Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: X2FIC4H7oo34nehpqZGN6Fw/LnUSXfNrumUkVF9uxf8=
Subject key identifier: A2:AD:8B:73:6C:06:56:E2:BC:52:F5:D2:A5:8E:3E:8D:FD:F2:7D:1F
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 01991E418B6E95B3F31648493DE3941A0A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0B16
Signing time: Sat 06 Sep 2025 09:00:35 +0000
Manifest this update: Sat 06 Sep 2025 09:00:35 +0000
Manifest next update: Sun 07 Sep 2025 09:00:35 +0000
Files and hashes: 1: 1-Y7w9XgF5BNF08Zk3EDN4gwsALU.roa (hash: 6VnnAzOoFEAs8MZaXUimxUhhtW0alo3aoiUxYxFj8aI=)
2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: mWGBjuK+gc2zbnrtn8wBSZX6mzodTsaD8G9IS8MnF/c=)
3: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
4: JLrvN6gy-l8oqZZ6A2f-EeS0QQc.roa (hash: kxEu7XapzO+8FKwUNiG2TUK6bp7351KlBBspHS3oFSo=)
5: MGVL3PWcg672eUJnE3OmpM02shQ.roa (hash: jaWN7PLFw0laWd8mU2a0x2xqPQpnAcAJ/82ZDzopnzE=)
6: c4yvyMKIOxEnq8qnOJowF2Jzm7s.roa (hash: s8IHGFPKGHVe+UT4NM56ryEb8GnNOyNh3KVfvOyTvrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:41:8b:6e:95:b3:f3:16:48:49:3d:e3:94:1a:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Sep 6 09:00:35 2025 GMT
Not After : Sep 7 09:00:35 2025 GMT
Subject: CN=a2ad8b736c0656e2bc52f5d2a58e3e8dfdf27d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:82:4a:ea:7e:5b:5b:0e:da:90:58:99:32:
44:c6:22:8e:1a:8c:40:a1:d3:e9:23:a2:3e:7c:b8:
3e:67:96:9c:2e:94:05:d9:9c:c4:6c:59:df:46:99:
2d:0c:03:ff:f9:6d:90:9e:b8:4b:e7:a0:62:15:91:
f1:74:77:c1:0a:6b:f3:a2:d2:e8:b3:b6:f9:a8:21:
7a:24:7c:57:bb:60:08:cb:7a:40:a1:71:c4:22:07:
03:83:ff:c8:93:31:79:9b:31:08:9a:fc:03:35:b7:
e9:c5:14:96:e6:c0:9d:0f:19:92:38:d5:a6:f5:24:
89:b9:29:30:dd:0e:fb:5f:74:2a:25:6c:7b:0c:ee:
52:83:5c:8d:fa:15:63:fa:86:a6:9a:f9:3b:ab:6c:
88:35:74:73:7c:e2:6b:12:e8:94:cf:10:b7:55:84:
05:ed:cd:cb:b7:45:27:58:cb:0d:04:7f:34:a6:3d:
23:f9:f6:75:70:d9:f0:36:c3:2f:42:b1:1b:10:cc:
d6:28:a4:e6:c3:35:78:fa:f7:06:ca:6b:ca:f1:0d:
78:ba:33:96:f1:4b:bc:f0:a0:e2:7e:b3:8d:d6:f0:
47:53:23:a8:bc:15:2b:7a:6e:b4:ce:34:38:ec:f3:
1c:fe:49:74:31:52:92:6a:8e:c9:eb:5b:73:56:5d:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AD:8B:73:6C:06:56:E2:BC:52:F5:D2:A5:8E:3E:8D:FD:F2:7D:1F
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:d7:9f:4e:c1:a8:79:27:08:88:0d:b1:6a:01:5c:0d:45:
0d:9c:2f:ae:59:03:a8:26:09:c3:91:6b:33:de:04:1c:7a:c3:
c2:1f:da:51:4c:f3:66:32:92:a3:be:6b:e2:5a:c7:22:8b:4a:
c4:07:58:ea:ed:b6:93:19:6b:4f:61:10:84:03:d1:92:79:7d:
91:2c:f4:c0:b6:67:d7:67:a7:3b:38:2d:9d:30:1e:69:45:ba:
0b:ca:e3:66:cd:5a:c7:30:fb:09:e4:2d:da:53:85:47:b0:a2:
31:1a:03:f2:69:e7:fd:03:9c:5c:ba:30:ff:4c:5f:ef:24:22:
67:bf:87:95:e3:29:5d:5d:0a:b4:9a:d1:b6:b0:d0:6f:48:de:
4c:56:2d:0b:c4:f2:06:0a:a1:71:ce:3e:2d:c4:1c:9d:94:08:
33:cb:a4:04:9f:49:58:f6:0e:4d:fa:c3:80:89:18:55:6b:45:
df:f4:05:ff:01:f6:08:5b:0f:3d:bd:7d:0f:ac:b3:78:26:1e:
e2:06:ac:99:07:de:44:f0:16:5c:a5:3c:cb:68:55:78:ff:20:
13:74:ef:fe:3d:f1:59:9b:dc:8c:fd:0d:89:76:15:48:2c:d8:
08:28:ee:7f:35:13:cc:2f:e8:03:93:7d:93:d6:92:e1:5b:c6:
bc:0f:e9:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkeQYtulbPzFkhJPeOUGgpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjUwOTA2MDkwMDM1WhcNMjUwOTA3MDkwMDM1WjAzMTEwLwYDVQQD
EyhhMmFkOGI3MzZjMDY1NmUyYmM1MmY1ZDJhNThlM2U4ZGZkZjI3ZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FaCSup+W1sO2pBYmTJExiKOGoxA
odPpI6I+fLg+Z5acLpQF2ZzEbFnfRpktDAP/+W2QnrhL56BiFZHxdHfBCmvzotLo
s7b5qCF6JHxXu2AIy3pAoXHEIgcDg//IkzF5mzEImvwDNbfpxRSW5sCdDxmSONWm
9SSJuSkw3Q77X3QqJWx7DO5Sg1yN+hVj+oammvk7q2yINXRzfOJrEuiUzxC3VYQF
7c3Lt0UnWMsNBH80pj0j+fZ1cNnwNsMvQrEbEMzWKKTmwzV4+vcGymvK8Q14ujOW
8Uu88KDifrON1vBHUyOovBUrem60zjQ47PMc/kl0MVKSao7J61tzVl3n9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKti3NsBlbivFL10qWOPo398n0fMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSzXn07B
qHknCIgNsWoBXA1FDZwvrlkDqCYJw5FrM94EHHrDwh/aUUzzZjKSo75r4lrHIotK
xAdY6u22kxlrT2EQhAPRknl9kSz0wLZn12enOzgtnTAeaUW6C8rjZs1axzD7CeQt
2lOFR7CiMRoD8mnn/QOcXLow/0xf7yQiZ7+HleMpXV0KtJrRtrDQb0jeTFYtC8Ty
Bgqhcc4+LcQcnZQIM8ukBJ9JWPYOTfrDgIkYVWtF3/QF/wH2CFsPPb19D6yzeCYe
4gasmQfeRPAWXKU8y2hVeP8gE3Tv/j3xWZvcjP0NiXYVSCzYCCjufzUTzC/oA5N9
k9aS4VvGvA/pAQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:15:51 2025 by rpki-client