Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier: Wah37BdL86dprTLPVZd8t/HTJDLhyQywHa4HEOYFpPQ=
Subject key identifier: 85:B9:10:98:BB:C8:DA:BE:AD:D2:AE:70:48:13:07:D2:AB:D7:6D:EA
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer: /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial: 019A71B8143F240A2517675E59617F7AC157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number: 14EA
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: 8wWnJ3aDgD42OYWee8lpdIfwM4Y5U//t4m1kDb5hDA0=)
2: JfosHD6swZBELA7-1SokhINwqBU.roa (hash: uhtEt5y7g2W8E2mV9p4HzdrhOCyliMGIoFOc3pDAegw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:14:3f:24:0a:25:17:67:5e:59:61:7f:7a:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=85b91098bbc8dabeadd2ae70481307d2abd76dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f0:72:e5:21:87:2a:9e:fe:2c:11:05:79:37:
e0:ca:b4:7c:f9:f6:a8:11:35:75:ac:cd:e0:77:60:
94:9c:25:ed:7e:7d:8c:ce:40:3b:80:e5:b0:33:cc:
36:d5:5a:79:38:4b:30:0d:cd:26:f7:cc:eb:5f:50:
ca:27:22:e1:64:4d:7b:ff:58:2f:c7:4d:ed:f6:ea:
2c:ac:c3:c2:8e:da:fd:86:54:ea:73:4d:d7:34:c8:
cd:e8:0d:4a:d3:65:aa:b5:0f:7f:cc:05:4e:77:fe:
fb:80:a1:f7:a9:b3:60:ff:3e:7a:77:7b:e1:1b:59:
bf:e4:aa:b3:a5:6f:94:8c:77:00:a6:bc:32:4d:ad:
0e:e8:4e:16:24:54:d8:2c:50:a5:49:e3:d1:9f:e7:
3c:d0:91:ab:d8:90:4c:11:f9:cb:3d:e0:58:ed:f4:
56:81:f7:7f:26:ba:10:be:58:f7:40:bc:bb:ef:df:
2a:90:b9:29:37:78:c4:5c:8c:e6:88:d1:d2:b2:7a:
b8:f1:71:ef:f8:ab:6f:e5:0b:68:09:30:fb:e1:e8:
c2:26:86:5f:46:be:08:08:d5:de:df:e8:42:f4:2e:
90:28:91:bc:9f:36:85:25:16:50:c0:da:22:cb:cc:
e4:44:4c:b4:04:4f:87:28:cb:d3:63:01:e6:90:1d:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:10:98:BB:C8:DA:BE:AD:D2:AE:70:48:13:07:D2:AB:D7:6D:EA
X509v3 Authority Key Identifier:
keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4a:a7:6a:21:c8:87:8e:60:7a:e4:91:51:15:0a:cf:ea:4d:
da:12:7f:8a:9b:24:ce:c2:4e:65:2c:7a:ec:e1:40:f7:bb:7c:
92:21:6e:b7:2b:b9:0c:35:a4:e9:cd:c6:16:6d:c8:d4:24:d0:
8e:f3:b8:60:3d:ce:23:3f:86:60:8a:96:5f:2f:7e:6a:44:ae:
d9:5c:c8:95:9f:3a:c7:8b:83:5c:d1:69:1c:d3:7f:c8:1a:c3:
07:06:d8:0a:9e:94:b0:c8:70:35:c0:5b:14:7c:e2:0f:b2:0f:
2a:9f:2f:e7:94:f7:97:b2:e9:9a:2c:11:e6:34:c4:24:27:69:
38:51:6b:4f:24:25:e3:19:62:59:5e:d3:8b:c3:5a:26:27:56:
d1:bd:47:c9:96:7f:72:5a:8c:9a:36:8c:b5:a4:fe:c3:1b:db:
ed:64:b0:ff:65:36:ed:0f:d6:47:2b:0c:cb:f4:05:46:6d:97:
3e:c1:34:d2:7b:56:a3:7d:73:a3:e5:2c:6b:4c:88:76:36:58:
ba:6a:b5:23:73:91:eb:8d:8f:63:69:a1:6d:f9:2a:81:f8:5c:
b8:87:42:76:4b:02:13:4b:d4:e1:8d:85:60:b1:00:3a:27:39:
66:dc:d6:40:15:51:e2:ac:7a:60:6c:37:34:fd:b6:0f:6b:5e:
ec:b6:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client