Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: ZIxr7IrT5AoQETXKy+eOxvxaD/Auhy2O7dKN4X61xyk=
Subject key identifier: E8:42:60:A5:0B:EC:00:0F:F8:95:30:CA:11:BB:1B:F0:CA:98:4C:11
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 01958B847200555C798988259D426417F404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 18:01:07 +0000
Manifest this update: Wed 12 Mar 2025 18:01:07 +0000
Manifest next update: Thu 13 Mar 2025 18:01:07 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: x4EZI5Xm+o0fs+6kydz+94BnSa91NDOshDQOu8ac7QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:72:00:55:5c:79:89:88:25:9d:42:64:17:f4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Mar 12 18:01:07 2025 GMT
Not After : Mar 13 18:01:07 2025 GMT
Subject: CN=e84260a50bec000ff89530ca11bb1bf0ca984c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:2a:de:c8:9c:ff:c9:bf:ee:4f:fd:85:c3:
ae:41:3d:94:58:4f:19:88:ab:0f:23:42:94:48:71:
15:fd:c2:89:da:96:10:61:28:cd:a0:54:e8:d7:51:
a4:bc:35:8f:e4:d1:c9:09:77:a2:01:0a:36:4b:69:
08:83:dc:46:fd:fc:39:d1:fd:c8:8c:00:3e:bd:fb:
96:9f:04:0f:9c:e8:cc:bf:7a:c3:64:07:64:87:4a:
a0:b9:74:23:5c:c1:c3:8e:dd:65:b9:d4:3a:72:35:
3a:5b:8b:68:dd:17:3b:61:d3:98:6f:72:ed:d1:b7:
dd:df:0e:4c:32:53:3a:45:6e:f7:9e:7a:3e:96:f1:
f1:61:b0:ef:35:d0:cc:da:28:75:ea:45:52:1a:7c:
9b:19:a9:e1:7a:4d:f3:d5:f7:55:c1:52:16:2d:35:
1e:6b:3a:69:6d:b1:96:66:fb:2e:1e:25:80:f1:e2:
cd:c9:b2:64:64:aa:44:cd:d5:8e:33:e6:1d:1d:fd:
06:38:4e:45:8c:02:60:ed:22:07:f8:63:01:b4:9f:
a6:c9:1a:61:a9:93:a0:5f:6a:32:35:93:9e:9d:e5:
68:1a:20:fa:99:52:14:ce:91:f9:83:87:94:03:a3:
61:f7:d9:9b:d5:24:e0:23:85:0e:9e:b9:9a:ba:f2:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:60:A5:0B:EC:00:0F:F8:95:30:CA:11:BB:1B:F0:CA:98:4C:11
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:4c:59:a5:53:35:eb:99:a5:1e:43:2b:d5:59:6b:3f:52:
98:cc:9e:df:91:6f:ad:06:02:5a:5c:ff:8c:f9:77:d3:17:d3:
1d:17:2e:f5:d8:11:19:b8:0a:61:0f:e8:9b:85:24:fe:3a:24:
03:f6:8a:30:f2:d9:32:03:59:78:04:95:3b:8b:1a:ae:ca:33:
52:c9:fa:d1:4b:a9:cc:66:c8:db:57:61:dd:10:34:c4:ac:ec:
49:36:30:56:f3:5a:1e:0b:70:3c:a2:20:51:31:7c:c3:76:4f:
0f:a0:e1:15:b9:0d:39:f3:39:88:0c:04:6a:61:fc:df:af:1c:
ff:8e:0d:44:78:b8:62:d2:77:46:dc:00:16:3a:89:3b:72:1e:
2d:29:03:c8:a7:9d:0b:33:f1:35:71:36:c3:11:43:4d:6a:9d:
f4:18:3a:23:31:4c:e5:8b:79:48:cf:91:46:b1:e5:2e:36:a8:
ec:98:d3:02:a4:b6:cc:b9:2d:9e:2a:f9:72:18:de:a4:24:29:
8e:1c:c1:d4:d1:79:11:be:ec:eb:35:a4:62:ef:37:bf:e5:f2:
0b:de:0e:aa:49:24:ef:0a:ad:fc:ea:66:d1:14:69:0f:d8:8b:
12:7e:0c:56:4c:e8:5b:c8:83:93:93:88:39:46:d1:b3:8f:82:
7b:fe:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:06 2025 by rpki-client