Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: P58J8NT+LC/R/CAht8zW2plNpymWyeQWNWFxon6hnYs=
Subject key identifier: C2:6A:36:30:E2:09:03:8E:EC:CB:7D:AD:52:A1:FC:8F:30:DD:CB:AD
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01994EF6EF522E9CA38F8AFCC2B4D2EDA2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1192
Signing time: Mon 15 Sep 2025 20:00:29 +0000
Manifest this update: Mon 15 Sep 2025 20:00:29 +0000
Manifest next update: Tue 16 Sep 2025 20:00:29 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: aKFjzkgLlQuSLXxiyF489QTQM6a+r5nzzg+kXeWFN8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:f6:ef:52:2e:9c:a3:8f:8a:fc:c2:b4:d2:ed:a2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Sep 15 20:00:29 2025 GMT
Not After : Sep 16 20:00:29 2025 GMT
Subject: CN=c26a3630e209038eeccb7dad52a1fc8f30ddcbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:c0:f7:ef:f9:7c:d3:aa:8a:b7:b0:7c:b2:
49:47:96:20:af:63:c7:df:17:0d:72:b9:4a:36:6d:
32:0f:cd:e6:d4:d1:0f:34:5d:c6:41:2f:f3:63:21:
99:6c:11:b3:c6:81:7d:ee:16:cf:65:85:71:19:e4:
a0:49:f2:cc:ac:d7:d4:39:e8:fb:17:d9:22:49:58:
c0:0e:8d:67:18:6b:d6:0f:f2:f0:2c:bd:cd:fc:60:
c4:90:a4:c0:15:47:2e:61:49:2a:9c:b0:5c:28:12:
d0:5e:de:b5:25:c1:17:32:2b:fa:f7:18:f8:30:88:
d7:15:60:9e:dc:0a:1a:55:74:3a:d4:cc:e6:09:df:
96:73:b3:98:a0:ff:89:53:70:85:c2:ae:4a:d0:c5:
7d:c3:7a:8c:0e:75:67:5e:79:21:d2:5b:28:29:d1:
2d:79:17:17:fd:b9:3f:64:be:03:1a:b4:73:c1:52:
ae:e3:4e:5a:a9:f6:e3:45:f1:79:fc:bf:a1:d9:73:
b9:4d:b8:c5:eb:66:4c:8c:10:39:48:3d:a5:d5:33:
80:33:26:45:86:98:0e:f4:95:04:0f:95:42:fc:0c:
34:87:de:0e:96:b9:58:eb:d7:f6:66:4a:1b:1c:9b:
4b:58:e5:9d:48:a2:96:3e:28:b1:9c:3a:a1:99:99:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6A:36:30:E2:09:03:8E:EC:CB:7D:AD:52:A1:FC:8F:30:DD:CB:AD
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8a:2a:fc:b8:a8:01:3e:40:a6:6f:31:21:07:03:8a:5c:83:
5e:e0:86:e0:8d:cf:c8:8d:6d:a4:b1:83:3d:a3:6c:9d:7e:9d:
5a:1f:d8:f0:59:b5:38:0e:6b:50:da:0d:1f:3b:cb:a1:36:d5:
a2:13:a2:68:40:80:1c:74:0b:2f:ce:3e:eb:47:18:2b:e3:0d:
0d:6c:84:1f:af:23:5a:8d:36:78:85:21:01:9a:d8:6a:9d:0c:
53:cd:86:96:1e:2e:a8:c1:88:09:5d:56:6c:75:d0:25:59:c7:
a4:a2:6d:6a:c4:d3:a1:40:e1:02:05:05:75:7d:32:c5:d1:e6:
5b:ad:2d:ac:8d:c5:e5:18:45:3d:f7:d7:03:75:06:a0:df:2e:
aa:db:1b:03:f8:a8:c3:20:2e:55:6e:83:e6:b4:5c:9b:28:5f:
c7:51:48:d6:70:26:71:6b:42:57:59:ba:cd:c8:9d:bd:aa:a5:
5d:4e:84:91:fd:d6:48:ea:8d:b8:47:b7:41:1a:d0:a1:d2:c0:
32:e4:86:4b:c8:91:40:22:68:f3:ae:3a:3f:d3:8f:e2:ed:62:
70:9b:17:57:06:09:1f:15:da:63:42:c0:2c:f8:71:67:89:82:
07:e1:6f:3f:06:30:cc:e4:46:86:0e:9a:cf:b5:b4:5c:57:b0:
6e:b2:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 00:09:10 2025 by rpki-client