Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: w7mgTee2IU+59y5UICK+Wf2X0NmjvPoVqq++r4tHUYo=
Subject key identifier: 83:8A:FD:75:07:F5:13:1B:97:6A:8F:9D:84:35:68:DA:B3:50:F4:E3
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0198D583A0141B430C3BB7EA347FF33E8FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: djIwTGMY0i20MQwmkq2FnyM7NthU3FWKKceSTuhKKXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a0:14:1b:43:0c:3b:b7:ea:34:7f:f3:3e:8f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=838afd7507f5131b976a8f9d843568dab350f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:34:f3:66:33:f2:31:5f:43:53:13:7e:4d:
4f:4e:c6:63:77:26:21:6d:63:ce:6c:24:f9:0c:87:
4f:63:88:a8:cf:c4:df:72:59:80:f3:8e:56:ae:d8:
d5:d2:f9:e8:37:da:d9:8c:90:90:9c:7f:77:8f:2a:
3f:a8:33:c9:bd:69:4f:30:04:6b:14:10:4e:69:46:
9b:91:37:47:49:d1:17:4a:9d:2c:cf:0f:f2:bb:0d:
30:38:02:1a:77:37:dc:48:39:fd:18:66:74:b5:74:
f7:ed:72:b4:9a:43:83:a3:1e:ee:87:73:ca:de:f9:
51:dc:44:2c:4d:e9:74:b4:44:84:69:50:e1:05:34:
9d:aa:8c:d0:4e:62:d1:3d:87:4d:8f:83:aa:5c:77:
45:11:b9:b7:d4:70:e5:50:fa:ad:57:35:6e:ff:3e:
ac:3a:fa:74:61:da:fd:d8:b5:b1:1e:6e:ea:33:56:
4e:c1:c1:2f:8b:8b:2c:7e:0a:dc:22:06:a1:1e:fc:
a4:bc:8a:2a:95:57:e2:c1:ac:cc:71:1e:86:4c:97:
0c:c6:6c:4f:f3:b8:52:be:35:21:bb:75:cd:a6:24:
07:fd:cc:54:30:55:2f:17:34:6c:2f:76:6d:64:4a:
a0:cd:6f:69:95:0a:00:99:31:d9:86:f1:38:2c:2c:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:FD:75:07:F5:13:1B:97:6A:8F:9D:84:35:68:DA:B3:50:F4:E3
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:dc:28:64:e0:24:d2:8a:9a:6c:ad:e3:4f:f7:9f:78:e7:
c8:32:cc:5d:4e:62:dd:22:4d:5d:de:d8:4a:88:5c:c2:c5:50:
a5:aa:2d:08:9c:0a:f3:4c:4a:4a:b0:d1:98:97:93:91:a7:9e:
f8:00:a0:af:32:05:9c:bb:1b:8b:1e:90:db:1c:2f:ba:98:d2:
d0:95:92:74:77:27:33:70:1f:9a:af:79:64:8c:95:78:83:d8:
06:88:5e:49:a8:c8:50:c9:f7:59:10:46:d0:17:5f:35:a1:9b:
21:65:41:2f:71:cb:23:55:66:fb:16:1a:e8:bf:d0:8e:2e:67:
9a:dd:a5:75:4f:d0:2c:97:f5:0e:b9:19:0c:fb:d5:9a:45:fd:
3e:95:13:26:bf:a6:5f:83:36:c9:77:ec:ca:76:72:21:2e:46:
a7:17:7e:5e:3c:85:6f:23:d3:19:0a:29:24:54:ae:06:7c:a7:
a6:11:85:04:36:10:ff:ce:d6:4b:2a:f6:3c:04:b4:25:be:7f:
73:70:1f:42:e1:2d:67:a1:51:e3:a6:48:fc:23:cd:0c:2f:9c:
54:b5:58:dd:a2:0a:33:6c:58:f9:e1:8b:5e:f9:4b:18:08:4d:
c0:17:f3:78:f6:43:12:a1:c2:70:fb:cb:57:7c:32:b9:9b:9c:
f3:46:92:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6AUG0MMO7fqNH/zPo/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMDZmZjI0NmRmNDExNjQzZDlkZTM2Njk4MTgxMTJmMzM2
MjI4M2IwHhcNMjUwODIzMDYwMDI5WhcNMjUwODI0MDYwMDI5WjAzMTEwLwYDVQQD
Eyg4MzhhZmQ3NTA3ZjUxMzFiOTc2YThmOWQ4NDM1NjhkYWIzNTBmNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHs082Yz8jFfQ1MTfk1PTsZjdyYh
bWPObCT5DIdPY4ioz8TfclmA845WrtjV0vnoN9rZjJCQnH93jyo/qDPJvWlPMARr
FBBOaUabkTdHSdEXSp0szw/yuw0wOAIadzfcSDn9GGZ0tXT37XK0mkODox7uh3PK
3vlR3EQsTel0tESEaVDhBTSdqozQTmLRPYdNj4OqXHdFEbm31HDlUPqtVzVu/z6s
Ovp0Ydr92LWxHm7qM1ZOwcEvi4ssfgrcIgahHvykvIoqlVfiwazMcR6GTJcMxmxP
87hSvjUhu3XNpiQH/cxUMFUvFzRsL3ZtZEqgzW9plQoAmTHZhvE4LCzThQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOK/XUH9RMbl2qPnYQ1aNqzUPTjMB8GA1UdIwQY
MBaAFMoG/yRt9BFkPZ3jZpgYES8zYig7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzct
MWM0M2Q0YzI3ZDZjLzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MGE4MDYtMDk3MC00OWFjLTgyNzctMWM0M2Q0YzI3ZDZj
LzEveWdiX0pHMzBFV1E5bmVObW1CZ1JMek5pS0RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+XcKGTg
JNKKmmyt40/3n3jnyDLMXU5i3SJNXd7YSohcwsVQpaotCJwK80xKSrDRmJeTkaee
+ACgrzIFnLsbix6Q2xwvupjS0JWSdHcnM3Afmq95ZIyVeIPYBoheSajIUMn3WRBG
0BdfNaGbIWVBL3HLI1Vm+xYa6L/Qji5nmt2ldU/QLJf1DrkZDPvVmkX9PpUTJr+m
X4M2yXfsynZyIS5Gpxd+XjyFbyPTGQopJFSuBnynphGFBDYQ/87WSyr2PAS0Jb5/
c3AfQuEtZ6FR46ZI/CPNDC+cVLVY3aIKM2xY+eGLXvlLGAhNwBfzePZDEqHCcPvL
V3wyuZuc80aSVA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:37 2025 by rpki-client