Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
File: coYn-VAmUUtCZUBY9J7rm3xI8CA.mft (raw, json)
Hash identifier: sAuIJFX5DrxulhBxScPrl4bib4JcFTF9gESn39Sct4w=
Subject key identifier: 78:C2:22:C5:0C:8B:AE:09:A6:AC:F3:0F:F4:F1:05:CF:23:7C:16:90
Authority key identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
Certificate issuer: /CN=728627f95026514b42654058f49eeb9b7c48f020
Certificate serial: 01965A5E36D28096016D923D1F832BC0C7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
Manifest number: 021A
Signing time: Mon 21 Apr 2025 22:00:45 +0000
Manifest this update: Mon 21 Apr 2025 22:00:45 +0000
Manifest next update: Tue 22 Apr 2025 22:00:45 +0000
Files and hashes: 1: 4q5L0T8IzmyOi7UmyokrDZ0n7yo.roa (hash: rKsZoGXihCrThcqNeLgDUuHM1BM1DfS8QEjoysPba8A=)
2: GV_0uBo9U-qXTNCsZ-0ommJTyoU.roa (hash: opWXn12DJLh2jYPAXbqu6bXDVmWJk2qaChEIKh6x3kw=)
3: coYn-VAmUUtCZUBY9J7rm3xI8CA.crl (hash: wzeZfGQ+G9ZhlXdOX2N4xggqkYgcCVxOsq+WFU3kcok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:36:d2:80:96:01:6d:92:3d:1f:83:2b:c0:c7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728627f95026514b42654058f49eeb9b7c48f020
Validity
Not Before: Apr 21 22:00:45 2025 GMT
Not After : Apr 22 22:00:45 2025 GMT
Subject: CN=78c222c50c8bae09a6acf30ff4f105cf237c1690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:49:4b:d2:b8:7c:fd:81:ac:3b:47:1b:a9:
62:2f:69:26:c6:1c:15:b8:a5:75:7f:3f:b9:da:8b:
eb:f9:9c:82:3c:ee:06:be:11:9b:d4:59:6e:2f:13:
25:8d:db:10:ac:e4:0c:6b:29:75:c4:2e:fb:f8:7b:
e2:4d:f6:c5:30:83:e3:e8:38:74:6b:39:7f:62:62:
93:00:f3:17:24:69:d5:6a:ac:50:03:4e:88:d4:a5:
72:57:7c:c7:4b:b4:fb:5e:aa:a5:34:0a:a1:ba:a7:
c8:8a:b8:77:6c:22:c7:7f:a6:33:10:3c:6a:8d:41:
08:6c:e4:00:fe:0d:ae:56:4f:3e:4b:0c:13:41:19:
b0:3e:89:25:a3:e0:61:f8:ec:3a:66:d5:0f:91:48:
02:a7:ce:4c:2b:a1:cc:64:8b:b3:10:db:9c:8b:de:
02:2a:2a:6a:58:20:68:84:73:ea:b3:ef:75:29:e5:
90:47:d9:c9:d2:eb:55:ef:49:fc:89:62:20:44:5e:
d7:b5:79:89:38:7d:5f:82:c8:b8:2c:bc:c4:d3:d2:
ba:62:ee:25:4b:c9:76:63:a5:91:32:76:de:2a:6f:
6b:a0:c0:a5:f0:ce:5c:49:5e:de:cd:8d:cb:3a:8d:
e9:da:e1:6c:b3:0f:8a:0f:cf:43:e4:fb:94:a2:eb:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:22:C5:0C:8B:AE:09:A6:AC:F3:0F:F4:F1:05:CF:23:7C:16:90
X509v3 Authority Key Identifier:
keyid:72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:81:81:0a:69:e2:b9:39:85:42:09:77:1d:b0:8f:13:a4:
69:6e:da:4e:70:a7:da:0f:75:a5:62:65:c2:2c:aa:39:52:78:
1f:d0:a8:70:aa:a0:a9:6d:7e:6e:da:d5:8e:85:94:4e:52:b0:
23:c7:a9:4b:8a:57:08:b2:f2:74:19:16:73:25:71:79:94:66:
c9:a1:79:8d:93:3a:76:f3:87:47:83:39:be:01:57:b8:d6:fd:
29:2b:54:e1:e5:46:6d:24:59:69:a7:46:79:e9:7a:3d:21:9f:
af:53:ac:59:16:1b:05:ec:53:48:22:ed:30:0a:c8:b3:78:e0:
19:42:f2:97:f1:86:bd:3c:14:40:6c:3f:36:4d:a6:b3:84:78:
80:6c:46:14:05:75:ea:10:3f:05:8b:02:d4:0c:dc:45:d9:f9:
7d:be:1a:76:55:24:d1:22:26:fe:27:bc:8a:05:1a:f6:03:8c:
72:57:c0:7f:a0:f2:c0:4e:24:a5:29:32:09:77:ce:e0:47:ee:
0c:4f:09:45:14:c8:7e:be:2f:bb:93:01:b8:21:24:75:5f:e5:
59:0b:a5:fc:b8:ec:d9:ca:22:2e:a7:b8:ce:82:3c:5f:41:fd:
d9:72:9d:ef:c8:51:35:a9:d8:7b:b8:61:b4:dc:84:5e:bc:50:
43:56:05:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:18 2025 by rpki-client