Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: cGHWI5nb7ChR2Qu5ssMPiDvXOrL1yiN62Yk2mDJrwKI=
Subject key identifier: 75:15:EC:F9:6A:97:62:57:C9:31:B2:0D:17:64:06:D3:2C:78:F6:3C
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 0196865B7692F864EF590BE06BBA14DC6D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1021
Signing time: Wed 30 Apr 2025 11:01:03 +0000
Manifest this update: Wed 30 Apr 2025 11:01:03 +0000
Manifest next update: Thu 01 May 2025 11:01:03 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: Dn5x5bbOFcUkNmca0HD6+ZDOJ/YBAfN/TUVvK+2PwhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:76:92:f8:64:ef:59:0b:e0:6b:ba:14:dc:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Apr 30 11:01:03 2025 GMT
Not After : May 1 11:01:03 2025 GMT
Subject: CN=7515ecf96a976257c931b20d176406d32c78f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:46:e2:b2:d8:17:c5:6a:e1:cf:6d:b3:5b:
50:49:94:d3:dc:3b:16:a1:7b:f9:09:92:40:5c:22:
d2:37:52:11:a8:ea:a5:2e:64:0a:98:b3:1b:76:84:
dc:9b:1e:4f:36:65:03:dd:2c:4a:a0:26:e8:82:58:
4b:e6:2b:f5:76:ef:28:67:70:de:40:80:ba:f2:71:
0d:4f:2a:23:bd:11:4c:86:f7:4e:9f:eb:9b:bd:34:
d1:53:9b:fe:25:86:a6:65:b9:b9:3c:db:52:50:00:
3e:85:ac:7d:e9:e6:a2:fc:06:f1:ae:30:c1:50:5f:
52:db:84:16:43:5e:ae:50:ae:71:75:aa:99:c2:b6:
b7:ec:07:fa:41:b6:cc:0e:4a:b9:05:c6:cd:d3:1a:
85:17:f7:d7:87:61:1a:bd:b8:4b:99:79:2b:f4:df:
50:f9:cd:7e:3d:a6:0f:1e:f5:75:14:85:c0:53:f7:
f7:d6:dc:6b:57:fd:83:7f:1f:cb:7b:1f:90:c4:7c:
41:f0:7d:31:21:7c:c3:f3:df:c3:00:1e:64:8b:2d:
bf:39:d7:4d:9d:83:c8:c9:d8:e9:0d:66:fd:e4:ae:
c8:f2:3a:de:55:a3:88:3a:5a:38:76:d8:fb:0d:d4:
71:e7:f9:a4:3d:14:83:da:11:06:74:7c:49:6c:2f:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:EC:F9:6A:97:62:57:C9:31:B2:0D:17:64:06:D3:2C:78:F6:3C
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:87:69:53:ea:10:62:f7:13:84:7b:b8:65:93:0f:e0:5a:60:
63:d2:67:6d:4c:61:f0:71:da:a8:82:6b:38:4b:09:9d:55:fc:
ae:a2:4d:3f:6a:08:25:2c:42:42:5e:cd:2b:ad:68:2d:78:59:
6a:04:a8:38:01:1a:61:22:6d:f7:0a:fa:5d:20:3c:31:66:8b:
ee:f1:92:46:2c:b7:d9:d3:95:f7:1a:b1:2c:99:30:3f:f2:96:
7e:8d:ba:f8:72:75:a9:ee:94:c9:b5:3b:82:cc:e2:b3:66:30:
7d:0a:f7:4d:21:0a:d0:0a:8d:68:2f:25:ae:c6:70:4e:6f:5d:
db:56:0e:fc:ca:30:ec:11:69:1a:7d:89:e9:ca:da:8c:f5:21:
be:a1:40:a5:2f:bc:1e:ac:f8:d4:ae:90:ef:63:8a:db:de:3e:
32:35:77:ff:a1:f4:a5:08:d2:15:09:7a:f2:a4:bf:65:e8:c9:
82:1b:9b:ba:41:c1:bb:ee:fa:a3:d4:ad:94:03:23:66:80:a6:
05:c3:e9:6c:5d:35:68:fe:d2:94:7d:3e:a4:aa:3e:11:98:bf:
37:d1:48:31:12:75:2d:17:30:3d:80:a1:9f:d4:d2:4f:28:31:
e4:17:9d:db:03:64:98:40:50:c3:15:a9:15:71:e7:39:a2:2c:
60:ff:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:19 2025 by rpki-client