Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: hra3WMXal+DVKHcowDYs/N8sXflAKZtb8Kf8aKYqyM0=
Subject key identifier: E9:50:45:21:53:A6:76:D7:D7:C6:4B:9F:05:84:F8:F7:04:B6:2B:06
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01982A482B02726E4699FC324D53BCFAB5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0A94
Signing time: Mon 21 Jul 2025 00:00:28 +0000
Manifest this update: Mon 21 Jul 2025 00:00:28 +0000
Manifest next update: Tue 22 Jul 2025 00:00:28 +0000
Files and hashes: 1: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: /ylDZLT68HgT3Uy9GaYXJIn/q2cQtKWwyNcoWpgbN5E=)
2: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
3: XR-rPb-m7f-FlAMX-L8KGh0V99Y.roa (hash: BVyK1bZ+31AFIaxsZAF+xtqltatv+NHV8sutqOFiSPE=)
4: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
5: hrEzN0ov7R8-CBntuFI6TOZ5J3k.roa (hash: F4t//75g9YseMJLav5TNry1YdPvomuVlb22mZdbwTXk=)
6: l88A-U1C1HpDcKZFwV0rx4ROPL8.roa (hash: LE624BUeBJG4T5usIVVU9iI5D8HLeXS6HrWctI5mJ3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:48:2b:02:72:6e:46:99:fc:32:4d:53:bc:fa:b5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 21 00:00:28 2025 GMT
Not After : Jul 22 00:00:28 2025 GMT
Subject: CN=e950452153a676d7d7c64b9f0584f8f704b62b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:16:83:2a:30:31:1c:83:3f:eb:59:c0:37:
97:19:82:13:1e:be:9d:48:55:8f:1f:d3:d1:d4:e1:
34:c7:17:09:3b:eb:1e:db:15:cd:f6:dc:db:73:8a:
81:54:19:4f:fe:34:3f:5c:bd:c0:44:75:53:64:7e:
80:da:6e:e7:23:3e:4a:2c:5e:f2:91:73:4c:6c:54:
e0:0c:bc:c8:1f:54:45:02:c8:1e:7d:44:61:b8:79:
11:8e:40:39:be:eb:7a:4a:55:b7:75:8f:af:66:cb:
7a:34:79:66:6f:9a:65:71:d4:44:f9:bb:e1:62:19:
0e:ea:20:1a:60:72:b4:e7:36:60:30:a7:7e:25:3d:
0c:52:a5:51:b2:b6:3c:fb:a4:8a:4f:b9:28:d8:90:
6c:d1:a9:84:13:17:10:a8:df:02:59:86:c1:d1:a2:
d6:ec:ba:94:ef:3f:a3:64:a9:ed:09:54:30:15:56:
7d:15:72:81:4e:23:51:1f:3a:1e:6f:6b:1d:d0:73:
5a:10:63:df:a4:3b:4f:02:28:97:75:90:d1:f0:05:
59:1f:c6:34:f7:d9:83:65:d3:4a:fb:fb:58:15:13:
de:1a:ff:c5:4e:56:2d:5c:83:e6:a0:0d:26:88:21:
9f:43:43:69:cc:62:69:25:e0:c1:c0:7e:29:a8:ca:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:50:45:21:53:A6:76:D7:D7:C6:4B:9F:05:84:F8:F7:04:B6:2B:06
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d7:f6:a3:cb:69:3d:00:35:49:28:6e:6a:96:a4:26:ec:18:
d8:fb:75:98:d4:f4:62:cd:e5:93:f3:21:f1:16:ed:48:d1:1a:
e2:0e:8c:08:d9:d7:93:0c:3d:ba:a8:68:6f:8f:46:ad:87:76:
27:0f:0c:ad:98:b5:01:6b:12:60:22:11:a8:a5:1c:4a:c8:ca:
18:ba:65:eb:d5:d0:59:bc:37:6f:11:04:02:f3:b7:6b:44:c6:
9d:38:6e:70:e5:f9:63:58:6b:2e:e3:17:a7:5c:52:e6:32:4a:
fa:d3:d7:e7:ff:78:86:66:c1:2b:58:62:70:b1:8d:22:d6:1b:
fc:7d:f3:5f:31:9e:33:6f:a1:b9:fa:00:2d:13:04:91:54:26:
61:59:04:71:b9:ed:81:00:29:af:73:a5:4f:d3:ff:5e:83:83:
fb:ef:66:1d:66:5c:99:d8:33:a4:2c:41:a6:5a:19:69:c1:12:
ea:12:60:88:b3:fa:eb:43:7f:86:70:e0:0f:47:de:76:60:ca:
ed:51:f4:38:b1:65:36:94:a7:65:1a:39:d1:0b:89:50:a0:b5:
f2:ea:60:9e:42:d8:bb:00:9c:26:c0:66:ba:72:5d:4e:46:1c:
ac:af:c3:0f:15:1f:fb:a9:cc:7e:d7:16:3f:2e:52:78:83:0e:
0f:66:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:04 2025 by rpki-client