Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File: yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier: Ka9odOOgrIttFE+IF7y9njol3Bo9c6e0+3Be45aikAk=
Subject key identifier: 08:AD:00:4B:D6:6C:70:CF:2F:D4:36:80:99:DF:B5:DD:E3:62:B6:7B
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer: /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial: 0199FCC65E3856C0AAFDE4A1C15E11E63CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number: 11EC
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: fpU0x7f24YPyg6CpvAJrPcOQ1WpP2LR5utnIm2NsSVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:38:56:c0:aa:fd:e4:a1:c1:5e:11:e6:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=08ad004bd66c70cf2fd4368099dfb5dde362b67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:d8:69:25:34:02:8f:c3:19:35:6a:99:48:
49:71:ac:6a:a1:2f:00:55:c7:de:50:02:40:dc:dd:
75:75:1b:56:d1:b3:f6:db:65:45:ee:82:20:8b:ca:
98:b2:49:f5:46:c6:1d:42:df:b9:95:e4:60:8b:a5:
90:0d:a5:9d:c7:a1:ed:37:a5:fc:56:87:fa:73:40:
cc:bf:fc:01:3a:23:77:bc:4a:5b:e8:2f:46:fb:68:
34:e2:09:1f:47:68:aa:4b:e2:02:43:6a:ef:76:50:
c9:3d:87:04:b0:c6:36:03:51:a1:7d:2d:22:95:54:
94:50:07:b6:52:1c:1d:e1:8c:29:fa:cf:71:a4:83:
dc:2d:bb:ff:b5:00:63:2a:a4:71:7d:9c:fc:80:7a:
11:d5:4d:cc:db:6d:ba:f7:0b:60:3a:4b:4b:86:5a:
b5:1b:ad:7e:3f:23:03:d4:71:c9:70:3e:04:d5:8e:
8b:af:de:42:02:7c:01:4f:d2:62:ec:1e:23:05:d6:
94:d2:a9:9d:d7:54:d7:31:17:d9:61:55:03:25:0b:
07:c1:ca:1b:65:6e:2f:b4:01:cb:49:23:a1:0f:f5:
13:7a:fd:6b:2d:5f:2a:64:7b:72:cb:d7:82:16:c5:
33:aa:e3:9c:fa:72:21:63:85:13:f6:c0:f0:c6:d9:
01:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:00:4B:D6:6C:70:CF:2F:D4:36:80:99:DF:B5:DD:E3:62:B6:7B
X509v3 Authority Key Identifier:
keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e0:82:c6:f0:42:2f:c4:f8:41:c4:23:b6:93:61:e2:a6:63:
40:aa:98:31:bd:8a:d4:a0:5c:23:b5:b6:a3:07:d9:9e:b3:dd:
4a:6a:e4:cf:0b:24:0d:38:b1:89:d8:76:19:7f:ef:75:df:60:
a7:0a:5b:be:f3:88:bf:66:bf:23:13:3c:bc:55:9a:1f:f0:f4:
39:8a:96:67:f7:16:33:51:15:85:d7:20:9f:a7:92:d6:c5:c1:
26:a3:3c:52:03:d7:a0:a4:68:ed:95:8e:a8:fe:88:d7:c9:81:
2c:d9:37:c7:ff:1a:0f:f0:a5:c9:99:c4:31:77:9d:f1:71:c8:
27:cf:69:32:cc:06:83:f3:55:62:ed:e0:03:a4:84:8a:9f:f6:
f5:f8:d8:f2:92:d6:ac:9a:b7:8c:4a:f6:f5:ef:8d:66:b4:fb:
36:89:d6:5e:92:ae:5b:46:1c:c6:e1:7f:b6:e7:98:18:64:3f:
e5:68:ca:ba:bb:f8:de:4d:79:ed:85:c5:b8:d8:59:e2:81:46:
1d:1f:f8:fd:4c:7e:59:51:d4:8b:06:5f:a9:7b:f8:a0:70:01:
d2:d4:58:60:c6:54:cf:2c:18:4d:ad:92:46:38:2e:53:93:ff:
69:39:ca:3b:30:eb:09:1b:30:e0:5b:fb:55:30:ad:bf:ab:25:
1d:f7:ba:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xl44VsCq/eShwV4R5jziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YTdmZjAxMmNiNzJlYTg0ZDFiODNjMDAyYzMyMDNjYzAy
NGU2YTYwHhcNMjUxMDE5MTQwMTIyWhcNMjUxMDIwMTQwMTIyWjAzMTEwLwYDVQQD
EygwOGFkMDA0YmQ2NmM3MGNmMmZkNDM2ODA5OWRmYjVkZGUzNjJiNjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdnYaSU0Ao/DGTVqmUhJcaxqoS8A
VcfeUAJA3N11dRtW0bP222VF7oIgi8qYskn1RsYdQt+5leRgi6WQDaWdx6HtN6X8
Vof6c0DMv/wBOiN3vEpb6C9G+2g04gkfR2iqS+ICQ2rvdlDJPYcEsMY2A1GhfS0i
lVSUUAe2Uhwd4Ywp+s9xpIPcLbv/tQBjKqRxfZz8gHoR1U3M22269wtgOktLhlq1
G61+PyMD1HHJcD4E1Y6Lr95CAnwBT9Ji7B4jBdaU0qmd11TXMRfZYVUDJQsHwcob
ZW4vtAHLSSOhD/UTev1rLV8qZHtyy9eCFsUzquOc+nIhY4UT9sDwxtkBxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAitAEvWbHDPL9Q2gJnftd3jYrZ7MB8GA1UdIwQY
MBaAFMmn/wEsty6oTRuDwALDIDzAJOamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2Ut
ZDJkMTIwOWM0ODI1LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MmZiM2MtNjFhNi00NWNhLWE0N2UtZDJkMTIwOWM0ODI1
LzEveWFmX0FTeTNMcWhORzRQQUFzTWdQTUFrNXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeCCxvBC
L8T4QcQjtpNh4qZjQKqYMb2K1KBcI7W2owfZnrPdSmrkzwskDTixidh2GX/vdd9g
pwpbvvOIv2a/IxM8vFWaH/D0OYqWZ/cWM1EVhdcgn6eS1sXBJqM8UgPXoKRo7ZWO
qP6I18mBLNk3x/8aD/ClyZnEMXed8XHIJ89pMswGg/NVYu3gA6SEip/29fjY8pLW
rJq3jEr29e+NZrT7NonWXpKuW0YcxuF/tueYGGQ/5WjKurv43k157YXFuNhZ4oFG
HR/4/Ux+WVHUiwZfqXv4oHAB0tRYYMZUzywYTa2SRjguU5P/aTnKOzDrCRsw4Fv7
VTCtv6slHfe6kw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:21 2025 by rpki-client