Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: mwIHCOxsGqnL0G9wNOmpKXj57tYVnjAho3GrkrLoYFo=
Subject key identifier: 3C:9A:60:47:CE:9C:D4:D1:6C:A4:F6:3D:AF:92:AC:C7:4C:4C:34:46
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 0199FFC821756943D5BA4DCAC9B396C9128A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 14AF
Signing time: Mon 20 Oct 2025 04:02:09 +0000
Manifest this update: Mon 20 Oct 2025 04:02:09 +0000
Manifest next update: Tue 21 Oct 2025 04:02:09 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: w8kiV4EsodajRzRzwDpjoLhMCfqmG4wJV0+vdRqpbNs=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:21:75:69:43:d5:ba:4d:ca:c9:b3:96:c9:12:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Oct 20 04:02:09 2025 GMT
Not After : Oct 21 04:02:09 2025 GMT
Subject: CN=3c9a6047ce9cd4d16ca4f63daf92acc74c4c3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:2b:e2:df:aa:f3:62:b4:7f:22:0e:02:42:
db:4a:00:ff:18:cb:55:2b:b6:6f:ee:42:8b:d5:52:
0a:7a:59:8e:5d:49:9b:b9:2c:b3:89:03:c9:34:66:
7a:e9:c4:48:1e:1a:c5:d5:bc:9f:60:ac:b8:50:b5:
15:37:d1:2d:14:30:d4:21:5c:91:89:82:e4:1e:b2:
48:ac:e0:29:98:39:58:ed:3d:80:07:0f:cc:16:14:
95:05:15:0e:2e:e6:e8:f4:1a:eb:93:1d:cb:51:c0:
7a:36:13:99:27:8b:b5:36:97:98:d6:66:96:f4:90:
fc:01:53:a2:13:b1:0d:5c:5c:04:51:77:65:00:62:
73:b3:25:4a:3b:72:93:f6:75:43:8b:1e:62:b0:44:
54:32:a3:d5:d2:1c:d4:e9:c6:ea:a7:68:b5:64:c5:
fa:b6:0d:d5:17:bd:15:43:51:96:18:43:af:41:b5:
15:3b:c8:06:c4:cf:3a:c8:fd:7e:6c:6b:74:9a:30:
a2:c2:a2:ea:a2:19:3e:62:92:30:80:ef:34:72:c2:
d3:61:38:90:03:bb:98:dd:84:63:fc:1c:9a:69:30:
25:25:1f:7b:93:63:99:36:4d:c0:29:36:58:09:69:
f5:5a:92:21:a5:8d:df:56:42:3b:48:44:33:be:bc:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:60:47:CE:9C:D4:D1:6C:A4:F6:3D:AF:92:AC:C7:4C:4C:34:46
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:00:5d:50:c3:16:1b:c0:ca:9e:5d:61:d8:97:a2:7a:76:
37:ae:c1:a1:b9:5c:65:ac:34:de:24:92:b0:54:8b:56:6d:1f:
f5:e0:cf:e6:28:33:4c:9e:76:a8:91:65:01:2a:e6:72:3e:75:
0d:58:fb:23:66:d4:85:02:9e:14:2b:7b:76:81:16:54:f0:1e:
9f:fe:8f:6b:4e:0c:90:70:02:09:32:22:2d:37:95:d3:1d:e8:
3d:20:36:2c:11:8d:62:dc:39:d1:9f:e8:72:6b:03:d2:40:d3:
79:35:98:7a:4c:f5:82:9b:e7:76:f0:59:e1:6c:96:e9:9d:a2:
de:09:5f:ac:a8:29:42:d0:7e:c6:02:b6:8d:50:26:ac:8a:84:
56:e5:78:3c:26:f6:33:94:35:f3:b0:d5:ea:66:55:35:57:71:
21:31:cd:15:c0:ea:eb:a7:a3:18:22:c1:b8:e6:a4:84:58:58:
52:04:5c:9c:24:c9:f5:ec:78:3d:bd:2e:90:80:35:e9:68:ff:
1a:13:f0:bd:a9:5c:b2:30:24:d7:1d:17:e1:4d:a8:72:26:2e:
40:47:0e:f1:2d:73:50:06:c9:25:23:bf:82:44:97:b5:2c:0d:
37:b1:d2:0e:c1:18:3c:7e:ad:12:af:65:23:8f:dd:d7:a1:e8:
93:12:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:01 2025 by rpki-client