERoMaPcNb/O9IEVjkdNBWvjODGEhxkV8OikxL8vuf
8gyUcQ/dXxMKHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:34 2025 by rpki-client