Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: Nl4LIhwJ5P5jIQ5WHT/rrMpRxcm8jDk24+DxNWkMomk=
Subject key identifier: 62:63:45:A1:5B:CC:B7:45:8B:EA:6B:38:5A:C4:16:DB:F0:97:2F:AF
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 019922C31F0350FF53474A5E228ED127411D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:36 +0000
Manifest this update: Sun 07 Sep 2025 06:00:36 +0000
Manifest next update: Mon 08 Sep 2025 06:00:36 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: Wg+WOo0nenBSomtuO03RtrmbzY2bRTE1TZ1vdRylxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1f:03:50:ff:53:47:4a:5e:22:8e:d1:27:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Sep 7 06:00:36 2025 GMT
Not After : Sep 8 06:00:36 2025 GMT
Subject: CN=626345a15bccb7458bea6b385ac416dbf0972faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:bc:3b:e8:6c:ed:84:1f:98:29:a6:fd:e0:
80:9c:d3:b9:c1:16:97:fb:82:73:0e:62:90:8c:df:
98:80:89:b6:7f:26:4a:6e:d6:3e:aa:c0:df:1c:f6:
8f:1f:57:ce:ff:d0:0c:2e:2d:bc:a5:a4:5f:6a:39:
d0:fa:6a:35:2b:64:39:7a:62:7c:20:bb:01:e4:7f:
ab:68:ed:67:6b:33:0c:2b:b9:32:ce:52:79:b5:95:
25:ee:ef:f0:ca:c4:47:0d:ec:b0:a5:53:db:94:72:
15:54:2b:a5:4f:51:43:86:1f:e3:cd:81:3a:9d:ef:
d4:ea:be:da:22:aa:62:ae:ea:f1:9c:56:3e:d7:cb:
1a:65:32:0b:ca:2c:f0:fa:ce:80:17:ad:0d:d1:5f:
d1:42:3e:61:6c:f6:c9:a1:6f:2a:8e:5d:e6:89:8a:
15:14:f9:03:e8:83:48:55:52:e0:8f:be:e9:60:ce:
80:d4:eb:fa:a9:84:af:31:73:ff:30:48:7e:d1:7b:
74:5a:fe:cc:15:13:81:a7:c8:61:0d:00:f3:f1:b3:
5e:4f:70:68:c6:a4:12:38:e2:8a:8e:5f:8f:c3:c3:
74:6c:82:7a:0f:e1:a5:15:b2:3d:6a:7d:27:8a:2a:
e1:be:45:56:1c:78:ee:c6:38:90:82:ce:fb:39:e2:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:63:45:A1:5B:CC:B7:45:8B:EA:6B:38:5A:C4:16:DB:F0:97:2F:AF
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e4:ea:8b:8c:6a:09:b0:27:ec:fb:3f:33:83:ed:e3:a0:a3:
4e:94:0f:7a:68:96:0d:3d:fa:ea:bd:9c:21:14:b7:86:b1:18:
7d:a6:cf:96:6a:7f:71:48:01:4a:ff:9f:60:c2:85:c0:7a:8b:
68:6a:77:6f:af:d6:a8:5a:7f:40:a0:5b:6d:3c:44:52:44:bd:
18:56:14:4b:8c:41:18:97:06:4e:db:c6:bb:24:3f:4c:43:8a:
80:9c:41:3b:39:49:8c:a1:ce:75:76:ff:28:49:6a:e3:93:47:
3b:82:ff:98:45:90:43:d8:af:48:85:95:33:cf:51:c8:05:59:
de:4d:d8:17:d0:c2:f5:b7:b0:e7:2c:4f:6f:4b:d4:26:9c:3e:
07:2a:7b:64:7d:76:d8:65:1a:74:ab:2d:36:a9:5d:85:11:d7:
c2:8c:7d:6a:23:31:34:f1:0b:c0:73:19:cb:2e:7a:5b:36:09:
9a:19:bd:63:e9:39:84:bc:8f:4c:06:b0:46:d9:02:d9:6b:fa:
21:bd:8d:1a:43:d6:ac:be:05:0e:0c:0b:a2:a8:78:f0:6b:a4:
ab:d3:7b:49:cf:eb:41:b2:8b:cb:c7:ee:12:41:b7:44:9a:fa:
60:f0:64:4a:d9:a9:fa:9b:9b:5a:9f:50:bf:0b:89:25:00:9f:
4e:c4:70:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:55 2025 by rpki-client