Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: RZ34DeXQzQQqttedNDsmYzrlWWdnKl2VL6MEnYedIgA=
Subject key identifier: AF:DF:92:1F:39:06:3E:80:0A:67:A8:20:BA:4F:D8:6C:6E:D0:BF:5A
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01988BEA34AAF69C9C4F9A733DE68ED73DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 112D
Signing time: Fri 08 Aug 2025 23:00:38 +0000
Manifest this update: Fri 08 Aug 2025 23:00:38 +0000
Manifest next update: Sat 09 Aug 2025 23:00:38 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: aKClqrUznugiHGtOpPf/F3am/mfd/ucae02xdz7Yq60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:34:aa:f6:9c:9c:4f:9a:73:3d:e6:8e:d7:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Aug 8 23:00:38 2025 GMT
Not After : Aug 9 23:00:38 2025 GMT
Subject: CN=afdf921f39063e800a67a820ba4fd86c6ed0bf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:db:9a:79:09:c4:19:7f:b7:30:01:dd:ae:
10:61:a2:7d:ec:b3:7c:60:78:1d:ae:9c:a8:fa:b2:
8a:0b:6f:c7:0c:8e:e8:e3:fe:40:50:a4:f5:18:4e:
35:b0:36:64:41:f1:c5:7b:aa:eb:2c:4c:d9:2a:15:
38:8d:28:5b:2f:de:b6:25:5a:28:15:1f:58:7d:57:
38:70:69:d1:70:7d:7f:cd:53:a6:51:a0:3e:f2:38:
d3:84:6c:0f:db:e0:72:ea:64:52:52:a8:0b:65:ab:
74:d5:62:cf:4f:56:1e:bb:36:c8:4c:b0:d8:3e:df:
00:d1:c0:b3:25:9c:5a:65:80:ae:5a:40:03:18:3f:
83:05:87:89:7c:6c:5f:c9:75:0f:6b:40:e3:72:46:
f7:52:7f:ad:aa:76:ae:9a:90:48:cb:9e:62:c1:78:
c3:6b:40:af:19:23:f6:50:09:1e:03:0e:77:e3:69:
06:5f:d8:f8:ff:32:85:06:fb:0d:f5:db:43:d0:0a:
71:22:d7:53:cd:81:84:3a:63:0c:82:e9:a5:5f:49:
6b:55:3a:c6:a2:80:ef:8f:18:b0:5c:67:f6:2c:52:
20:18:97:1c:5b:79:eb:20:f3:05:5d:a1:f1:58:55:
4d:51:14:d1:a5:a6:3d:39:eb:9a:1e:5b:2d:0c:0a:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:92:1F:39:06:3E:80:0A:67:A8:20:BA:4F:D8:6C:6E:D0:BF:5A
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:64:ef:a8:26:b4:fb:74:21:bc:32:de:ce:3a:c0:33:87:86:
d1:6e:67:17:18:92:e4:9b:47:7a:09:f2:3f:ac:c3:a8:c3:d0:
a8:fa:56:96:0d:3d:37:4d:7c:84:46:42:67:4c:f8:7c:a4:9d:
b0:a3:46:58:9b:d4:8c:fa:10:af:80:3c:30:75:9a:b9:7d:34:
d9:70:66:67:58:f2:9b:65:9f:ef:39:98:b2:74:4a:f3:5c:3a:
52:4e:56:4b:64:39:b2:19:15:8e:df:6b:33:f5:fa:a7:f4:f6:
18:09:88:1a:61:dc:8d:61:cc:19:6b:0b:a3:63:e8:ec:96:ae:
3a:00:c7:96:83:2f:7a:70:2c:cd:ac:59:5f:59:e3:51:bc:a1:
e2:14:7f:56:1c:c1:71:4f:0d:47:22:e8:4d:56:92:4f:52:8d:
74:5a:4b:ee:2a:a6:32:5f:c7:ab:f7:f4:41:c5:8d:0b:b8:69:
d2:33:e3:63:49:8d:2d:bb:e6:fc:38:15:b6:3b:d5:40:b5:df:
40:bd:e2:0c:2b:5d:c3:b1:71:f3:fd:e8:79:bd:06:87:6c:59:
39:ad:51:e9:4b:e7:ba:9d:a4:3b:b9:d3:82:52:b5:e3:55:73:
a2:aa:f9:32:74:c8:70:de:1e:69:8b:0b:1f:50:c9:f7:4a:f8:
e4:90:89:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6jSq9pycT5pzPeaO1z3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy
NGU2YTYwHhcNMjUwODA4MjMwMDM4WhcNMjUwODA5MjMwMDM4WjAzMTEwLwYDVQQD
EyhhZmRmOTIxZjM5MDYzZTgwMGE2N2E4MjBiYTRmZDg2YzZlZDBiZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUvbmnkJxBl/tzAB3a4QYaJ97LN8
YHgdrpyo+rKKC2/HDI7o4/5AUKT1GE41sDZkQfHFe6rrLEzZKhU4jShbL962JVoo
FR9YfVc4cGnRcH1/zVOmUaA+8jjThGwP2+By6mRSUqgLZat01WLPT1YeuzbITLDY
Pt8A0cCzJZxaZYCuWkADGD+DBYeJfGxfyXUPa0Djckb3Un+tqnaumpBIy55iwXjD
a0CvGSP2UAkeAw5342kGX9j4/zKFBvsN9dtD0ApxItdTzYGEOmMMgumlX0lrVTrG
ooDvjxiwXGf2LFIgGJccW3nrIPMFXaHxWFVNURTRpaY9OeuaHlstDAoFJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/fkh85Bj6ACmeoILpP2Gxu0L9aMB8GA1UdIwQY
MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut
ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1
LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2TvqCa0
+3QhvDLezjrAM4eG0W5nFxiS5JtHegnyP6zDqMPQqPpWlg09N018hEZCZ0z4fKSd
sKNGWJvUjPoQr4A8MHWauX002XBmZ1jym2Wf7zmYsnRK81w6Uk5WS2Q5shkVjt9r
M/X6p/T2GAmIGmHcjWHMGWsLo2Po7JauOgDHloMvenAszaxZX1njUbyh4hR/VhzB
cU8NRyLoTVaST1KNdFpL7iqmMl/Hq/f0QcWNC7hp0jPjY0mNLbvm/DgVtjvVQLXf
QL3iDCtdw7Fx8/3oeb0Gh2xZOa1R6Uvnup2kO7nTglK141Vzoqr5MnTIcN4eaYsL
H1DJ90r45JCJGA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:55 2025 by rpki-client