Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: pL5MUwQVkFToZwlpv7dcuOd0Q7VV7b4e7TqzYRg6IeI=
Subject key identifier: CD:B6:AB:15:F6:6D:1D:3E:9E:B0:55:32:1F:1B:73:DA:D1:F3:C1:7A
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0196526D59334588A0397ED3D65F5D9423BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 09:00:20 +0000
Manifest this update: Sun 20 Apr 2025 09:00:20 +0000
Manifest next update: Mon 21 Apr 2025 09:00:20 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: powZOCs9WA+w0wRrYxRCOx139dEG0tR4SXZq3uq9TtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:59:33:45:88:a0:39:7e:d3:d6:5f:5d:94:23:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Apr 20 09:00:20 2025 GMT
Not After : Apr 21 09:00:20 2025 GMT
Subject: CN=cdb6ab15f66d1d3e9eb055321f1b73dad1f3c17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:03:f7:d8:a5:16:60:af:3b:f1:7c:87:16:
1d:03:c8:ed:30:7a:6a:0d:32:3e:71:b1:de:9e:63:
31:38:3c:5b:57:8b:17:cc:5d:a3:38:70:32:0b:06:
a5:46:ef:70:87:eb:35:e6:0a:bf:0a:4d:48:05:a3:
b2:eb:a5:2d:f0:a9:92:e5:3a:81:14:42:2c:53:7d:
c9:6d:c3:ed:e4:80:d4:02:c9:ac:53:ab:0b:fc:4c:
60:32:78:da:94:dd:cf:0f:8c:27:7d:6b:bf:44:c2:
16:20:61:b1:e9:ee:51:1e:50:7f:dd:17:61:05:7e:
18:a9:e5:f1:5d:ad:a4:c0:6a:3f:be:c4:f6:03:a9:
c2:c3:a1:e3:0a:3a:f3:44:5b:6c:87:9b:6b:e0:7e:
24:a8:67:fe:c0:71:d8:88:85:90:2f:e5:7f:eb:d8:
60:1b:f2:d6:56:c7:f0:0a:06:a3:94:83:3b:f2:a4:
41:29:c8:45:79:79:8a:31:c0:9e:f7:ca:5f:1f:db:
ef:e9:ed:f9:69:45:a4:ca:69:61:72:a8:2b:11:4e:
a1:b1:6d:17:b3:10:36:3b:40:12:76:85:a3:ab:69:
20:e8:bc:34:7f:67:70:8d:cb:f8:50:cd:8b:0f:3b:
0b:83:3e:5d:c7:cc:a0:8e:07:49:5b:38:6a:9d:8b:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:AB:15:F6:6D:1D:3E:9E:B0:55:32:1F:1B:73:DA:D1:F3:C1:7A
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ac:78:ac:58:d5:15:f8:fd:29:92:e1:b6:72:65:ce:b2:e1:
2d:29:f2:3f:4a:a3:df:44:4d:2c:4c:d4:3f:b1:e2:dd:3d:fc:
00:3c:fc:fd:d5:3f:fe:12:5a:46:7f:15:d0:dc:1c:4f:94:a2:
be:3c:de:a8:5d:a8:4a:c6:58:f6:a3:f1:92:f5:3e:b0:82:7b:
b9:98:9e:41:78:d1:b8:10:5a:35:52:25:10:1d:22:58:55:86:
12:cf:e2:f4:a7:cb:87:02:f2:ed:59:1f:a5:7c:f0:a1:0c:08:
73:5e:20:91:41:83:ae:48:98:d5:00:f2:51:29:d3:9f:0c:ec:
e7:03:bb:3e:94:17:e2:97:3f:9f:73:ac:31:60:b2:b1:8c:73:
77:ab:60:29:18:86:e9:e5:f7:6a:a9:58:53:fd:4e:35:31:cd:
41:06:df:07:33:7a:36:68:cd:23:e9:b8:dd:1c:28:f1:ae:de:
2f:39:46:2f:65:69:bb:c0:b6:08:22:b6:08:ff:e0:2e:47:45:
23:6d:64:30:66:db:85:bb:ed:69:e8:51:43:1d:ac:01:3b:95:
2f:4c:7c:9a:b5:2b:97:2c:46:de:1e:54:f2:6c:16:71:e2:6b:
f3:38:d8:10:02:c9:4d:05:6f:3b:24:2e:e4:fe:93:82:ca:22:
15:e8:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:24:08 2025 by rpki-client