Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: GJ0yNN6pLEbAgeiavASXmUfFX0bki+kSKOOiHtz3kBA=
Subject key identifier: 1B:53:D7:44:43:ED:7B:BE:FB:1C:41:C3:67:9F:08:85:0C:DF:FD:55
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019853E8B91FD6B0D8D1998CD3F44A6EFBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1110
Signing time: Tue 29 Jul 2025 02:00:17 +0000
Manifest this update: Tue 29 Jul 2025 02:00:17 +0000
Manifest next update: Wed 30 Jul 2025 02:00:17 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: rxYxPRFZAx+ROtR3Lp9YQRabeb8auS6aOifSk8qqt+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b9:1f:d6:b0:d8:d1:99:8c:d3:f4:4a:6e:fb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jul 29 02:00:17 2025 GMT
Not After : Jul 30 02:00:17 2025 GMT
Subject: CN=1b53d74443ed7bbefb1c41c3679f08850cdffd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:1a:60:19:27:a4:0b:eb:93:12:91:12:ac:
2a:2c:10:23:49:29:f5:3a:91:e0:da:48:c1:c1:7f:
12:cc:ae:f5:75:71:a0:82:3d:47:3a:5c:b9:52:8b:
3b:9b:1a:e8:3f:fd:fc:43:39:35:c2:24:26:df:c2:
03:0e:5f:e2:ea:7b:c6:6c:9c:9b:07:d2:97:98:25:
dd:e6:2d:26:b3:d4:ed:e0:c4:c0:20:4b:18:ef:ae:
88:88:91:74:9e:9d:1e:51:a2:ae:80:03:cc:20:a3:
e5:e5:ce:4d:94:24:b2:7b:74:74:d6:d0:29:8d:d5:
eb:8d:ed:44:75:f8:7f:6d:87:ef:59:3c:e8:30:0a:
1c:c2:76:10:69:53:a9:0e:af:b9:39:46:48:53:96:
5f:ab:9a:5b:90:68:96:4f:d9:ee:8b:b8:e9:db:98:
2c:b7:b8:52:a1:f8:45:89:d2:1f:b1:9c:0c:16:ca:
06:26:82:80:e3:2c:df:ee:80:40:f4:91:05:7c:c1:
17:ea:40:66:98:c8:db:1e:43:a5:2f:93:ad:7b:3d:
7f:36:2c:10:ab:22:57:85:8a:f8:6d:e3:fa:3e:ca:
a2:0a:35:77:c8:5a:79:ed:56:c8:94:31:d0:cb:01:
73:ac:43:45:41:df:44:55:6f:7e:25:89:b9:a6:a3:
41:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:D7:44:43:ED:7B:BE:FB:1C:41:C3:67:9F:08:85:0C:DF:FD:55
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:27:6f:35:d5:d9:c3:10:b7:f8:90:a0:05:71:63:82:7a:4f:
0e:f1:34:e9:03:74:ec:0f:9b:6b:6c:5a:c7:b1:eb:05:18:98:
de:67:b5:1c:5e:df:41:75:e8:40:eb:f9:88:65:85:e6:96:27:
ee:0f:cd:c0:ca:49:95:e1:bd:12:f6:05:3d:3a:30:aa:19:a9:
f0:ee:42:52:45:06:ab:28:e9:43:a6:92:10:16:e5:c0:55:32:
7b:e3:d5:64:c4:08:66:76:8a:b9:59:55:7f:85:49:e5:b3:4a:
1d:ba:e5:be:db:98:e2:b0:72:a8:9e:82:b3:f7:eb:12:ae:44:
c2:fa:c6:48:ee:e4:84:5a:f3:39:ff:c0:21:ec:19:3a:86:9f:
08:1e:15:f7:49:4f:fb:0d:26:f7:70:77:de:88:41:5b:b4:93:
2e:41:e2:fa:57:7a:f7:d4:9d:dc:36:8e:52:11:39:09:90:8e:
a4:e3:be:72:4f:ee:d7:bc:45:ba:55:31:91:9d:3e:fb:b4:30:
d5:c7:bb:77:0b:9e:e3:54:61:11:7e:32:6e:96:7e:e2:01:d7:
a4:47:bc:8d:5e:62:19:01:31:33:6b:ee:5d:d3:99:ce:5b:0b:
49:d9:03:07:3c:5f:ae:c5:75:66:35:05:72:fe:45:8d:30:5d:
bb:e8:b3:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6Lkf1rDY0ZmM0/RKbvu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy
NGU2YTYwHhcNMjUwNzI5MDIwMDE3WhcNMjUwNzMwMDIwMDE3WjAzMTEwLwYDVQQD
EygxYjUzZDc0NDQzZWQ3YmJlZmIxYzQxYzM2NzlmMDg4NTBjZGZmZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylAaYBknpAvrkxKREqwqLBAjSSn1
OpHg2kjBwX8SzK71dXGggj1HOly5Uos7mxroP/38Qzk1wiQm38IDDl/i6nvGbJyb
B9KXmCXd5i0ms9Tt4MTAIEsY766IiJF0np0eUaKugAPMIKPl5c5NlCSye3R01tAp
jdXrje1Edfh/bYfvWTzoMAocwnYQaVOpDq+5OUZIU5Zfq5pbkGiWT9nui7jp25gs
t7hSofhFidIfsZwMFsoGJoKA4yzf7oBA9JEFfMEX6kBmmMjbHkOlL5Otez1/NiwQ
qyJXhYr4beP6PsqiCjV3yFp57VbIlDHQywFzrENFQd9EVW9+JYm5pqNB2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtT10RD7Xu++xxBw2efCIUM3/1VMB8GA1UdIwQY
MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut
ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1
LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoydvNdXZ
wxC3+JCgBXFjgnpPDvE06QN07A+ba2xax7HrBRiY3me1HF7fQXXoQOv5iGWF5pYn
7g/NwMpJleG9EvYFPTowqhmp8O5CUkUGqyjpQ6aSEBblwFUye+PVZMQIZnaKuVlV
f4VJ5bNKHbrlvtuY4rByqJ6Cs/frEq5EwvrGSO7khFrzOf/AIewZOoafCB4V90lP
+w0m93B33ohBW7STLkHi+ld699Sd3DaOUhE5CZCOpOO+ck/u17xFulUxkZ0++7Qw
1ce7dwue41RhEX4ybpZ+4gHXpEe8jV5iGQExM2vuXdOZzlsLSdkDBzxfrsV1ZjUF
cv5FjTBdu+izmw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:50:06 2025 by rpki-client