Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: Tv5grb2eE/TIyzwvlzVowPsBjL4qKdonZSLpmrSzsjc=
Subject key identifier: C1:16:7A:DB:99:F5:9D:60:28:DE:A2:D6:0D:46:85:73:D0:B6:AB:0E
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01974967C83A5320AD3B594EC82EFCEDC3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1086
Signing time: Sat 07 Jun 2025 08:00:27 +0000
Manifest this update: Sat 07 Jun 2025 08:00:27 +0000
Manifest next update: Sun 08 Jun 2025 08:00:27 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: pZrhJI9y1Dh6SqkYKslu7Zv8Zm+pGgP/qu3y5Jn3GKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:c8:3a:53:20:ad:3b:59:4e:c8:2e:fc:ed:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jun 7 08:00:27 2025 GMT
Not After : Jun 8 08:00:27 2025 GMT
Subject: CN=c1167adb99f59d6028dea2d60d468573d0b6ab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:94:84:a4:9f:3f:2e:49:bd:f9:7b:95:52:
37:69:91:24:35:e7:97:f7:e9:c8:2c:5e:ef:e5:6c:
52:94:cd:d7:97:78:95:4b:d5:05:97:fd:7e:13:b1:
ad:30:e9:a5:0f:ac:78:ef:5e:d7:77:8e:b2:10:19:
47:a9:f5:22:ff:78:2d:5b:1a:27:1d:f0:66:f4:ca:
f1:46:f7:5e:82:dc:84:65:5f:0a:3c:41:39:96:be:
f2:0f:e3:6f:5a:8c:57:7e:ad:d7:25:f0:a1:1e:03:
ee:b6:81:6e:0f:5f:0d:4d:97:c0:08:48:a9:b1:89:
6e:f5:23:69:24:8b:aa:d1:08:75:76:0d:28:00:37:
bc:8a:33:1f:2e:71:5a:7e:00:f3:16:64:24:11:5d:
75:a5:41:c1:fb:22:11:ba:1a:79:ca:88:f8:b8:6f:
0d:41:39:56:18:0b:b9:65:df:7f:38:16:55:66:e7:
17:af:c2:d0:8f:2c:e8:55:4a:63:5f:b6:b6:cb:07:
d1:19:b6:04:cf:eb:c4:82:b8:16:5f:53:cd:d4:0d:
1b:4a:8e:52:cd:6d:a9:03:ea:30:21:78:fa:ef:7f:
c3:99:12:24:59:27:ad:94:5b:c7:5b:fb:c6:5d:b4:
67:73:48:f3:a1:63:88:f5:c2:0f:19:14:4f:9b:1f:
c2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:7A:DB:99:F5:9D:60:28:DE:A2:D6:0D:46:85:73:D0:B6:AB:0E
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:69:fe:63:c0:33:bf:ed:13:8d:6d:e2:c7:25:2d:46:e1:c5:
08:48:cc:91:0d:25:90:c9:3e:f1:57:78:97:ed:5c:04:10:4b:
b3:3c:fa:88:54:79:66:f1:5b:1f:ec:41:4a:7e:2d:96:08:a2:
2d:d4:b7:8a:76:2b:33:c8:c0:ea:56:3b:df:c4:bd:b1:c9:14:
e4:6e:47:c3:6c:ba:5f:d2:52:10:7a:73:f6:cf:ae:d9:81:e0:
5d:61:ad:cc:fc:81:22:64:4f:19:49:74:1b:ba:d5:a0:41:fc:
d5:79:aa:65:59:10:1d:e4:9d:b8:d3:92:1c:07:41:ea:b7:27:
1f:56:68:d4:80:d7:02:97:e3:39:1f:2b:81:58:a1:72:d2:59:
c6:9d:26:a0:8d:d6:c1:29:a2:86:43:c6:0f:01:ee:15:9e:76:
09:98:4d:9b:bd:f6:d4:0d:fd:bc:a0:db:96:aa:d1:51:ef:c8:
b2:13:42:55:d5:18:38:76:b6:15:c0:28:a9:06:59:c6:fb:c0:
6c:a2:11:ef:ed:1a:55:1e:f7:f6:65:81:a5:d6:55:b8:cb:42:
81:62:82:62:cc:68:4a:ce:86:3a:cf:11:44:70:ea:d3:38:85:
1f:85:88:d8:5c:7c:7e:b5:f6:fc:c0:4e:49:14:ca:fd:95:a3:
40:c7:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:57 2025 by rpki-client