Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
File: USGZZlSgu08AhYxAKoILtkvglUc.mft (raw, json)
Hash identifier: Og/Y156hvAzPqVReQqTqzMOgK2jjow9S4yK3512m2G8=
Subject key identifier: A3:01:D6:56:1F:43:65:EE:F7:F8:A1:1A:AC:74:0A:70:D0:42:B0:8D
Authority key identifier: 51:21:99:66:54:A0:BB:4F:00:85:8C:40:2A:82:0B:B6:4B:E0:95:47
Certificate issuer: /CN=5121996654a0bb4f00858c402a820bb64be09547
Certificate serial: 019845895AAB5E8B4B887A427D8CC97094D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
Manifest number: 087E
Signing time: Sat 26 Jul 2025 07:01:26 +0000
Manifest this update: Sat 26 Jul 2025 07:01:26 +0000
Manifest next update: Sun 27 Jul 2025 07:01:26 +0000
Files and hashes: 1: USGZZlSgu08AhYxAKoILtkvglUc.crl (hash: ttJxEQ//cmhd8tGsSci5WXOZAKedBaer4blmVxjjoK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:5a:ab:5e:8b:4b:88:7a:42:7d:8c:c9:70:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5121996654a0bb4f00858c402a820bb64be09547
Validity
Not Before: Jul 26 07:01:26 2025 GMT
Not After : Jul 27 07:01:26 2025 GMT
Subject: CN=a301d6561f4365eef7f8a11aac740a70d042b08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:03:62:93:a0:22:7d:7a:0d:a5:ed:22:88:
bf:ab:e9:87:01:c0:44:f3:8d:d1:8e:c2:48:d5:f7:
51:ba:0d:8c:31:0b:b5:f0:75:d6:e1:8a:14:bd:48:
3e:3c:64:b8:69:ca:90:0f:9a:91:10:e4:eb:8e:dd:
b1:98:a6:e8:e9:f2:d1:61:b5:7f:11:21:7a:a5:40:
94:84:a3:0f:ce:a9:13:f1:19:52:c4:61:47:f2:58:
e7:ba:1c:a1:f2:27:03:f2:16:d7:85:ea:41:41:01:
a4:ba:e4:95:a0:17:53:59:51:c8:1d:27:08:f7:df:
1f:40:59:ba:05:1c:d3:c9:de:34:c2:b1:80:62:b1:
c6:71:4b:f3:d7:1b:df:78:6e:1c:3e:9a:1c:98:36:
39:74:1b:65:95:19:e0:f9:d7:f9:c1:7f:95:fb:ad:
1c:90:35:61:ca:7d:a6:42:4c:12:2b:21:5d:4c:11:
f1:dd:53:66:ce:c5:30:b7:19:7a:24:4b:00:e9:33:
b3:0b:d8:e8:0a:77:80:c2:75:30:9f:1e:1e:ed:04:
a8:d2:87:86:16:62:02:ef:8b:d5:0b:93:86:be:4d:
5d:c5:7c:fd:32:60:2c:a1:59:27:23:a1:89:21:91:
10:7a:a6:86:97:a5:3d:f9:37:fb:42:66:44:ef:3e:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:D6:56:1F:43:65:EE:F7:F8:A1:1A:AC:74:0A:70:D0:42:B0:8D
X509v3 Authority Key Identifier:
keyid:51:21:99:66:54:A0:BB:4F:00:85:8C:40:2A:82:0B:B6:4B:E0:95:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USGZZlSgu08AhYxAKoILtkvglUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/351efb-ac27-4957-b896-93b79beccc53/1/USGZZlSgu08AhYxAKoILtkvglUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ad:87:4c:a4:6b:e8:9a:0f:fc:bd:7b:73:8a:fd:07:17:b2:
