Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
File: coYn-VAmUUtCZUBY9J7rm3xI8CA.mft (raw, json)
Hash identifier: kg0zLFSKIB2Mz+alfdEI3tN4lPcsmwpJ6fdXpOVTEMk=
Subject key identifier: 6B:06:32:01:94:78:E2:04:4B:CB:C0:4B:57:AC:28:0B:AB:E2:98:1F
Authority key identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
Certificate issuer: /CN=728627f95026514b42654058f49eeb9b7c48f020
Certificate serial: 019A522CD978A9D77414373EEB5B560F4826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
Manifest number: 0428
Signing time: Wed 05 Nov 2025 04:01:02 +0000
Manifest this update: Wed 05 Nov 2025 04:01:02 +0000
Manifest next update: Thu 06 Nov 2025 04:01:02 +0000
Files and hashes: 1: 4q5L0T8IzmyOi7UmyokrDZ0n7yo.roa (hash: rKsZoGXihCrThcqNeLgDUuHM1BM1DfS8QEjoysPba8A=)
2: GV_0uBo9U-qXTNCsZ-0ommJTyoU.roa (hash: opWXn12DJLh2jYPAXbqu6bXDVmWJk2qaChEIKh6x3kw=)
3: coYn-VAmUUtCZUBY9J7rm3xI8CA.crl (hash: IHL4YkapZFsNDChQX6VPe1qp44SDaXcVvk58i62dn6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d9:78:a9:d7:74:14:37:3e:eb:5b:56:0f:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728627f95026514b42654058f49eeb9b7c48f020
Validity
Not Before: Nov 5 04:01:02 2025 GMT
Not After : Nov 6 04:01:02 2025 GMT
Subject: CN=6b0632019478e2044bcbc04b57ac280babe2981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:6f:1b:8c:cf:f6:1f:e9:c1:3d:4f:58:29:
96:16:2d:49:4e:cf:22:8e:25:c9:d4:ee:2e:05:e9:
22:68:33:41:df:59:1b:2b:23:0e:0b:77:41:95:02:
52:91:03:04:02:b6:b1:ce:4f:9c:ec:fc:8a:bb:f9:
f0:6b:0f:ef:44:a2:74:fd:ac:c0:3a:a1:7d:2e:ef:
3c:f0:8e:fa:af:8c:f7:32:33:71:9f:39:28:f7:ad:
20:7e:3f:a1:fb:57:d0:a4:68:4c:5b:61:50:3b:7e:
98:25:7f:4c:e9:5d:58:42:36:ea:33:6b:26:68:8d:
af:88:96:63:e1:29:f3:f9:b6:a5:e3:15:08:46:03:
09:7d:b4:53:b6:cf:84:96:62:f5:c6:4a:e1:a1:cd:
9e:ad:35:4b:f0:93:90:f8:07:75:62:9c:6e:2d:15:
3e:f3:3b:6c:e9:fe:9e:50:7f:f6:2b:28:46:be:24:
17:be:e8:15:47:17:76:c1:b1:fa:6e:3b:25:df:8d:
a9:e5:74:97:02:d2:fa:8d:b7:6a:0c:64:72:29:71:
bb:61:9b:60:6e:dd:1d:1d:4c:c3:3c:38:c1:54:45:
67:23:e7:61:f2:4e:bd:fa:b5:5e:c4:5a:dd:c5:36:
da:03:70:f5:58:e6:9f:ae:5c:b2:3c:70:64:05:16:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:32:01:94:78:E2:04:4B:CB:C0:4B:57:AC:28:0B:AB:E2:98:1F
X509v3 Authority Key Identifier:
