Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier: Sjs0l0km4jPFm1pODnGs4hBnIVcURRK94Spxp3RAcXo=
Subject key identifier: 2C:C7:07:49:9E:59:B7:54:7D:39:2F:76:DA:6D:8F:5F:12:D1:C0:98
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 0198D6CDA857DC72B56FF05473ED0CDA8F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number: 10BA
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: IjC6Wq0S+wzru8OlTzUMPGw0ozcgTPPLTsIb0d7e0X0=)
2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a8:57:dc:72:b5:6f:f0:54:73:ed:0c:da:8f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=2cc707499e59b7547d392f76da6d8f5f12d1c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:37:8e:40:53:ea:d0:99:b8:75:a5:fb:77:
dc:86:63:2f:1f:db:42:b1:b0:d3:0a:76:20:5e:47:
7f:e8:cf:47:51:86:47:6b:dc:94:f5:ea:55:c8:cc:
51:27:e4:86:47:d2:03:88:76:2f:7b:21:84:0f:c2:
94:52:82:44:68:dd:40:8a:2d:64:56:03:58:cd:87:
bc:ca:d5:de:69:30:ec:33:59:f4:46:3e:12:7e:fb:
3d:33:9d:90:4e:aa:9e:8b:82:96:88:df:be:68:26:
87:06:b9:70:2f:af:fe:5a:88:34:9f:c0:8b:ac:a0:
3b:ba:ee:9e:40:22:3d:ac:7f:ef:37:73:9c:0f:3e:
58:cc:93:06:3b:c2:a6:54:44:0b:fc:a6:09:f9:b0:
9c:05:6e:f4:37:c7:c3:4f:c8:e3:5e:94:c0:60:59:
47:28:5a:5c:34:3e:8d:fa:77:9e:2b:3b:b2:de:df:
87:b5:f5:47:d4:4b:14:6c:47:e8:3b:ab:92:36:d2:
cd:d1:82:e6:23:2c:6a:bd:69:74:4a:9f:16:7e:c4:
cd:71:da:ef:8f:86:0a:c9:12:bd:98:a5:01:5c:dc:
26:26:87:5c:22:05:b1:8c:62:d7:c7:6e:75:32:36:
87:17:71:0a:97:67:77:86:1a:17:d1:d1:80:21:1f:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:07:49:9E:59:B7:54:7D:39:2F:76:DA:6D:8F:5F:12:D1:C0:98
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9d:5e:20:31:b2:34:75:75:85:a4:1d:c3:2a:26:eb:65:45:
9e:f3:7a:9f:f0:ef:d9:8e:da:9a:c9:da:66:f7:86:6e:be:43:
4e:82:00:27:b1:5c:b4:17:42:2c:28:f3:ba:0f:60:41:3d:28:
02:c7:b8:db:7b:05:e4:76:21:b3:c1:96:b8:9d:6a:51:b8:3a:
b8:e5:c1:7f:75:d2:64:d7:c6:0a:33:4e:84:87:d9:50:e8:d4:
94:26:62:07:de:2d:0c:ff:e9:dc:c4:a5:cf:a5:26:17:57:2b:
17:35:76:b0:24:8f:bb:ab:f9:c5:84:40:a0:60:4f:80:d0:c9:
be:93:58:65:d3:e3:29:a6:6e:93:b8:c8:b3:94:d7:9c:64:aa:
b1:96:4f:5b:9f:2b:e8:1c:70:47:27:64:32:3e:98:70:54:ce:
99:69:75:4d:3d:15:6e:b9:b3:82:df:2c:32:8a:b6:e0:00:1e:
94:d6:1b:95:ec:c3:f0:98:f6:ef:fa:8c:0d:d0:c6:f8:99:dd:
df:29:08:c0:bc:3a:86:b0:d9:92:1d:08:ee:1e:4a:32:ec:f0:
cc:94:a9:65:0b:bd:be:f1:2b:10:55:09:f3:f5:87:ea:73:ed:
5d:aa:62:d0:a1:74:8d:9c:e5:88:4d:e2:15:cd:8e:19:94:73:
2f:c8:fe:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzahX3HK1b/BUc+0M2o99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2
N2M3MGUwHhcNMjUwODIzMTIwMDU4WhcNMjUwODI0MTIwMDU4WjAzMTEwLwYDVQQD
EygyY2M3MDc0OTllNTliNzU0N2QzOTJmNzZkYTZkOGY1ZjEyZDFjMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6M3jkBT6tCZuHWl+3fchmMvH9tC
sbDTCnYgXkd/6M9HUYZHa9yU9epVyMxRJ+SGR9IDiHYveyGED8KUUoJEaN1Aii1k
VgNYzYe8ytXeaTDsM1n0Rj4Sfvs9M52QTqqei4KWiN++aCaHBrlwL6/+Wog0n8CL
rKA7uu6eQCI9rH/vN3OcDz5YzJMGO8KmVEQL/KYJ+bCcBW70N8fDT8jjXpTAYFlH
KFpcND6N+neeKzuy3t+HtfVH1EsUbEfoO6uSNtLN0YLmIyxqvWl0Sp8WfsTNcdrv
j4YKyRK9mKUBXNwmJodcIgWxjGLXx251MjaHF3EKl2d3hhoX0dGAIR+2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzHB0meWbdUfTkvdtptj18S0cCYMB8GA1UdIwQY
MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct
OTdmZDc2YjgwODI3LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3
LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlp1eIDGy
NHV1haQdwyom62VFnvN6n/Dv2Y7amsnaZveGbr5DToIAJ7FctBdCLCjzug9gQT0o
Ase423sF5HYhs8GWuJ1qUbg6uOXBf3XSZNfGCjNOhIfZUOjUlCZiB94tDP/p3MSl
z6UmF1crFzV2sCSPu6v5xYRAoGBPgNDJvpNYZdPjKaZuk7jIs5TXnGSqsZZPW58r
6BxwRydkMj6YcFTOmWl1TT0Vbrmzgt8sMoq24AAelNYblezD8Jj27/qMDdDG+Jnd
3ykIwLw6hrDZkh0I7h5KMuzwzJSpZQu9vvErEFUJ8/WH6nPtXapi0KF0jZzliE3i
Fc2OGZRzL8j+ng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:18 2025 by rpki-client