Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: M7ZETRiE8qZ8pBQ3oYfea19wUTV+yLmvWbmsskQtS2I=
Subject key identifier: 04:AE:F3:66:18:F5:93:06:CE:E0:9A:7D:C1:1A:9D:1E:6D:29:C4:03
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 019A4DE2068D536CA088EF1BB8DBC9D8557A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 1216
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: g2xs/YS3+ZNfXHLa2yKmwXqCMYET3x9X/iu+EEgCEUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:06:8d:53:6c:a0:88:ef:1b:b8:db:c9:d8:55:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=04aef36618f59306cee09a7dc11a9d1e6d29c403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:8a:b0:7e:43:bc:7d:32:a0:5a:67:1c:9e:
30:3d:19:08:2e:30:2b:a9:95:dd:a6:ce:13:01:e4:
61:15:57:06:0c:07:4a:a7:92:e0:a6:9c:58:21:2c:
c2:ce:fc:ae:0b:c1:9e:b0:6f:2c:b6:b2:20:57:70:
5a:d8:ec:9d:8b:79:9c:40:bf:36:28:3b:ca:60:1c:
b8:b7:b5:c2:24:c9:bd:5b:7c:91:8a:43:7d:74:60:
65:b8:aa:33:14:5a:ac:4d:6c:1a:3c:44:18:51:34:
31:41:b9:de:27:ae:db:b5:bd:52:6c:08:64:ac:4d:
8d:fe:63:62:df:93:e3:57:ec:e2:73:dd:76:55:56:
86:32:b1:bc:ba:f4:69:e9:f8:b9:ff:11:1c:f4:39:
a2:2d:0b:29:0a:6e:fc:5c:7a:0d:91:03:bd:50:c0:
87:73:f5:a1:29:b3:d5:99:21:66:60:63:61:6a:93:
fe:7a:32:26:b7:78:77:3a:12:e5:e6:32:25:b8:25:
54:4a:d6:77:c2:f3:7c:cd:c7:54:a1:c6:51:73:91:
b8:db:0c:4b:68:d6:15:fe:c8:46:4c:a9:c2:b8:50:
6c:64:f0:9c:1d:86:bc:aa:be:bd:d7:d2:1e:79:9a:
36:21:12:fb:4e:81:4b:d8:c3:98:d2:24:7a:21:ba:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:F3:66:18:F5:93:06:CE:E0:9A:7D:C1:1A:9D:1E:6D:29:C4:03
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:61:25:df:7c:1c:73:d6:aa:0b:2f:dc:33:34:3e:a7:37:27:
f4:98:c0:cc:ba:46:fe:39:44:99:1e:1d:5f:24:ab:83:d6:fd:
aa:04:2f:69:1b:6c:e0:4d:e4:52:c3:83:6d:66:95:0e:52:81:
78:f9:1d:71:a7:f4:04:33:69:e7:cb:56:dd:ee:fc:f1:9b:dd:
f2:02:3d:9b:d0:63:6a:c4:22:da:96:ed:83:e5:d8:15:8d:35:
b4:26:5a:54:74:fb:bf:4b:f3:50:c6:54:ab:01:74:4d:a7:bb:
bf:b9:fd:70:fb:00:6f:c1:d2:4a:d6:95:60:3a:4b:a2:a1:82:
ff:81:78:b4:54:ca:38:15:7b:27:53:cc:a4:30:ea:b4:4a:1e:
5f:8a:60:51:61:bd:d2:c1:7d:97:44:d8:6d:bd:ba:47:25:23:
62:80:56:e6:f1:7d:79:71:53:3b:ed:5d:21:b7:e4:cd:4a:ff:
dd:c1:45:11:e5:ca:43:b1:a3:45:8f:b3:1c:c9:e8:21:63:48:
e4:57:e8:29:58:ec:ba:60:07:82:ae:dd:8d:4d:b1:ff:3c:b0:
92:44:43:a2:b8:23:1e:af:ce:24:18:34:91:cc:64:b4:23:98:
09:4e:f7:72:1f:da:c5:22:16:e2:0f:c8:7e:79:dd:ee:f3:8a:
f8:23:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:54 2025 by rpki-client