Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: qVvXjujznjwaio/jn6XHvchRLKrt3pLaI4y6v8UdMws=
Subject key identifier: 57:3B:B6:8D:0E:8A:58:21:A1:68:5B:7C:BC:77:34:CD:FF:7F:B7:D7
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 01992443EB3C9773D56DDBBF4E021BFEEF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 1304
Signing time: Sun 07 Sep 2025 13:00:54 +0000
Manifest this update: Sun 07 Sep 2025 13:00:54 +0000
Manifest next update: Mon 08 Sep 2025 13:00:54 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: obHtD613pw2LC2+5okAvO4zFwrt0Io7PyiwNvt+U/hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:eb:3c:97:73:d5:6d:db:bf:4e:02:1b:fe:ef:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Sep 7 13:00:54 2025 GMT
Not After : Sep 8 13:00:54 2025 GMT
Subject: CN=573bb68d0e8a5821a1685b7cbc7734cdff7fb7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:53:63:1c:33:9f:0a:b5:73:eb:23:94:4e:
e4:94:7f:20:b6:62:a8:4e:8c:23:28:1c:eb:6a:e0:
78:62:b6:0e:a7:4c:34:90:b1:bd:1d:ac:31:59:69:
f2:f0:e2:e4:9b:56:f3:f6:a1:15:2f:17:21:f1:79:
c4:2f:d3:99:22:bc:3a:a4:ff:28:cf:ea:3f:44:ac:
82:07:6d:d3:7f:30:18:87:17:80:fa:08:96:af:a0:
62:30:1d:d1:a6:79:4b:41:e3:84:a6:77:d7:10:b3:
0d:16:41:45:a9:57:31:5e:6b:0f:64:ed:15:77:7f:
91:94:50:0b:18:1b:f6:d9:d8:cd:80:56:bf:f9:00:
2c:50:ec:3b:3e:c2:18:9a:dc:7a:aa:a1:9a:5e:eb:
36:eb:f1:a7:33:15:7a:32:75:9b:6b:b9:e2:27:17:
91:d4:d9:70:35:85:ce:c1:d4:b3:ed:8f:21:03:7b:
cf:6e:44:49:b4:f0:9b:ac:de:76:a0:e4:51:26:06:
e2:7f:e8:42:e7:6e:29:0b:87:b1:f7:2d:84:0f:50:
68:a6:bd:d9:ee:9a:67:03:86:1e:7f:e1:c4:84:35:
6e:a4:45:7a:dd:31:ff:01:1b:1a:db:2e:05:83:d0:
9f:43:8c:b2:bd:48:4e:c6:f7:a6:81:29:7f:c1:17:
25:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:B6:8D:0E:8A:58:21:A1:68:5B:7C:BC:77:34:CD:FF:7F:B7:D7
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:ad:9d:b7:2b:ba:7a:14:69:03:26:a7:05:b6:75:46:9a:
2a:67:a2:f6:a7:97:ef:79:d0:87:96:eb:8d:ae:85:4b:67:14:
8b:26:cb:c3:bf:82:40:0e:43:23:86:87:02:b0:9e:5d:a4:16:
ea:0d:93:01:5d:6d:05:35:2f:3c:92:d8:5b:1e:03:0b:58:86:
e3:bd:29:af:ed:eb:eb:e0:9e:22:82:b5:3f:e1:c1:03:74:e9:
f2:eb:c0:32:bb:88:bf:72:25:94:dd:98:b1:23:34:92:71:99:
e9:8d:50:d5:4a:4f:0d:31:c8:bb:e3:d4:59:8c:7b:ea:c6:38:
9b:cf:79:55:f7:45:86:56:43:96:cd:ab:28:a6:52:73:cc:d8:
1e:44:07:67:68:60:05:e4:04:a8:19:1e:10:e0:07:ea:85:d1:
b7:f2:87:8c:c3:25:fc:e6:c4:c6:6a:f0:1a:3e:f8:33:d0:34:
69:ee:0b:70:17:dd:0f:fa:1b:43:ea:9d:a6:ca:4e:fc:e4:94:
44:81:cf:6a:57:9a:51:64:16:10:fa:05:38:37:d8:a5:84:92:
a8:44:c4:2c:bd:19:cc:c2:26:e9:7f:b6:4c:5f:bc:40:f2:de:
64:f6:12:9e:60:e7:a1:d0:d4:22:98:47:98:30:4b:45:8e:b2:
06:65:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:00 2025 by rpki-client