Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
File: ygb_JG30EWQ9neNmmBgRLzNiKDs.mft (raw, json)
Hash identifier: tEAPgE+4Oy+wKeQGzViwuGwfQgarE/In5wBrHQPO0bE=
Subject key identifier: 69:8E:C6:D7:CB:07:EA:21:FD:E1:51:1F:AF:72:C4:E0:DF:35:77:5B
Authority key identifier: CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
Certificate issuer: /CN=ca06ff246df411643d9de3669818112f3362283b
Certificate serial: 0196941698E83F6C55704370EAD2B41C9131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
Manifest number: 151F
Signing time: Sat 03 May 2025 03:00:31 +0000
Manifest this update: Sat 03 May 2025 03:00:31 +0000
Manifest next update: Sun 04 May 2025 03:00:31 +0000
Files and hashes: 1: awo4RHTO6esLcGnQz2dZm_GNiNs.roa (hash: Wtuz4yHiSuSzk9zEFHcuKG/jsMVw7812PRakNdadLHA=)
2: ygb_JG30EWQ9neNmmBgRLzNiKDs.crl (hash: QwlrkbYFzGpA8RZRqhQChunv2f1QA0dplDSBvfKqHmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:98:e8:3f:6c:55:70:43:70:ea:d2:b4:1c:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca06ff246df411643d9de3669818112f3362283b
Validity
Not Before: May 3 03:00:31 2025 GMT
Not After : May 4 03:00:31 2025 GMT
Subject: CN=698ec6d7cb07ea21fde1511faf72c4e0df35775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:74:36:1b:bd:d8:3a:7c:1b:86:f5:b9:20:
5f:12:32:cb:13:12:73:73:78:bf:aa:92:1e:2b:33:
3d:b8:05:8c:8e:8a:56:95:b4:df:78:c8:a9:0a:dc:
f9:0f:05:65:77:cc:bd:7f:58:c5:d9:89:97:63:9c:
6a:c8:5c:8c:a6:1d:92:19:ab:dd:c3:30:19:3f:21:
66:40:45:27:91:69:63:82:e6:73:c2:13:53:fc:d5:
7e:de:70:bf:d7:0b:84:ef:9a:8b:07:ed:4f:c2:4a:
29:4a:35:c4:95:de:c5:5e:e0:a9:f1:9a:94:b6:96:
ec:71:ff:fb:f1:a0:4c:9b:2d:33:ca:8d:00:06:cc:
e1:fa:20:f3:e5:e4:2e:72:4c:2d:43:bc:a8:0f:89:
53:d2:cf:e8:22:12:04:85:8b:fe:7d:24:31:9e:8d:
c2:59:2e:b2:7e:59:8a:31:48:0a:41:6e:97:6d:37:
3d:bc:55:f8:f4:10:1c:fc:f9:d9:24:cf:e4:6c:21:
c1:98:30:2e:21:35:2b:23:d3:5a:ed:f3:10:c9:34:
4d:4e:06:1f:76:4d:6a:39:52:9f:56:4c:f4:d7:9d:
00:ec:16:6f:38:58:f2:68:07:82:ca:6f:10:bc:ac:
7c:0b:fa:77:91:86:fd:86:9e:e1:43:1f:d0:0d:c4:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:C6:D7:CB:07:EA:21:FD:E1:51:1F:AF:72:C4:E0:DF:35:77:5B
X509v3 Authority Key Identifier:
keyid:CA:06:FF:24:6D:F4:11:64:3D:9D:E3:66:98:18:11:2F:33:62:28:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygb_JG30EWQ9neNmmBgRLzNiKDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/80a806-0970-49ac-8277-1c43d4c27d6c/1/ygb_JG30EWQ9neNmmBgRLzNiKDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e0:0b:65:8b:b3:d7:68:21:73:c5:b8:da:e7:8d:8b:98:b9:
cd:56:0b:ca:ed:1b:3f:e7:1c:f2:97:f8:3e:ff:33:69:02:63:
54:e9:31:c6:a6:22:38:f4:72:51:9e:ae:ce:27:22:a3:c1:3f:
61:e2:da:e6:7c:c9:55:d7:47:69:8e:dd:e3:4d:5d:53:09:07:
c8:c6:e8:8a:9e:0b:ed:1c:a3:15:95:5e:fa:ca:09:a0:a1:27:
3f:23:0e:eb:6f:72:e0:6b:84:3a:5b:0c:0f:4f:ee:55:93:a8:
5e:f3:ea:69:1a:91:06:09:55:9c:03:1b:04:ab:72:0a:e3:7e:
86:94:a5:59:b1:4c:57:be:6c:be:33:a4:a4:ce:bc:9a:df:2e:
43:be:cb:75:5d:fe:ab:70:b2:2a:c2:fc:51:d6:22:c2:21:5c:
3b:ef:9c:f7:f5:cb:fc:8a:af:8b:07:1f:1a:ac:1c:00:80:d1:
02:12:c7:b5:e9:7f:ff:d3:a7:51:c9:b8:5f:6b:fa:06:d0:43:
67:20:4d:3c:95:f8:07:a2:37:28:aa:a0:42:6b:a5:be:33:c7:
6d:56:6e:32:08:eb:bb:a3:a2:d2:9a:15:af:58:e0:71:15:d5:
b0:35:10:9a:53:6c:7b:0c:53:92:5f:36:2e:8c:74:8e:7c:0d:
48:24:39:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:28:40 2025 by rpki-client