Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: b2npgP9t6lng8blJP4oz3heZCbed/Xx2t7vYyeXFB60=
Subject key identifier: 27:E5:31:16:23:12:3D:13:01:AE:D8:56:22:BD:83:83:F3:BD:51:66
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 019A72CA1767FE204AD11F0376B75FC81EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: lK25jaCMV+3/crYqHIq7rb4ohJT2rwJwTglsV9h6kp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:17:67:fe:20:4a:d1:1f:03:76:b7:5f:c8:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=27e5311623123d1301aed85622bd8383f3bd5166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:c9:a5:29:8f:53:ae:ce:b6:b0:b0:00:95:
7e:4a:41:19:73:07:9e:a5:a4:28:42:35:ef:14:db:
b4:dd:51:85:96:59:65:9e:40:19:23:60:c0:11:5e:
46:1d:16:75:aa:09:6e:c4:fc:88:81:d7:2a:f8:62:
1a:9f:d8:f6:d5:97:d5:6d:b3:f2:1e:f5:f2:bd:2c:
2e:9e:0a:e2:30:e9:70:fb:61:a3:ad:f7:24:2c:80:
a5:71:01:05:d4:18:89:5c:1d:ec:8b:39:a6:ca:d2:
4c:64:a4:27:92:58:f6:8a:15:16:9b:67:8c:4e:36:
48:15:20:8f:63:f2:38:23:a9:20:7b:51:e7:73:e3:
21:98:e9:d3:cd:2a:b1:74:81:24:69:27:e8:50:8f:
a5:ff:63:3c:59:e9:a8:1c:79:81:50:55:6f:cf:a9:
e5:6f:25:fd:33:e5:8a:57:9d:13:13:c3:62:63:c0:
c0:63:b2:13:a1:a2:13:af:15:2a:c0:38:41:bb:bb:
df:75:35:f1:e0:b8:d6:08:02:84:1e:d1:7a:0f:f6:
0a:9a:4f:03:b5:3e:8a:7a:a2:85:81:c3:17:74:38:
ae:e7:d6:dc:25:b6:8f:ac:66:6a:87:1f:c3:03:24:
2a:50:91:98:ba:ab:25:ed:05:6b:62:7d:a0:2f:a4:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E5:31:16:23:12:3D:13:01:AE:D8:56:22:BD:83:83:F3:BD:51:66
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:49:a1:20:ed:be:79:23:96:62:bb:0d:a8:3c:ca:aa:77:22:
20:07:02:1f:05:f1:c9:9b:31:49:8e:01:1e:2d:97:0c:2e:1e:
33:a4:15:a0:34:63:fa:b6:07:09:c5:68:13:28:b1:8b:9d:94:
4a:ae:e5:f0:c8:25:b6:81:0f:57:ff:88:9d:9d:e1:91:c4:a3:
ff:46:e1:06:59:84:67:a4:90:5b:f7:0a:ec:8f:ab:6d:bc:79:
03:de:f2:c6:96:b9:27:5c:c2:f1:3d:62:d0:cd:e2:e6:14:3f:
53:6e:3d:3f:68:8c:d6:e5:23:bf:bc:b7:b4:7e:47:be:da:69:
3c:ee:06:89:99:c1:1d:db:8c:b0:20:7c:bf:30:79:3a:bb:d0:
9f:07:50:21:1c:df:1e:3c:5a:fb:73:bf:4f:ab:56:d9:1f:e1:
c7:f8:c7:62:c1:54:c4:32:75:6f:fb:dd:e9:ff:ff:00:ca:1d:
5e:dc:48:cf:bf:5b:dd:07:71:3e:8c:b8:e0:30:1a:4d:51:91:
be:e8:0b:56:be:68:12:a7:27:6f:d8:c4:ad:a5:78:87:fa:8c:
87:c6:48:41:7f:34:2e:62:9e:87:27:ba:48:a0:2b:b3:07:bb:
91:ae:5d:52:b6:ef:e5:10:b9:e5:3f:98:8b:e8:a5:6a:68:53:
d1:c7:7e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:02 2025 by rpki-client