Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: kFPZedqFhoGj0ag3k50hYDt3y+6F626i+L78HFcfuBA=
Subject key identifier: 1B:1A:BD:B8:7D:4C:ED:0F:44:B0:BE:EE:B0:5A:EB:39:EC:29:A7:DB
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 019873E217E416B8742555B3E9F5438124D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 13E2
Signing time: Mon 04 Aug 2025 07:00:53 +0000
Manifest this update: Mon 04 Aug 2025 07:00:53 +0000
Manifest next update: Tue 05 Aug 2025 07:00:53 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: Ch8izsXggsDzbCqRd+iiHyvRbBvwBzGmJsRU/bEJMiE=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:17:e4:16:b8:74:25:55:b3:e9:f5:43:81:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Aug 4 07:00:53 2025 GMT
Not After : Aug 5 07:00:53 2025 GMT
Subject: CN=1b1abdb87d4ced0f44b0beeeb05aeb39ec29a7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:c5:0d:56:ac:4e:c0:a2:4b:fd:fc:48:4e:
2d:52:f1:00:68:36:84:ee:57:ef:e7:f5:4f:66:91:
c6:95:ed:5b:72:d9:04:10:18:a4:b8:76:20:e8:a2:
a2:80:4d:ff:24:2c:a3:45:f1:13:bb:84:bc:ae:36:
76:6b:d7:a0:60:79:ca:9a:45:ec:3b:8b:6c:8d:7e:
d2:de:7b:c1:ff:bc:69:66:98:1c:ee:d5:b1:4b:3a:
5b:f7:6d:04:bb:7f:37:85:e1:9f:50:f7:10:f6:b8:
64:d4:1f:e4:85:dc:ad:57:c0:1f:06:1c:cc:aa:80:
a3:a6:e5:f2:5e:b3:d9:7a:c0:bd:bb:71:ec:01:72:
df:78:42:54:00:52:f6:e5:14:11:86:f6:23:14:55:
14:e7:64:c3:ec:69:60:ff:6d:a3:1e:6a:e7:22:28:
a8:fc:14:b6:ef:c4:d9:a9:f0:0a:c5:1a:45:0e:bd:
24:25:95:66:2b:74:ea:f0:54:c3:8f:40:36:4f:9b:
7e:82:e9:71:1e:a2:79:71:ff:b1:73:d5:8a:a6:d7:
f4:ae:7d:8e:14:02:3c:c6:15:eb:0a:0e:84:72:35:
6c:f9:04:4e:cd:8e:19:da:2e:40:0a:78:80:70:ba:
d8:c8:45:c7:8e:06:00:3b:51:f0:0d:c8:44:a1:ba:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:BD:B8:7D:4C:ED:0F:44:B0:BE:EE:B0:5A:EB:39:EC:29:A7:DB
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5d:9b:d0:48:dc:bc:cc:95:4e:82:9c:14:c4:85:8d:6b:4a:
79:97:1e:78:96:8d:63:3b:1a:a9:7c:70:9a:c4:d1:c7:db:e2:
a0:69:52:61:23:a4:c7:b8:54:8a:ba:40:1b:85:fb:11:8e:57:
5b:53:32:1b:f9:fe:07:9d:d2:8a:c6:fb:46:7a:03:1b:7a:de:
9b:d9:b3:28:6c:18:3e:78:cc:c1:39:ef:98:4c:9a:07:c3:90:
4c:6e:14:84:71:30:2f:2e:8b:d5:5a:f6:5f:45:d4:82:c9:4c:
62:31:c3:35:79:fa:e6:58:9d:4e:6d:65:f2:db:a5:03:43:57:
91:13:d9:f8:fa:44:8c:c2:94:66:5a:0f:d2:71:bb:c4:7b:91:
80:2e:d4:e9:89:6a:61:74:2c:a2:3d:13:97:99:8a:a2:cd:68:
5c:7b:50:e9:74:b4:22:42:a7:16:27:7c:f6:35:16:e6:d3:4b:
2b:10:f4:67:05:7a:dd:32:b7:e9:52:cf:ec:5a:5e:f3:c6:91:
67:9a:c6:58:f8:74:67:f8:2f:9d:88:d3:82:31:e0:80:83:01:
f9:0e:ed:a9:db:3b:37:72:55:fa:0a:e0:54:67:9c:05:12:74:
1e:c7:e2:77:a6:17:06:c7:da:91:76:02:6f:a2:30:f7:36:a5:
c3:01:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:01 2025 by rpki-client