31:f2:b3:8d:32:1e:7c:e4:88:7f:d7:b7:44:58:39:f4:6d:cc:
47:b9:c8:64:e1:33:cb:f7:62:9b:d8:62:26:0f:d8:6c:59:59:
ce:01:cb:c3:ac:fa:16:9e:1d:57:18:4d:b5:16:55:12:74:1f:
8a:a2:47:10:79:dc:b9:af:2f:55:52:86:1c:c6:8b:3c:63:53:
a7:02:2e:ce:fb:04:31:16:4d:f2:ab:d7:53:3a:ae:ac:06:0a:
a4:7c:a4:60:0e:90:31:28:75:6c:b3:21:db:94:00:60:5a:aa:
df:4e:6a:40:cf:9d:fd:9f:5a:71:8f:6a:d5:ec:ed:83:4c:e3:
d6:c8:d0:0b:26:82:20:d8:47:76:5e:9d:39:66:ae:6f:1d:d7:
11:e6:f1:1d:01:8b:f3:68:ad:e6:0c:d1:0e:df:b6:fa:9b:1a:
75:db:d9:7b:87:4f:28:2c:d6:1c:a0:f3:ea:9e:82:ad:2b:8b:
61:e8:2f:c8:65:a8:ba:ab:65:1f:cc:37:28:14:46:de:97:93:
df:43:0a:31:7c:9f:3b:47:99:9b:78:af:d8:db:d3:dc:14:a1:
31:e5:b9:c4:e0:f0:7a:03:dc:1d:5d:27:e9:01:d9:32:a0:77:
32:92:54:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiVqrXotLiHpCfYzJcJTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjE5OTY2NTRhMGJiNGYwMDg1OGM0MDJhODIwYmI2NGJl
MDk1NDcwHhcNMjUwNzI2MDcwMTI2WhcNMjUwNzI3MDcwMTI2WjAzMTEwLwYDVQQD
EyhhMzAxZDY1NjFmNDM2NWVlZjdmOGExMWFhYzc0MGE3MGQwNDJiMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGIDYpOgIn16DaXtIoi/q+mHAcBE
843RjsJI1fdRug2MMQu18HXW4YoUvUg+PGS4acqQD5qREOTrjt2xmKbo6fLRYbV/
ESF6pUCUhKMPzqkT8RlSxGFH8ljnuhyh8icD8hbXhepBQQGkuuSVoBdTWVHIHScI
998fQFm6BRzTyd40wrGAYrHGcUvz1xvfeG4cPpocmDY5dBtllRng+df5wX+V+60c
kDVhyn2mQkwSKyFdTBHx3VNmzsUwtxl6JEsA6TOzC9joCneAwnUwnx4e7QSo0oeG
FmIC74vVC5OGvk1dxXz9MmAsoVknI6GJIZEQeqaGl6U9+Tf7QmZE7z7v+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMB1lYfQ2Xu9/ihGqx0CnDQQrCNMB8GA1UdIwQY
MBaAFFEhmWZUoLtPAIWMQCqCC7ZL4JVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNHWlpsU2d1MDhBaFl4QUtvSUx0a3ZnbFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zNTFlZmItYWMyNy00OTU3LWI4OTYt
OTNiNzliZWNjYzUzLzEvVVNHWlpsU2d1MDhBaFl4QUtvSUx0a3ZnbFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zNTFlZmItYWMyNy00OTU3LWI4OTYtOTNiNzliZWNjYzUz
LzEvVVNHWlpsU2d1MDhBaFl4QUtvSUx0a3ZnbFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV62HTKRr
6JoP/L17c4r9BxeyMfKzjTIefOSIf9e3RFg59G3MR7nIZOEzy/dim9hiJg/YbFlZ
zgHLw6z6Fp4dVxhNtRZVEnQfiqJHEHncua8vVVKGHMaLPGNTpwIuzvsEMRZN8qvX
UzqurAYKpHykYA6QMSh1bLMh25QAYFqq305qQM+d/Z9acY9q1eztg0zj1sjQCyaC
INhHdl6dOWaubx3XEebxHQGL82it5gzRDt+2+psaddvZe4dPKCzWHKDz6p6CrSuL
YegvyGWouqtlH8w3KBRG3peT30MKMXyfO0eZm3iv2NvT3BShMeW5xODwegPcHV0n
6QHZMqB3MpJUoQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:04 2025 by rpki-client