Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: n9J55BMuzH7NLq18MdeTbi+eiZSqNIWk33aJKsYT198=
Subject key identifier: D2:60:55:D3:52:C7:2E:5A:13:9C:61:1E:8B:13:32:36:50:69:3A:D0
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 019511D9974AFB11F644187FAA63543B15A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:27 +0000
Manifest this update: Mon 17 Feb 2025 03:00:27 +0000
Manifest next update: Tue 18 Feb 2025 03:00:27 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: pVa6PPwq/PE4itr6BFAwQFt5pW+kVacjlEQmrQc69q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:97:4a:fb:11:f6:44:18:7f:aa:63:54:3b:15:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Feb 17 03:00:27 2025 GMT
Not After : Feb 18 03:00:27 2025 GMT
Subject: CN=d26055d352c72e5a139c611e8b13323650693ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:85:5d:2b:73:ea:bb:35:35:77:d5:64:73:
e7:ff:c6:7a:94:9a:53:35:c1:3b:06:64:0b:38:0b:
a9:b1:0f:7e:2e:0f:42:6f:6f:8a:db:63:1c:91:24:
78:c2:70:c9:cc:38:e8:91:68:d9:fc:b7:7b:44:29:
67:8f:71:ff:68:37:fb:e7:3c:05:17:53:b1:44:10:
3d:d8:11:df:d2:98:fa:d3:65:d3:75:3b:ef:73:4b:
af:c8:e8:99:91:09:93:cd:f0:c2:7c:67:96:c3:33:
08:c7:28:b5:d4:0d:37:72:20:27:a9:29:49:7f:63:
24:a6:18:f3:51:02:e4:7d:fc:40:0f:de:0c:6f:0d:
bf:ba:2c:8c:6d:32:2d:ed:68:4a:83:ae:41:03:fa:
47:57:4c:8e:26:8a:56:9f:6d:3f:51:be:55:50:ec:
ba:4e:f4:89:41:f7:8a:4b:90:27:9f:1c:59:25:51:
e0:2f:70:a0:64:1e:37:98:b9:fc:e9:ab:17:1d:0f:
6e:d2:d7:25:d9:71:fb:d2:7b:3d:23:45:b1:4f:22:
fb:6a:99:f6:f8:54:a2:97:64:7d:1d:85:7c:fc:b0:
4d:bd:68:e0:6b:5e:f5:a5:89:b7:c9:b3:cd:2e:48:
4a:fe:df:94:7e:19:c2:0f:7f:05:0c:d2:0c:8f:45:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:55:D3:52:C7:2E:5A:13:9C:61:1E:8B:13:32:36:50:69:3A:D0
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7f:80:d6:21:86:91:1d:6b:22:8b:12:b8:02:01:94:61:41:
bd:64:5e:f4:5c:cc:b7:e7:0a:86:d2:8c:1b:84:15:ee:cf:5b:
1d:c0:b9:ac:38:a2:16:63:a3:79:01:55:26:2e:e9:7d:ca:58:
ce:f0:c2:3b:43:26:c6:50:26:21:bc:ac:99:da:80:29:3b:14:
8a:a2:38:79:9f:a7:4a:81:20:44:da:32:62:3c:03:d4:11:17:
8f:05:15:4e:70:57:a0:0d:74:c2:76:a4:8e:7a:a0:52:ea:32:
70:73:bc:2e:22:43:d0:7d:af:2c:71:88:80:88:3c:1c:31:76:
43:89:7c:9b:24:46:78:b1:06:20:42:af:f6:49:09:a8:cf:40:
67:af:6b:53:81:7f:4b:cb:3e:60:f1:9c:99:dc:01:6f:3a:72:
c8:3b:3c:04:09:37:b0:b2:42:43:20:1d:ba:74:1b:a7:83:7f:
86:ee:51:d0:7a:03:e6:9a:36:dd:a0:21:e9:df:6c:7f:fc:a8:
e5:24:bc:ae:b9:5c:94:b3:78:d9:3b:f1:00:d7:48:96:ea:8b:
7b:04:96:56:f9:98:d9:3b:75:db:0e:8e:46:8b:c0:ee:97:54:
e5:73:e2:67:ac:74:d9:06:1c:1c:ca:0b:38:00:86:0c:fc:49:
67:92:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:20 2025 by rpki-client