Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: LswEr3o8ua1cs5xmDCpjsTW0BcmRBHWX/XCVe+/xplY=
Subject key identifier: 00:B6:D1:60:98:28:31:F6:E5:BE:FB:82:15:5C:BE:BF:6D:F8:B8:6D
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019A729407A917BA3A981E1CE6240B62F865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1229
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: UHu3zmWw02GPb3pEiAw43PIZxPnffQ7tURDM15lUvEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:07:a9:17:ba:3a:98:1e:1c:e6:24:0b:62:f8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=00b6d160982831f6e5befb82155cbebf6df8b86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:f6:c0:c6:5c:7d:5e:86:d0:32:1e:1e:4f:
7a:32:68:17:23:85:49:f3:01:79:48:7b:66:d2:48:
28:24:b3:46:d3:ae:f7:ac:57:46:4d:d0:74:00:0f:
31:b9:e0:8a:78:d6:d0:e7:52:1f:b6:a3:3f:a3:f3:
00:4f:2c:77:7b:4d:b8:5a:1c:ac:27:89:5d:46:b1:
1e:9b:ec:56:f5:16:56:cc:04:e3:d6:e6:a9:92:bd:
31:d6:b7:a7:ca:69:6d:a8:e7:b2:c0:a7:d9:23:5f:
bd:ef:87:30:ec:c3:25:ac:38:1b:4d:04:ff:8a:19:
9c:31:75:62:18:89:45:d8:de:c8:76:95:d3:65:10:
a9:b4:a6:56:70:3e:07:88:49:22:dc:89:88:8a:f5:
db:1a:02:80:73:1d:f6:a2:f9:84:c9:18:fc:80:b5:
6f:50:58:88:fc:5e:4a:18:22:6b:4c:a8:f5:c6:3d:
90:58:6c:7d:9c:eb:3e:12:f8:14:7c:b6:64:a3:e9:
ec:13:91:0d:cd:e3:b9:5e:57:15:5a:c2:97:00:18:
2e:8a:34:46:d4:ac:00:e6:52:98:da:d5:22:a0:a5:
79:35:7a:6e:be:9b:a3:74:c5:4e:92:9c:f5:94:3c:
61:6f:4f:aa:87:e9:47:95:0a:94:53:d9:69:ed:8d:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B6:D1:60:98:28:31:F6:E5:BE:FB:82:15:5C:BE:BF:6D:F8:B8:6D
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ac:e8:f8:75:c3:f8:b6:4a:3b:1e:89:35:46:cd:44:05:02:
ed:48:94:ca:38:3c:8d:ab:92:6f:74:a5:67:e1:a2:dd:72:d0:
1a:fb:e7:55:24:d8:1a:8d:57:5a:02:b9:86:23:6d:56:8b:69:
ba:17:ed:cf:14:4f:e8:a0:e7:fa:9c:71:1a:db:ab:9b:81:0a:
3c:da:ea:54:09:ba:31:c2:fc:5c:0e:f2:f4:37:8e:8c:24:d5:
03:45:14:39:d3:84:46:e0:aa:f9:b1:e8:c9:2e:8c:88:93:e7:
44:fd:1f:25:0c:23:a4:1f:99:52:7a:fb:f3:17:b8:8f:32:a3:
b0:22:af:3d:6e:36:74:77:d1:8e:f3:4a:a5:94:4a:90:64:23:
fa:51:4f:bf:d7:86:d2:73:33:f4:f2:e9:27:24:0a:5e:cf:05:
35:f4:fb:67:8a:7f:77:74:6b:a5:b4:80:d4:52:89:78:80:fa:
8f:e3:75:f7:6c:0f:e8:21:55:7e:22:5a:4c:52:3f:3b:56:0b:
7a:c6:21:44:1f:51:01:6d:9f:74:67:bd:47:50:0a:57:9f:9b:
21:3b:fc:a5:1a:09:38:7d:b9:d0:62:6a:d1:a9:33:f3:cb:a7:
21:7a:3a:36:3a:e8:ea:5b:d4:b7:1a:70:c2:41:74:87:da:40:
7c:8f:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client