Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: RhH4fDMI6ZvK9z9q3BNyF2CNQnHAr3n27usDD/Bp57E=
Subject key identifier: 9A:65:45:51:22:7B:78:AC:C6:9F:FA:6D:16:09:F6:56:9D:02:37:8E
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 0196741DEA7C2D8378AE74791FEBB1850864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 12D9
Signing time: Sat 26 Apr 2025 22:00:39 +0000
Manifest this update: Sat 26 Apr 2025 22:00:39 +0000
Manifest next update: Sun 27 Apr 2025 22:00:39 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: kb6FcTqdgAPoLsSF5H0hunKJtp/JE9Xxf6PlBc3UYrs=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:ea:7c:2d:83:78:ae:74:79:1f:eb:b1:85:08:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Apr 26 22:00:39 2025 GMT
Not After : Apr 27 22:00:39 2025 GMT
Subject: CN=9a654551227b78acc69ffa6d1609f6569d02378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:74:c9:d3:de:4b:1a:7d:3d:17:9a:76:ce:
3f:9b:36:57:17:a4:4b:74:7b:13:7d:e8:c8:76:f4:
f1:f7:78:5b:a6:bd:30:52:4d:e5:16:75:92:e4:26:
14:fa:10:1d:e2:7a:bc:3a:74:87:f0:88:70:33:bc:
d8:f3:1e:6b:aa:a4:f8:e8:ac:2b:1e:db:48:4a:99:
e9:0e:97:d5:6c:0f:39:53:9a:ae:c4:6d:86:9f:bc:
52:4b:47:37:66:12:c2:7d:ce:53:f0:43:7c:9e:35:
3f:1c:fe:9e:94:fe:81:14:45:b2:a8:74:63:81:3e:
e0:dc:05:21:c2:83:23:13:f2:c0:45:be:b0:45:06:
72:8d:a0:6e:55:4f:ea:43:9e:1a:44:25:fa:a5:ad:
c1:54:5f:b6:f0:93:b3:02:df:38:4d:f3:a7:db:d9:
30:d2:06:1f:59:a2:14:b2:73:67:a2:00:34:2c:ab:
31:a0:5f:4e:32:b9:d6:a2:c2:2f:4b:2f:f9:ff:b1:
75:12:5a:0f:a1:9a:8a:93:22:e2:c3:a1:df:43:13:
f9:c7:85:2b:e0:a7:a6:62:1a:7d:8b:78:29:33:d1:
7f:9b:13:6c:f9:63:5c:e0:23:06:ae:68:79:e1:cf:
bf:ac:bb:27:80:0b:f6:22:04:91:63:f9:f0:0e:0e:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:45:51:22:7B:78:AC:C6:9F:FA:6D:16:09:F6:56:9D:02:37:8E
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:14:60:17:3b:4c:13:a4:fd:a4:3c:5b:0f:ce:35:8a:b0:d9:
8b:be:b3:25:03:bf:18:a3:a4:23:1e:a0:fb:08:15:8c:b3:86:
ca:e6:3e:da:3f:93:0c:7d:53:43:e7:fd:55:58:67:66:2a:fe:
2d:15:84:f5:78:8b:90:68:63:78:c2:1d:34:60:ba:ac:51:70:
cb:50:4f:81:86:42:6c:f7:9e:dd:10:7b:1c:6e:88:8c:59:02:
79:a9:1f:4f:27:6a:dd:34:38:f3:27:e7:19:f9:93:c2:25:bd:
ea:dd:09:09:0e:e5:71:31:2e:2c:0d:37:d4:b3:d7:7a:66:34:
f0:31:ed:c3:ba:ac:d6:f6:c8:08:4c:ea:95:ca:d9:37:d2:fa:
92:12:ba:e5:8d:7b:0c:f0:8e:f6:67:5c:c2:fc:21:46:b4:8c:
43:ed:95:54:f4:bd:2f:b0:48:9f:13:a5:47:2d:ba:ad:3e:4c:
c2:ac:88:9f:45:28:75:bc:72:25:e5:b2:e9:4e:aa:73:21:38:
1b:a8:97:ec:2f:59:d3:57:7b:4d:ee:2a:14:32:5c:02:45:58:
1b:aa:63:d1:0a:c1:ba:60:3b:1e:51:d3:19:cf:da:0a:bb:8f:
8c:b5:3f:c4:e5:13:ae:86:4e:52:45:34:23:80:a9:4d:3c:dc:
be:81:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:28 2025 by rpki-client