keyid:72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fd:40:0d:e3:be:40:d8:0e:ba:d7:a1:ce:b2:22:49:2e:0f:
8a:36:4e:38:eb:cc:e1:ce:39:50:41:a0:c2:8a:14:02:41:7a:
7b:67:f9:a3:6a:2c:61:a3:a1:50:21:7b:77:03:aa:a7:02:d3:
16:cf:f2:a0:d3:f9:89:fa:78:8e:ce:18:e9:bf:51:54:54:3e:
55:a1:ad:cd:84:fa:9c:f7:53:bc:cf:fe:04:16:57:63:a8:26:
87:e5:e0:65:9d:b8:25:51:5e:18:07:db:b9:35:2d:1b:4f:d8:
46:f2:83:5a:79:14:94:28:ad:fe:6f:cd:02:1f:65:ee:0f:eb:
26:8a:ec:89:c2:5f:5c:41:67:c7:80:8f:4d:14:73:6e:4c:3e:
d4:36:5c:f6:70:08:2e:ad:51:ca:bf:29:25:e2:c0:46:cb:d5:
ec:7b:4b:ed:5a:70:e4:90:73:c2:83:f4:74:55:c7:00:a4:75:
ad:46:69:80:46:9e:b8:f5:12:cc:70:8f:95:a9:80:69:01:10:
c6:77:87:3d:32:99:2a:7b:00:e8:7e:ff:99:83:8b:ff:5f:95:
03:3a:d8:80:98:b0:62:4b:43:15:c7:9f:ac:8d:b5:cb:09:e4:
c2:bb:c8:4e:ae:fa:33:19:94:8d:88:7d:44:f9:d4:d5:25:7c:
17:12:a4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLNl4qdd0FDc+61tWD0gmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODYyN2Y5NTAyNjUxNGI0MjY1NDA1OGY0OWVlYjliN2M0
OGYwMjAwHhcNMjUxMTA1MDQwMTAyWhcNMjUxMTA2MDQwMTAyWjAzMTEwLwYDVQQD
Eyg2YjA2MzIwMTk0NzhlMjA0NGJjYmMwNGI1N2FjMjgwYmFiZTI5ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLJvG4zP9h/pwT1PWCmWFi1JTs8i
jiXJ1O4uBekiaDNB31kbKyMOC3dBlQJSkQMEAraxzk+c7PyKu/nwaw/vRKJ0/azA
OqF9Lu888I76r4z3MjNxnzko960gfj+h+1fQpGhMW2FQO36YJX9M6V1YQjbqM2sm
aI2viJZj4Snz+bal4xUIRgMJfbRTts+ElmL1xkrhoc2erTVL8JOQ+Ad1YpxuLRU+
8zts6f6eUH/2KyhGviQXvugVRxd2wbH6bjsl342p5XSXAtL6jbdqDGRyKXG7YZtg
bt0dHUzDPDjBVEVnI+dh8k69+rVexFrdxTbaA3D1WOafrlyyPHBkBRYcqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsGMgGUeOIES8vAS1esKAur4pgfMB8GA1UdIwQY
MBaAFHKGJ/lQJlFLQmVAWPSe65t8SPAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTZjZWUtOTAwOS00NThiLWFhNjAt
YjMzYTQwOTdiY2IwLzEvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTZjZWUtOTAwOS00NThiLWFhNjAtYjMzYTQwOTdiY2Iw
LzEvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAP1ADeO+
QNgOutehzrIiSS4PijZOOOvM4c45UEGgwooUAkF6e2f5o2osYaOhUCF7dwOqpwLT
Fs/yoNP5ifp4js4Y6b9RVFQ+VaGtzYT6nPdTvM/+BBZXY6gmh+XgZZ24JVFeGAfb
uTUtG0/YRvKDWnkUlCit/m/NAh9l7g/rJorsicJfXEFnx4CPTRRzbkw+1DZc9nAI
Lq1Ryr8pJeLARsvV7HtL7Vpw5JBzwoP0dFXHAKR1rUZpgEaeuPUSzHCPlamAaQEQ
xneHPTKZKnsA6H7/mYOL/1+VAzrYgJiwYktDFcefrI21ywnkwrvITq76MxmUjYh9
RPnU1SV8FxKkUQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:48 2025 by rpki-client