Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: GLjd/6+Wz355qS7iBcJx6FZnTSWaqtnIHws6tGua9EQ=
Subject key identifier: 41:50:B2:63:43:44:D8:FD:FD:D2:E4:E6:2B:EF:A0:52:50:5D:82:F8
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0197D8879B1D5181624FCE78F33DFB17FBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 15C7
Signing time: Sat 05 Jul 2025 03:00:55 +0000
Manifest this update: Sat 05 Jul 2025 03:00:55 +0000
Manifest next update: Sun 06 Jul 2025 03:00:55 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: 9sos5ftWAIiML3VSMap/rk644VjRwSE2LjxjkLoNu4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:87:9b:1d:51:81:62:4f:ce:78:f3:3d:fb:17:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Jul 5 03:00:55 2025 GMT
Not After : Jul 6 03:00:55 2025 GMT
Subject: CN=4150b2634344d8fdfdd2e4e62befa052505d82f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2f:22:45:f4:3e:e7:3c:ae:91:54:b2:dc:28:
d3:d1:9f:a3:1d:86:c1:9f:63:98:12:ea:60:df:14:
d8:59:dc:b0:75:23:8a:8e:cd:c4:e0:b8:b9:7f:c6:
3d:92:af:04:14:7c:d9:76:05:1b:89:ce:13:3b:c6:
88:b9:2a:c0:b1:98:1c:fd:f9:e7:33:d4:fc:f2:8a:
7d:e8:b0:6a:b5:07:dd:71:ae:d5:4c:80:96:90:33:
6f:8d:99:2b:03:91:ef:3d:fd:26:95:0a:49:87:7f:
7f:f0:05:ca:49:61:ab:4e:11:ff:86:e8:d9:70:7b:
b5:99:9c:f3:c3:3d:e8:6c:85:a2:34:1e:02:f1:06:
f2:da:23:37:c8:79:b5:e2:ee:0a:3e:39:c6:b2:65:
d8:b0:dd:4e:44:75:57:04:9e:5b:66:6e:b4:25:f1:
0e:db:ca:6e:2c:f2:cf:22:7d:44:85:cd:b0:0f:09:
33:d0:a4:18:c4:fd:e4:b9:15:57:87:e1:e0:99:27:
ea:a1:62:86:a9:ae:a2:8d:09:f1:33:c0:fb:70:db:
2b:6b:4d:d2:62:f4:7f:2a:85:93:74:8d:9e:a4:a7:
68:0e:c1:1b:ea:2f:44:5a:50:5c:dd:03:52:37:3a:
e6:8b:03:05:24:21:3c:b1:b0:62:d3:21:2b:ce:85:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:50:B2:63:43:44:D8:FD:FD:D2:E4:E6:2B:EF:A0:52:50:5D:82:F8
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fd:a7:59:47:50:0b:25:33:82:9d:3f:af:2f:55:cd:bc:35:
2d:52:5d:9f:97:e5:16:de:46:44:11:78:5c:93:17:0e:02:25:
db:ee:4d:39:22:f6:fc:5c:61:25:6d:52:df:dd:be:11:50:b0:
5f:ab:bd:8a:c7:20:65:e3:3f:0e:a0:86:8a:7e:66:cf:4d:8b:
c9:b0:ea:53:bd:bf:ea:49:12:dc:61:de:25:4c:49:ee:45:f8:
85:49:2d:8f:67:1b:64:30:44:46:71:ef:89:43:20:a3:6d:04:
5a:7c:36:53:86:10:64:25:47:97:8a:64:d8:da:b5:82:7e:88:
51:bb:0d:b9:4c:5b:5b:bd:07:fc:fb:3b:6d:d0:c3:8c:99:31:
ad:3d:10:59:52:f4:6b:96:14:0e:14:55:ad:e3:2f:a8:8e:12:
e6:c6:87:16:ee:bf:78:be:00:f4:23:a3:10:b3:ad:0f:8f:8f:
2d:2d:bb:ac:6b:63:ff:91:9d:ab:19:7b:4c:1b:8d:bd:c4:6f:
f6:0d:d2:04:af:04:a0:bc:8c:9d:a5:e4:d1:53:53:2a:17:31:
8a:2f:4a:6a:29:17:66:f0:f3:0d:20:72:ce:96:46:02:06:60:
00:a8:1a:6b:dd:a1:3d:48:4f:27:22:a9:90:bc:93:e5:2d:c3:
e3:c9:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:06:19 2025 by rpki-client