
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
File: YictaPs4lesim2j41DNBJLlnxw4.mft (raw, json)
Hash identifier: Uw27zZVEBMWpSl/ROPSh3Ox4ZUbHIzPMI9gT33zfBO4=
Subject key identifier: 06:7B:23:C2:44:6A:44:3A:6B:83:B4:C2:DE:91:31:79:34:FF:B9:98
Authority key identifier: 62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
Certificate issuer: /CN=62272d68fb3895eb229b68f8d4334124b967c70e
Certificate serial: 019849D3C3B907BE085443145CEDB6385549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
Manifest number: 1071
Signing time: Sun 27 Jul 2025 03:01:11 +0000
Manifest this update: Sun 27 Jul 2025 03:01:11 +0000
Manifest next update: Mon 28 Jul 2025 03:01:11 +0000
Files and hashes: 1: YictaPs4lesim2j41DNBJLlnxw4.crl (hash: S3SyvNvJXt9Az+PerOD0FX7b0i4zFUizhzGcyTOM9mg=)
2: jAy4_Ymq4atio4rfM8yRIcRTRwE.roa (hash: 8iJJZ/DLx7ohdvqNM28zrXasDtxuAcByx5qRu+5H6Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c3:b9:07:be:08:54:43:14:5c:ed:b6:38:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62272d68fb3895eb229b68f8d4334124b967c70e
Validity
Not Before: Jul 27 03:01:11 2025 GMT
Not After : Jul 28 03:01:11 2025 GMT
Subject: CN=067b23c2446a443a6b83b4c2de91317934ffb998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:38:dc:24:95:c3:2f:82:f2:c6:09:18:2f:
b1:4b:37:54:fc:33:aa:96:b7:79:bc:a2:cf:27:5f:
5c:1a:6c:27:3e:7e:e7:03:9d:da:5c:78:36:1b:bc:
56:5f:b9:c2:53:9a:e9:47:a8:0c:59:4f:be:ae:ab:
d6:d4:74:d0:78:44:91:42:26:7c:ba:83:73:61:44:
07:d2:63:10:59:0e:31:61:42:ce:c5:bc:28:47:8d:
0f:60:67:48:fe:4c:b7:4e:fa:b7:4a:63:b9:8e:34:
6a:af:88:ea:5b:f9:82:50:51:d9:03:cb:51:c3:59:
18:51:5e:99:ce:a8:0d:d6:7a:f1:4d:b4:c3:32:3d:
a2:12:30:3b:28:75:a6:18:f6:f8:9a:82:e5:a2:66:
53:12:24:7b:67:72:2a:92:f8:04:9b:93:1e:c6:67:
c0:18:e4:a6:63:ed:7a:94:6b:f4:97:74:a7:89:1e:
fc:0a:87:7f:56:9f:0e:bb:9b:ac:73:ba:fe:b9:6c:
65:fc:07:ed:84:29:61:2b:a0:0e:23:73:ad:53:cb:
18:79:e9:80:6f:51:08:70:85:00:b1:31:1e:74:d9:
41:43:64:08:c8:99:72:7b:0c:ca:05:5f:24:67:e4:
f4:7a:b5:00:3b:96:3b:b3:7c:a5:ec:a7:84:08:5d:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:23:C2:44:6A:44:3A:6B:83:B4:C2:DE:91:31:79:34:FF:B9:98
X509v3 Authority Key Identifier:
keyid:62:27:2D:68:FB:38:95:EB:22:9B:68:F8:D4:33:41:24:B9:67:C7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YictaPs4lesim2j41DNBJLlnxw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9312a2-da20-483f-9797-97fd76b80827/1/YictaPs4lesim2j41DNBJLlnxw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:4d:21:a4:fa:67:3c:06:9a:58:fd:e8:05:00:9b:f9:27:
