Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: vCaN5tUuTZQGYKIsJn3Vb10slUDnpl4QFKpKss+ZQVc=
Subject key identifier: B6:95:8C:76:19:BC:C4:6A:D7:10:33:2B:11:E0:B9:90:EB:18:BC:26
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 019A2140375F0610B8A0FBD7F003FB76DC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 1387
Signing time: Sun 26 Oct 2025 16:00:47 +0000
Manifest this update: Sun 26 Oct 2025 16:00:47 +0000
Manifest next update: Mon 27 Oct 2025 16:00:47 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: 2Mih/ldPzT0JjS8MvyYYAnbuJlpqJMan294u24QsGec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:37:5f:06:10:b8:a0:fb:d7:f0:03:fb:76:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Oct 26 16:00:47 2025 GMT
Not After : Oct 27 16:00:47 2025 GMT
Subject: CN=b6958c7619bcc46ad710332b11e0b990eb18bc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:ee:93:30:db:8b:84:11:28:03:e0:0c:3f:
01:2a:b8:27:ae:a7:a1:9d:b3:9e:0b:5d:14:a8:b3:
3b:31:0a:30:fe:21:80:e9:56:f7:8e:bf:4e:39:26:
ba:34:85:bf:0c:75:60:f9:15:b4:07:8b:e2:25:88:
d7:08:9e:f4:1e:48:4f:ee:af:ad:1c:8b:f0:30:55:
c1:e1:33:d8:80:3a:e5:0e:e3:b4:c4:df:e6:08:54:
6e:6d:98:50:10:1c:b9:65:a7:76:4e:e4:58:25:cb:
53:4a:95:3e:70:f5:a5:66:30:88:ff:e3:68:30:26:
0c:64:2a:e5:2d:05:ad:ad:3b:4f:8b:3d:44:13:46:
84:26:cc:9c:b9:55:9e:67:ec:e3:fe:9e:a9:3f:a0:
8f:b1:31:2f:25:7a:33:f7:81:19:6b:eb:f7:dd:c5:
d7:37:83:f7:d6:18:d5:1b:f3:1c:b6:b4:ee:fc:65:
34:02:bf:26:8f:20:97:c3:1b:67:7e:e8:9e:6c:6a:
48:a3:9b:e3:dc:0f:49:9b:62:2e:80:2b:a7:f9:ed:
bd:b7:16:3a:0c:88:46:9e:61:f1:c1:5b:ee:f2:72:
01:f2:6e:e0:45:55:44:62:c0:32:6c:5e:7e:5d:be:
2f:c7:16:ab:c2:e2:25:c5:6b:5c:95:28:3c:75:63:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:95:8C:76:19:BC:C4:6A:D7:10:33:2B:11:E0:B9:90:EB:18:BC:26
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:05:2d:05:7e:00:30:54:8a:f5:cc:a6:d8:f9:3a:82:ce:
d9:eb:d9:bf:81:aa:5c:65:eb:30:61:08:6d:f2:4f:df:fb:b9:
ed:c9:6f:72:75:72:95:fa:e9:18:e0:60:6e:8f:b9:78:39:32:
ae:a1:a2:56:d8:67:13:97:0c:64:43:d0:8b:d3:cd:41:16:a5:
2f:09:84:06:04:95:3d:ae:f6:48:07:7c:39:82:fb:5f:78:9f:
b1:35:05:82:b2:4a:f7:b4:03:bb:91:3a:f5:d3:3f:b7:48:66:
8f:c7:bd:0f:ce:c3:f8:77:ee:e6:4b:74:12:3f:b3:b3:20:c9:
09:be:ed:7a:1b:e4:5e:fe:b1:89:05:96:d6:0f:08:33:8d:79:
cf:6c:b0:27:0c:fd:67:69:55:c5:99:ac:66:72:e5:30:f0:df:
42:6d:15:fb:d6:e5:3c:e1:de:de:2a:83:4d:5f:62:d1:f9:3e:
21:ec:07:c4:42:fe:00:cd:76:68:91:71:25:d9:a2:2c:5a:04:
d0:df:fe:81:06:5e:70:50:f8:a4:92:ec:1d:28:8f:ef:c1:25:
dc:b2:3c:36:5d:f4:81:4c:9c:27:89:1f:41:19:78:73:f3:e4:
cc:ae:12:e1:d5:e6:fe:ca:fd:cb:23:97:20:81:d1:40:32:e7:
9b:a7:65:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohQDdfBhC4oPvX8AP7dtwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk
ZWE4ZjYwHhcNMjUxMDI2MTYwMDQ3WhcNMjUxMDI3MTYwMDQ3WjAzMTEwLwYDVQQD
EyhiNjk1OGM3NjE5YmNjNDZhZDcxMDMzMmIxMWUwYjk5MGViMThiYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzTukzDbi4QRKAPgDD8BKrgnrqeh
nbOeC10UqLM7MQow/iGA6Vb3jr9OOSa6NIW/DHVg+RW0B4viJYjXCJ70HkhP7q+t
HIvwMFXB4TPYgDrlDuO0xN/mCFRubZhQEBy5Zad2TuRYJctTSpU+cPWlZjCI/+No
MCYMZCrlLQWtrTtPiz1EE0aEJsycuVWeZ+zj/p6pP6CPsTEvJXoz94EZa+v33cXX
N4P31hjVG/MctrTu/GU0Ar8mjyCXwxtnfuiebGpIo5vj3A9Jm2IugCun+e29txY6
DIhGnmHxwVvu8nIB8m7gRVVEYsAybF5+Xb4vxxarwuIlxWtclSg8dWO3ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaVjHYZvMRq1xAzKxHguZDrGLwmMB8GA1UdIwQY
MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt
ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4
LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdA0FLQV+
ADBUivXMptj5OoLO2evZv4GqXGXrMGEIbfJP3/u57clvcnVylfrpGOBgbo+5eDky
rqGiVthnE5cMZEPQi9PNQRalLwmEBgSVPa72SAd8OYL7X3ifsTUFgrJK97QDu5E6
9dM/t0hmj8e9D87D+Hfu5kt0Ej+zsyDJCb7tehvkXv6xiQWW1g8IM415z2ywJwz9
Z2lVxZmsZnLlMPDfQm0V+9blPOHe3iqDTV9i0fk+IewHxEL+AM12aJFxJdmiLFoE
0N/+gQZecFD4pJLsHSiP78El3LI8Nl30gUycJ4kfQRl4c/PkzK4S4dXm/sr9yyOX
IIHRQDLnm6dl+g==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:23:53 2025 by rpki-client