Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: vJEq2kVCOLmzyEXd7zGmUkcG6Hmdvx2LlCO7fogVldQ=
Subject key identifier: 0B:26:7A:9E:81:D4:1E:CB:05:50:1B:89:42:AC:B6:BB:41:AB:C7:5F
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 0199239F296AD66F2937F34757A74A5AF35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 143D
Signing time: Sun 07 Sep 2025 10:00:57 +0000
Manifest this update: Sun 07 Sep 2025 10:00:57 +0000
Manifest next update: Mon 08 Sep 2025 10:00:57 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: 2YigRHcH6RRlzLymvFjwTHBdxo/ebn6GjWeb2KwY5Ro=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:29:6a:d6:6f:29:37:f3:47:57:a7:4a:5a:f3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Sep 7 10:00:57 2025 GMT
Not After : Sep 8 10:00:57 2025 GMT
Subject: CN=0b267a9e81d41ecb05501b8942acb6bb41abc75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:7b:7c:57:50:60:6d:11:86:99:89:5c:90:
64:fd:a5:ca:9e:7a:ce:83:04:2f:7e:54:48:cb:8c:
6e:63:27:d1:ef:97:0d:4d:81:ff:7f:b7:68:b4:7d:
b1:f0:70:ca:48:93:1c:36:fe:22:de:76:6c:a9:e7:
10:3c:98:e8:34:c3:f8:c7:be:1d:1c:cb:9b:86:b1:
c7:10:d2:bc:7d:73:1c:61:f4:c9:ce:d8:cd:f7:64:
df:3c:28:52:88:8d:73:25:dc:ca:a1:80:f5:a0:47:
16:21:ac:0a:64:07:1f:39:77:63:ba:35:92:11:9b:
27:b4:7e:a1:cd:3c:e1:92:ca:c0:a5:75:36:85:38:
32:5d:67:90:65:02:3f:b6:7f:51:08:ea:10:3f:c8:
81:85:97:a8:c5:a4:ba:9c:b8:92:f7:48:8c:81:37:
17:93:a3:23:19:bc:08:de:be:f8:aa:d4:62:34:74:
6a:b4:40:06:5e:0d:49:8d:06:e5:61:e4:d9:6c:2d:
63:0a:05:14:e9:4d:d0:6b:f7:29:ff:0f:29:6f:cf:
23:76:ba:dd:d8:a5:9b:71:a7:8b:8b:8e:38:56:49:
ef:c7:37:b1:b5:a8:1a:66:3f:06:ae:ec:95:d4:01:
27:f9:1d:bf:e8:5a:90:66:33:c3:ec:d9:77:f3:b3:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:26:7A:9E:81:D4:1E:CB:05:50:1B:89:42:AC:B6:BB:41:AB:C7:5F
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:53:8d:0d:13:ff:6b:7a:69:ef:f5:50:3f:64:b1:00:3e:9b:
c9:65:7c:06:be:04:4c:84:8d:8a:30:45:0c:34:37:6f:50:b4:
0f:86:86:0d:f9:03:47:8a:6b:ea:83:db:76:5b:2c:d6:f5:58:
15:3b:2a:9e:22:51:04:e7:56:ce:21:93:97:97:d6:4a:71:13:
bd:ec:e9:fb:7b:42:33:f1:f2:af:7d:de:7d:af:dc:7c:79:6c:
7d:ea:9b:02:f9:31:d0:42:4a:06:2d:47:19:f0:a8:b3:c8:13:
91:4c:05:9d:44:9d:32:35:a3:32:21:c2:b7:bc:51:c8:ad:b8:
43:ff:0d:f2:0a:fc:73:c8:4a:37:24:f4:6f:b8:8b:33:5c:b3:
67:93:36:aa:fc:e5:42:dd:a3:34:5f:eb:14:7d:8f:61:0a:a7:
bf:65:ee:8d:82:7c:7a:60:b4:25:90:ca:70:5f:3d:5f:0a:59:
60:60:9a:9f:3b:f4:d8:cb:8f:01:d4:ea:aa:82:28:27:b9:9e:
1b:84:e2:28:11:4c:c3:d3:3f:81:b6:89:ad:11:f3:c9:1a:0d:
ba:f2:4b:a6:44:d8:57:30:d4:f6:70:99:0e:97:80:66:08:b9:
88:fd:e7:f1:b5:87:e4:2b:28:90:6a:81:22:bb:4e:c6:81:98:
e3:24:7d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnylq1m8pN/NHV6dKWvNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMmNlN2ZkMmY1YjFiNzk3NTdjODk3M2FlM2Y3YjBiZTY4
NjM4NWIwHhcNMjUwOTA3MTAwMDU3WhcNMjUwOTA4MTAwMDU3WjAzMTEwLwYDVQQD
EygwYjI2N2E5ZTgxZDQxZWNiMDU1MDFiODk0MmFjYjZiYjQxYWJjNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg17fFdQYG0RhpmJXJBk/aXKnnrO
gwQvflRIy4xuYyfR75cNTYH/f7dotH2x8HDKSJMcNv4i3nZsqecQPJjoNMP4x74d
HMubhrHHENK8fXMcYfTJztjN92TfPChSiI1zJdzKoYD1oEcWIawKZAcfOXdjujWS
EZsntH6hzTzhksrApXU2hTgyXWeQZQI/tn9RCOoQP8iBhZeoxaS6nLiS90iMgTcX
k6MjGbwI3r74qtRiNHRqtEAGXg1JjQblYeTZbC1jCgUU6U3Qa/cp/w8pb88jdrrd
2KWbcaeLi444VknvxzextagaZj8GruyV1AEn+R2/6FqQZjPD7Nl387PgfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsmep6B1B7LBVAbiUKstrtBq8dfMB8GA1UdIwQY
MBaAFAss5/0vWxt5dXyJc64/ewvmhjhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMt
YTY0MTA5MTllODk4LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85YWFmMjQtNTM0Ni00NDgwLWJiZjMtYTY0MTA5MTllODk4
LzEvQ3l6bl9TOWJHM2wxZklsenJqOTdDLWFHT0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1ONDRP/
a3pp7/VQP2SxAD6byWV8Br4ETISNijBFDDQ3b1C0D4aGDfkDR4pr6oPbdlss1vVY
FTsqniJRBOdWziGTl5fWSnETvezp+3tCM/Hyr33efa/cfHlsfeqbAvkx0EJKBi1H
GfCos8gTkUwFnUSdMjWjMiHCt7xRyK24Q/8N8gr8c8hKNyT0b7iLM1yzZ5M2qvzl
Qt2jNF/rFH2PYQqnv2XujYJ8emC0JZDKcF89XwpZYGCanzv02MuPAdTqqoIoJ7me
G4TiKBFMw9M/gbaJrRHzyRoNuvJLpkTYVzDU9nCZDpeAZgi5iP3n8bWH5CsokGqB
IrtOxoGY4yR9sA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:17 2025 by rpki-client