Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: CCl0ibpeI5aVs07YOOk9CvlLK+Bau3bRRjc+XAJ96Xo=
Subject key identifier: CA:86:3D:76:59:D8:15:7D:99:97:CB:56:F9:22:30:49:95:F3:65:29
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 0195903CEB1F86A028254007064735050DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 1263
Signing time: Thu 13 Mar 2025 16:01:06 +0000
Manifest this update: Thu 13 Mar 2025 16:01:06 +0000
Manifest next update: Fri 14 Mar 2025 16:01:06 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: h788TNzZxJ5TCBsTJfgV1P/29g5injB0AAMFb9OZONk=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:eb:1f:86:a0:28:25:40:07:06:47:35:05:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Mar 13 16:01:06 2025 GMT
Not After : Mar 14 16:01:06 2025 GMT
Subject: CN=ca863d7659d8157d9997cb56f922304995f36529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:02:d4:0f:39:94:5d:2d:9e:df:59:53:5d:
bc:39:8e:83:f2:45:fe:97:37:f0:10:03:60:8a:8e:
0c:62:d2:86:d7:0e:63:1a:27:b3:00:e3:8f:36:3d:
3c:08:5a:ff:44:5a:bc:56:36:60:2a:87:0a:c6:b2:
17:04:d4:ff:ae:28:27:2f:b7:b0:5d:e1:2f:12:92:
81:90:92:da:7f:23:2c:b9:6f:90:d4:16:54:fd:ca:
5b:fc:46:8b:c4:33:c1:38:28:f8:2e:93:87:00:f8:
c8:f7:c1:45:78:a8:4f:51:f0:ab:1c:0c:e5:fc:8e:
1b:47:9d:b3:36:87:84:8e:c1:a2:e9:f8:62:41:33:
a2:b5:57:e8:e6:7d:db:c7:00:4c:9d:f9:13:18:5d:
fe:a3:2a:43:9b:59:71:3e:ca:39:d1:ad:28:14:62:
86:29:ae:91:16:80:3c:15:17:b6:c9:08:38:38:62:
ea:90:91:72:77:c1:11:16:c0:c6:56:b1:fc:79:02:
c7:2b:e6:ba:67:5f:d1:43:49:de:96:82:7a:96:83:
70:c9:71:0b:c0:87:f3:6a:f7:e4:44:4a:c8:f6:54:
ef:07:85:a6:d7:55:5d:c3:0a:75:f6:af:6f:60:7d:
c8:59:16:d8:1f:de:b7:40:9a:df:c1:da:91:b5:5a:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:3D:76:59:D8:15:7D:99:97:CB:56:F9:22:30:49:95:F3:65:29
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:b4:ed:b1:2f:2f:7d:01:b9:c2:2d:c5:25:ed:03:f9:bd:
70:61:63:f4:7c:49:c2:d9:1c:65:8a:07:a2:2a:81:e7:10:68:
6b:0f:71:37:a7:b4:35:5f:b5:68:24:e2:cc:4b:8d:c4:59:9c:
67:62:34:74:4c:c9:01:9a:b2:b2:8d:59:c6:57:07:c3:8c:b0:
89:ca:31:78:a3:98:3d:19:ab:20:c5:cf:f4:5b:96:78:be:90:
0d:3c:d1:6d:61:25:45:eb:ff:2b:c4:bc:30:c8:f1:49:11:93:
68:72:99:3f:91:a2:0f:36:11:3c:01:51:57:5b:8c:8d:ab:e3:
6a:aa:95:87:54:f3:bc:b2:b0:3d:c6:88:6f:3a:c3:11:e0:a4:
6c:c8:fa:78:43:a7:bf:fc:6a:ff:46:6d:e3:46:87:18:5f:03:
72:bf:65:c6:42:81:bb:c1:a8:a0:e6:2a:d6:98:77:9f:b4:33:
a6:ed:80:6f:ad:f6:6b:7c:32:10:c5:40:c7:c8:e1:07:c2:14:
03:79:14:c6:80:c0:22:1e:7f:e1:03:1c:04:c5:24:f0:92:db:
79:56:26:52:d2:d1:f0:03:5d:03:23:ff:0f:12:ac:1b:72:9d:
f5:e2:7f:ff:aa:28:e9:61:ea:2e:ec:ce:a0:79:4e:2f:e8:30:
e9:cc:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:35 2025 by rpki-client