Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: oidxlD7XlxXjdcqDhE4zHffVa+h3J/5fFzLTnT8iUio=
Subject key identifier: A3:30:52:72:CF:AE:A7:54:2D:24:1F:D1:ED:5A:14:58:C3:6A:47:B9
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0197C537B61FB1197018F0B0D0A6D2E9D804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 09:00:52 +0000
Manifest this update: Tue 01 Jul 2025 09:00:52 +0000
Manifest next update: Wed 02 Jul 2025 09:00:52 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: L4+IoS4RAOkekBvztH/dKr0DqUb65MlF1pP6Qu7vQiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:b6:1f:b1:19:70:18:f0:b0:d0:a6:d2:e9:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Jul 1 09:00:52 2025 GMT
Not After : Jul 2 09:00:52 2025 GMT
Subject: CN=a3305272cfaea7542d241fd1ed5a1458c36a47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:a7:9d:d2:97:6e:71:41:20:e6:93:2e:ab:
85:cb:49:c6:84:18:33:a1:68:d8:4c:c5:f8:48:72:
e7:20:0a:6f:9e:b6:7d:36:9a:c5:38:a2:ed:75:31:
b7:4d:89:c8:5b:91:5d:52:e7:90:05:bf:6f:63:be:
26:74:37:cf:3c:2f:80:91:65:4e:2f:0a:cd:9f:90:
d1:41:33:3d:6c:89:3f:12:88:7f:11:82:06:98:53:
1b:06:23:1f:3a:e2:68:5a:48:6f:45:29:ae:1f:fe:
7e:36:98:27:a5:cc:7f:a1:15:de:27:8e:7b:23:f7:
70:71:9a:54:78:c2:3f:e1:59:8c:98:e8:da:4a:e7:
f7:e1:04:19:20:3c:b7:3b:fc:eb:af:95:76:d8:03:
08:cd:88:f3:99:0f:97:38:35:fc:81:08:f9:c8:71:
5e:8e:f5:55:9f:44:82:a5:24:ae:5a:a9:7c:2e:bb:
fd:cf:1a:f1:b0:3b:5b:a4:03:41:c1:96:68:4c:b7:
dc:59:21:52:ff:c1:c3:f0:3e:aa:55:87:b9:dd:d5:
94:37:a6:52:0d:51:a7:40:74:d5:da:5a:1e:e6:74:
8f:3a:d4:0b:70:94:14:5a:62:45:a6:93:09:b6:f0:
b2:73:c4:20:c5:c7:60:09:5b:f3:10:e5:4b:f1:69:
bf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:30:52:72:CF:AE:A7:54:2D:24:1F:D1:ED:5A:14:58:C3:6A:47:B9
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:db:4e:68:11:e2:df:90:11:15:42:2f:48:09:36:80:65:21:
c4:c0:7b:f8:1a:cd:ed:29:08:53:6d:5f:8b:a8:de:90:b3:1b:
db:b9:37:6a:1b:e3:de:7f:c9:ec:80:47:47:ee:c3:e7:b6:48:
ba:b1:c1:84:c1:3e:ae:52:ec:64:92:31:aa:a5:ec:3b:c3:07:
0c:9a:49:c2:97:f5:74:9f:8c:76:5f:b3:fd:c8:d4:bd:b9:b6:
c5:19:52:01:c8:6c:06:5e:46:45:72:52:4b:9c:c7:cb:98:0f:
64:b1:68:72:66:0b:f6:f1:29:6d:22:18:5e:4c:48:86:b7:c5:
97:c6:04:cf:1c:d4:97:48:8b:55:1e:b9:fb:69:38:81:28:fb:
b0:e5:e7:57:30:5d:48:f7:72:c5:78:5a:f7:20:0f:a7:65:99:
ed:cc:15:53:ef:4d:4d:0c:3d:c5:15:49:79:3c:b7:35:e6:d8:
11:2d:85:5a:df:77:fb:72:1e:da:1c:3f:e4:6c:79:c6:16:c9:
6e:e7:5a:64:df:3a:66:18:75:6c:e3:43:c5:d0:97:73:e5:02:
63:ae:5c:be:2d:37:c7:bc:93:63:19:25:47:d8:3d:c9:f5:a4:
23:9c:d9:ff:fc:be:12:4b:ab:98:25:f6:a3:67:77:ba:a8:0a:
76:55:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:35 2025 by rpki-client