Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: rvdExkNqDxWFD/iID70SA5K+NU6AEVHWiOo0ALjsjkw=
Subject key identifier: B8:59:08:EF:20:F2:78:C0:E1:18:29:65:E4:73:E0:7F:EE:21:97:CA
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019616C6FCABA4AE6B97632E19F422CC1B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 097C
Signing time: Tue 08 Apr 2025 19:01:01 +0000
Manifest this update: Tue 08 Apr 2025 19:01:01 +0000
Manifest next update: Wed 09 Apr 2025 19:01:01 +0000
Files and hashes: 1: ARezak8V-5mw6deSCADiac-Xj_w.roa (hash: 9wzguKPWEYzNmwfk6z7NHzk2CG37G+xy/bZuEFspBZ4=)
2: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: dplF1FpKTnTVq52NgD+8xpGz4WklS87/y0vdUPBC8/A=)
3: I8Nmh37tFNFzjXmw0t9bEIAE8Eo.roa (hash: YNeRziRUhmhLTOn+PVSXP3A/jlP0J/ORfeC6qUdAH/s=)
4: JSU_Gc7eqTUqpDFkA2FIvbeqiUE.roa (hash: SjI9SwLiNWQSlSCpLAULn3MZkkJhenDEWQ7CDz2aZ/E=)
5: hrEzN0ov7R8-CBntuFI6TOZ5J3k.roa (hash: F4t//75g9YseMJLav5TNry1YdPvomuVlb22mZdbwTXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:c6:fc:ab:a4:ae:6b:97:63:2e:19:f4:22:cc:1b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Apr 8 19:01:01 2025 GMT
Not After : Apr 9 19:01:01 2025 GMT
Subject: CN=b85908ef20f278c0e1182965e473e07fee2197ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:83:ab:b8:77:45:5a:76:b4:b0:21:98:3a:
83:2b:24:f1:97:9e:c0:ae:e7:a4:15:5d:ad:dc:87:
e9:1c:60:49:57:4e:f4:52:fb:24:53:44:ab:69:c9:
6a:39:54:b7:90:87:96:54:d5:67:45:66:7f:bb:12:
37:14:4d:58:2f:ad:48:a2:f6:50:9b:50:1c:90:4a:
9e:39:36:82:f4:87:77:91:92:80:84:66:5d:17:96:
e3:c9:b5:2f:25:eb:29:8d:2c:04:21:4a:b1:7a:d5:
50:ce:78:d2:8d:f7:2e:82:d3:88:2a:0f:f7:22:d0:
bc:e3:88:45:a4:1f:be:f8:25:62:d8:a1:31:ae:89:
67:29:38:77:47:61:f1:67:ff:2e:ac:03:43:37:c7:
b5:5b:d8:5d:e5:85:39:bb:d9:8a:46:c4:96:ce:39:
0c:cf:b3:13:9b:bb:d3:ba:6d:b1:86:55:e9:e8:19:
22:47:f1:04:cf:f8:b1:13:90:a2:f1:21:3e:d4:e1:
ff:a9:1b:7e:88:93:60:4b:52:2c:c6:d0:5f:19:eb:
47:6a:b1:f2:59:ab:d3:80:97:95:2e:ac:a1:5f:1b:
24:82:72:d6:01:64:6d:4e:97:41:9f:49:75:6c:d7:
68:5b:49:ad:2c:fe:2f:5b:0d:f7:0a:29:36:11:22:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:08:EF:20:F2:78:C0:E1:18:29:65:E4:73:E0:7F:EE:21:97:CA
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:3d:c9:89:22:43:47:d8:5c:62:81:82:05:dd:d1:06:b3:
b7:29:c3:66:f0:3b:05:4f:0f:d1:d1:f2:88:40:bb:27:65:69:
d8:40:6f:0f:5a:07:47:cd:4a:d3:d7:41:52:0a:38:7e:c2:3f:
36:1d:36:61:ee:7a:09:6e:7f:4d:04:63:a0:31:f9:0e:99:7d:
38:fe:3b:61:6b:c2:ff:7d:e2:f4:6d:8a:a9:95:2d:89:42:48:
d7:7f:2a:cd:56:55:61:f9:bd:6e:5b:23:c6:42:b8:b1:c3:68:
61:89:96:30:fa:34:2f:a1:fd:32:10:99:7b:6d:ac:a1:23:3a:
2c:fe:48:7c:fa:73:bd:28:4e:84:a0:be:af:32:bd:bf:0d:94:
a8:da:fd:be:61:95:ea:77:cf:11:00:72:19:f2:28:6b:d6:f9:
66:a4:0b:4e:cd:b8:fe:03:77:e1:67:18:c4:13:65:bf:05:43:
44:1f:49:e7:5e:f4:04:a8:59:d7:aa:7a:91:07:7b:e7:60:1c:
b1:ac:58:29:20:a6:08:e9:62:40:70:64:fc:38:94:a7:26:cf:
0e:21:13:5d:b9:40:eb:4a:21:cc:85:d7:06:65:95:5d:6b:10:
e4:05:39:bc:62:91:06:cc:ec:f6:0f:4d:f0:f7:af:db:e9:0b:
6a:38:4b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYWxvyrpK5rl2MuGfQizBtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjUwNDA4MTkwMTAxWhcNMjUwNDA5MTkwMTAxWjAzMTEwLwYDVQQD
EyhiODU5MDhlZjIwZjI3OGMwZTExODI5NjVlNDczZTA3ZmVlMjE5N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFGDq7h3RVp2tLAhmDqDKyTxl57A
ruekFV2t3IfpHGBJV070UvskU0SraclqOVS3kIeWVNVnRWZ/uxI3FE1YL61IovZQ
m1AckEqeOTaC9Id3kZKAhGZdF5bjybUvJespjSwEIUqxetVQznjSjfcugtOIKg/3
ItC844hFpB+++CVi2KExrolnKTh3R2HxZ/8urANDN8e1W9hd5YU5u9mKRsSWzjkM
z7MTm7vTum2xhlXp6BkiR/EEz/ixE5Ci8SE+1OH/qRt+iJNgS1IsxtBfGetHarHy
WavTgJeVLqyhXxskgnLWAWRtTpdBn0l1bNdoW0mtLP4vWw33Cik2ESLPlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhZCO8g8njA4RgpZeRz4H/uIZfKMB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSE9yYki
Q0fYXGKBggXd0QaztynDZvA7BU8P0dHyiEC7J2Vp2EBvD1oHR81K09dBUgo4fsI/
Nh02Ye56CW5/TQRjoDH5Dpl9OP47YWvC/33i9G2KqZUtiUJI138qzVZVYfm9blsj
xkK4scNoYYmWMPo0L6H9MhCZe22soSM6LP5IfPpzvShOhKC+rzK9vw2UqNr9vmGV
6nfPEQByGfIoa9b5ZqQLTs24/gN34WcYxBNlvwVDRB9J5170BKhZ16p6kQd752Ac
saxYKSCmCOliQHBk/DiUpybPDiETXblA60ohzIXXBmWVXWsQ5AU5vGKRBszs9g9N
8Pev2+kLajhLtg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:04:56 2025 by rpki-client