19:4b:48:ab:7c:15:73:18:94:a6:5f:63:e1:5c:04:66:07:cb:
21:78:18:37:7b:6f:b2:d4:01:3f:6b:68:e0:ef:df:02:23:5e:
c1:2c:0a:67:02:d9:83:22:5b:d6:98:d8:67:9f:79:82:77:52:
a6:a4:3a:f0:c0:95:55:9e:90:0a:94:31:2d:68:e9:cd:9f:2a:
4f:4f:c4:4a:9e:29:16:f2:16:f5:a6:b3:1f:01:48:b5:42:25:
98:75:60:85:d3:e2:20:e9:1f:ea:b8:66:33:6f:34:4b:55:2b:
f8:b4:02:1b:78:4f:d0:ef:57:9c:04:bf:e8:7d:78:bc:a6:d5:
ad:06:8a:96:f4:5b:d5:8f:99:03:09:39:a0:0d:48:9d:3e:3a:
d5:6a:3a:18:c2:96:10:02:7e:ba:e4:be:6c:00:c4:ad:83:09:
20:76:3e:ea:cc:46:f1:0c:93:bb:37:c6:36:1f:3b:c7:63:18:
06:a1:93:24:35:5f:48:16:98:14:c1:60:83:9a:3f:8c:d7:84:
59:62:2b:0b:ee:06:ea:46:dd:7c:18:9b:46:07:a3:43:fa:ef:
22:40:2f:63:99:f8:18:ea:85:20:d8:00:5e:35:0b:1f:ed:3c:
e8:f2:b2:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ08O5B74IVEMUXO22OFVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjcyZDY4ZmIzODk1ZWIyMjliNjhmOGQ0MzM0MTI0Yjk2
N2M3MGUwHhcNMjUwNzI3MDMwMTExWhcNMjUwNzI4MDMwMTExWjAzMTEwLwYDVQQD
EygwNjdiMjNjMjQ0NmE0NDNhNmI4M2I0YzJkZTkxMzE3OTM0ZmZiOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AY43CSVwy+C8sYJGC+xSzdU/DOq
lrd5vKLPJ19cGmwnPn7nA53aXHg2G7xWX7nCU5rpR6gMWU++rqvW1HTQeESRQiZ8
uoNzYUQH0mMQWQ4xYULOxbwoR40PYGdI/ky3Tvq3SmO5jjRqr4jqW/mCUFHZA8tR
w1kYUV6ZzqgN1nrxTbTDMj2iEjA7KHWmGPb4moLlomZTEiR7Z3IqkvgEm5MexmfA
GOSmY+16lGv0l3SniR78Cod/Vp8Ou5usc7r+uWxl/AfthClhK6AOI3OtU8sYeemA
b1EIcIUAsTEedNlBQ2QIyJlyewzKBV8kZ+T0erUAO5Y7s3yl7KeECF2IgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ7I8JEakQ6a4O0wt6RMXk0/7mYMB8GA1UdIwQY
MBaAFGInLWj7OJXrIpto+NQzQSS5Z8cOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTct
OTdmZDc2YjgwODI3LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My85MzEyYTItZGEyMC00ODNmLTk3OTctOTdmZDc2YjgwODI3
LzEvWWljdGFQczRsZXNpbTJqNDFETkJKTGxueHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg5NIaT6
ZzwGmlj96AUAm/knGUtIq3wVcxiUpl9j4VwEZgfLIXgYN3tvstQBP2to4O/fAiNe
wSwKZwLZgyJb1pjYZ595gndSpqQ68MCVVZ6QCpQxLWjpzZ8qT0/ESp4pFvIW9aaz
HwFItUIlmHVghdPiIOkf6rhmM280S1Ur+LQCG3hP0O9XnAS/6H14vKbVrQaKlvRb
1Y+ZAwk5oA1InT461Wo6GMKWEAJ+uuS+bADErYMJIHY+6sxG8QyTuzfGNh87x2MY
BqGTJDVfSBaYFMFgg5o/jNeEWWIrC+4G6kbdfBibRgejQ/rvIkAvY5n4GOqFINgA
XjULH+086PKy2w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:44:13 2025 by rpki-client