Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: a2wdCa/pOLJK5geFvRTjSV0DvCwajB+ZuxGOm6Uds+k=
Subject key identifier: D1:FC:1A:B6:DA:15:E6:3F:DE:14:37:F6:0F:60:40:00:97:30:F0:A3
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 01977F7A81F1EC461D0510607CD92A256362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 10A2
Signing time: Tue 17 Jun 2025 20:00:24 +0000
Manifest this update: Tue 17 Jun 2025 20:00:24 +0000
Manifest next update: Wed 18 Jun 2025 20:00:24 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: nnVzece7qLb1xmN61WTDDp/VF4j3TmW6gex0rSImwro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:81:f1:ec:46:1d:05:10:60:7c:d9:2a:25:63:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Jun 17 20:00:24 2025 GMT
Not After : Jun 18 20:00:24 2025 GMT
Subject: CN=d1fc1ab6da15e63fde1437f60f6040009730f0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:dc:d7:ba:91:a9:f0:76:45:29:5f:74:6b:
53:16:7e:58:41:a0:b1:03:53:b8:59:3b:49:4c:75:
5d:a4:6c:f2:49:35:98:4d:9f:e9:cf:17:50:5f:0a:
c2:45:3e:2c:ef:66:a2:f8:9a:8f:ad:4c:41:3c:92:
0c:02:ec:85:b3:f8:80:5a:6e:10:de:5b:76:11:4e:
d5:5c:3f:bb:f3:03:71:9c:ce:cc:cc:c7:18:a0:2f:
e3:6d:37:81:ef:f2:5e:81:20:37:71:eb:76:64:23:
1a:e9:7d:43:18:69:ef:04:e8:51:18:3b:47:d4:62:
49:34:ab:dc:e8:3c:98:5a:fc:01:e1:0e:9a:29:df:
1a:70:4f:0d:3a:f1:32:59:5f:a6:af:5f:e9:c0:a6:
b2:3d:34:84:c0:09:10:61:2b:d4:0f:f6:c2:7f:f0:
d7:a1:14:8e:0b:31:48:be:e5:1a:e5:54:b4:a2:99:
79:da:d1:98:9b:b1:46:00:89:52:34:ea:54:60:39:
8a:6c:0c:8f:50:9e:7a:2e:2e:d5:af:d1:1d:25:2f:
2c:f7:84:7c:19:97:b5:34:76:7f:ae:e5:b5:53:c3:
44:44:a5:c3:e1:e5:7a:47:d4:73:22:ea:70:88:06:
31:af:dd:1b:19:55:d7:1d:c1:44:4d:ac:56:a6:a9:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:1A:B6:DA:15:E6:3F:DE:14:37:F6:0F:60:40:00:97:30:F0:A3
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a7:a8:7a:18:19:b5:f2:80:51:08:8a:69:cf:76:f6:a7:5d:
da:b3:52:c2:5b:4a:3b:d8:eb:bd:e2:1a:a0:57:a8:46:40:86:
b1:3b:8c:c5:dd:c1:be:dc:2e:33:26:73:a1:07:f0:f8:9b:8e:
d6:0b:97:82:fb:ee:06:e1:6b:36:7d:6b:83:ea:9a:94:55:dc:
90:93:fc:b9:2c:e3:e3:cc:78:6d:72:98:31:34:8c:fa:3e:6c:
bf:45:57:dc:9a:d4:0a:2e:6a:60:86:df:fa:ee:9e:de:9c:6e:
a8:c6:fa:49:bf:c8:b5:2f:aa:e4:9d:cf:c2:f4:2c:ad:4b:23:
ed:79:15:66:fa:ac:7b:6b:48:9b:81:95:17:a2:90:be:56:9e:
7f:02:fe:b7:5f:5c:eb:d8:dc:d9:a7:1a:06:d6:22:c8:2b:69:
33:c7:0d:b1:89:d6:ff:b2:56:a1:88:ad:0d:ee:fa:bd:2c:e1:
17:3f:ee:a2:56:62:cb:1b:24:d0:06:f2:34:2d:60:81:1a:d0:
f1:e9:c3:9b:7e:c7:02:d4:24:01:dc:0b:dd:7e:7f:f3:d0:46:
8c:63:f0:ca:ff:59:b7:99:22:a5:0c:23:ef:f1:27:e1:35:b3:
33:64:ce:1a:10:d3:4a:86:ab:1c:9a:6f:fd:ef:14:d1:65:6b:
82:97:f7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:05:02 2025 by rpki-client