Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: JXGIhh7Qhf1qrvk0/zA2ZkZiIpqGv0n92Mw60w6Uk6g=
Subject key identifier: 6D:21:3F:C0:75:A1:4D:32:04:71:2F:E8:7E:15:B0:ED:74:19:71:25
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 0197B6A0F13DA2ABCB680388AFC216F14182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 1380
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: S51YnS1hRGQvvDXJdI/tImra8Y6jyCW0XOVctvs1+I4=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f1:3d:a2:ab:cb:68:03:88:af:c2:16:f1:41:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=6d213fc075a14d3204712fe87e15b0ed74197125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:29:92:7f:61:87:75:e6:44:3f:73:0c:16:
44:d1:cf:4f:a9:a9:e5:36:69:9a:01:66:49:66:4c:
71:5a:2f:b0:90:32:fe:02:a9:29:55:07:23:5d:1f:
94:a8:a3:4c:c8:e1:43:db:9c:58:71:16:42:42:c0:
6e:c4:06:fa:a0:da:f4:bb:83:33:7f:05:c4:ff:1d:
17:45:f7:4b:9d:6e:5e:d0:fb:a9:84:c5:4c:9e:fa:
21:c0:65:a0:48:0f:92:ca:b1:53:f6:77:c4:a2:61:
70:ed:47:fb:bd:7c:0d:a0:f8:d4:d6:d6:2b:1a:20:
0b:78:0b:a4:22:15:93:7f:a9:12:37:d4:dd:54:7a:
24:86:b5:5f:5d:00:7a:60:63:74:57:41:ae:85:92:
cc:f2:67:05:55:c0:b1:32:49:0d:7e:ef:c2:b2:ef:
d1:9d:4a:b4:3f:5c:b4:30:0a:f2:23:eb:20:c0:c8:
e5:3d:68:71:a9:a2:2a:0b:79:1c:e4:a4:b5:d4:fe:
eb:a5:85:94:29:a7:1a:5d:2c:90:28:8b:b7:a6:3f:
82:b4:d7:4a:64:67:ef:5c:c0:a6:21:7f:8c:98:0e:
cf:76:ec:21:c8:2e:f9:c0:e7:4f:6d:99:ca:d2:c9:
c4:ba:ad:5d:e1:88:20:8b:14:40:65:4a:53:c4:ac:
34:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:3F:C0:75:A1:4D:32:04:71:2F:E8:7E:15:B0:ED:74:19:71:25
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a1:94:7c:83:53:d7:56:04:da:71:07:f2:e5:f1:c4:47:9f:
d0:a6:0e:eb:62:4b:2c:4c:74:11:d9:4c:1b:7c:7c:56:4a:1b:
31:89:fb:6a:97:8c:0e:96:26:9c:f0:32:70:b5:d5:fa:16:7b:
7f:18:7b:74:ac:cf:f4:de:da:69:05:cc:6a:4b:e7:06:c6:fc:
16:3a:59:9a:f3:18:a7:9b:f9:b3:d6:36:cc:3d:45:53:db:89:
25:a3:b3:52:33:74:93:08:f0:39:f3:08:92:d3:47:65:55:7e:
38:b3:c7:43:de:44:71:df:e0:37:bd:65:92:67:15:e4:52:0a:
0c:8d:60:2f:4b:60:c8:28:39:97:49:cb:9a:b0:ca:98:ae:0a:
c7:91:5f:bc:5c:69:5e:3c:56:f5:8b:81:13:91:c3:a1:c4:c6:
44:f4:24:e4:d9:68:b6:3f:aa:d7:17:5f:ef:d8:2a:b8:1d:f6:
3a:cb:c0:e2:66:1b:54:90:33:ab:d8:ff:13:1d:73:5f:a7:69:
db:05:e7:76:ac:25:fe:c3:44:e1:2a:ff:f8:cd:34:44:e4:61:
d6:b9:73:e3:3a:45:80:34:6e:48:f6:55:fe:1a:16:a0:a7:b1:
9a:5d:51:60:14:44:03:f8:02:d2:06:81:cc:3b:b4:c8:ba:ef:
61:68:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:52 2025 by rpki-client