Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: UXHud77reSU2CjfFxtHmaTSzfqNBtoWRrXipoHC1kDA=
Subject key identifier: E8:FD:F2:B2:15:66:81:C3:C9:9D:A6:86:29:F2:DC:62:87:CC:41:84
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0199FB0F35E7A51DA1DA9B363C624CEB286A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:42 +0000
Manifest this update: Sun 19 Oct 2025 06:01:42 +0000
Manifest next update: Mon 20 Oct 2025 06:01:42 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: geqlwjzppv4nOUZXwFBXiwTKTtmY1SE++RT677Epflg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:35:e7:a5:1d:a1:da:9b:36:3c:62:4c:eb:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Oct 19 06:01:42 2025 GMT
Not After : Oct 20 06:01:42 2025 GMT
Subject: CN=e8fdf2b2156681c3c99da68629f2dc6287cc4184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:bb:d8:36:f0:2e:68:0d:76:63:28:fb:c0:
a7:5a:0f:30:d9:ee:28:61:fa:c0:ba:a4:cf:35:e7:
d7:cb:49:a8:d3:ff:06:f5:b7:9b:05:6f:44:17:70:
4a:8f:f9:bf:e3:7c:26:53:66:b5:88:d9:36:1d:e7:
16:a7:f7:f9:bf:73:c5:c2:a3:21:ed:52:d0:91:f1:
c3:bc:dd:ee:dd:7d:2f:1c:c7:66:aa:59:0b:d4:03:
b7:31:09:e2:6a:d9:e6:94:69:f3:f8:86:aa:69:8d:
b8:af:ee:0f:7b:b3:88:7c:40:98:d2:a8:91:43:09:
81:2d:79:20:c1:eb:1b:73:38:25:50:76:5b:ab:a2:
a3:d9:c1:c1:c2:db:1d:2d:e4:28:61:ce:20:ed:45:
72:30:dc:05:3a:ac:bd:41:48:f0:2a:90:4c:70:2c:
e0:c7:49:fd:8c:d2:2d:05:d5:15:72:84:19:af:de:
2d:36:3e:c9:4b:83:e0:7a:e1:0c:2c:d4:c2:20:8d:
ef:6c:43:6b:46:18:69:c7:92:c1:56:23:71:8e:cf:
09:cf:06:ed:a1:8c:91:0d:91:fc:5f:67:3d:19:ec:
d5:23:20:3c:24:38:93:e5:af:26:10:f7:d7:e6:c4:
4b:9c:07:ba:e8:c4:b6:00:b9:0d:e5:f3:b9:a9:8e:
d6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:F2:B2:15:66:81:C3:C9:9D:A6:86:29:F2:DC:62:87:CC:41:84
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:cf:bf:8d:bb:d9:85:f5:a6:25:27:03:06:e2:68:09:4a:2c:
82:79:46:e7:d3:96:35:23:16:c0:96:d7:3f:10:c3:00:3c:b9:
e4:c2:6f:b3:e8:0c:9b:f1:5a:5b:eb:26:10:ae:08:42:c7:27:
8b:ed:e7:4a:1d:14:85:67:3c:09:7b:16:21:b4:e9:a3:ac:eb:
21:05:4b:05:f6:2b:26:ae:6e:16:c2:51:63:9f:85:4e:26:68:
35:6f:22:29:ac:a3:08:8a:2b:21:d9:1b:a4:76:cf:0d:fc:aa:
35:d6:9f:a5:e6:e2:21:14:c9:22:08:55:7c:45:a3:e8:66:7b:
23:a8:23:17:f4:5f:be:6f:0a:b1:11:3c:6f:b9:aa:6c:ac:48:
fa:a7:e1:db:48:13:45:e4:50:7c:ed:c1:57:8b:c2:cf:1a:29:
b0:79:d8:e0:2c:41:bf:06:89:50:73:cb:4d:47:88:48:c5:85:
9e:6f:a6:18:1d:1e:2f:b1:57:e4:b9:c2:28:98:2d:bf:7d:35:
4c:cd:9f:7d:c4:9a:11:19:c5:fd:b9:51:d5:e8:13:a7:ea:d8:
91:1d:33:86:76:1f:f9:f6:d5:ee:8d:f4:4d:fb:0d:43:1e:0b:
3b:e8:97:ab:e0:b6:cb:06:a8:5e:55:c9:00:dc:9d:99:ce:38:
ef:e3:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:32 2025 by rpki-client