Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: aOC5+955l3t1FgYoE6heTapvsD2FskcUYoH8hW4QDmA=
Subject key identifier: 16:41:3B:60:22:B9:EA:6A:CC:AF:0D:38:93:78:41:E6:FB:01:B8:61
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 01974931437C8A91939EEA5472A82ACE240F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 120E
Signing time: Sat 07 Jun 2025 07:00:54 +0000
Manifest this update: Sat 07 Jun 2025 07:00:54 +0000
Manifest next update: Sun 08 Jun 2025 07:00:54 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: ln7WmCHu4Vp2kXhXZsBJFKSzUJbUxSUo18V4Buix7zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:43:7c:8a:91:93:9e:ea:54:72:a8:2a:ce:24:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Jun 7 07:00:54 2025 GMT
Not After : Jun 8 07:00:54 2025 GMT
Subject: CN=16413b6022b9ea6accaf0d38937841e6fb01b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:08:8f:0b:ba:d8:f4:83:dd:c2:68:26:1a:
5c:88:43:eb:9b:ee:ba:08:9c:db:c1:6a:cc:cb:13:
d9:03:79:9f:31:fb:e3:dd:09:01:fe:19:44:4b:d8:
c1:0d:2c:94:33:ba:83:fa:51:8d:0e:67:b4:bd:0c:
a0:e9:2a:e5:96:57:82:83:46:1a:5e:f5:c8:54:33:
e7:ea:1e:83:6b:c5:6b:e6:fc:bc:0a:fb:29:e6:25:
17:0b:93:fe:4c:46:00:10:45:c9:4d:e4:ba:71:67:
3f:e4:c3:be:c5:7f:1b:36:49:a2:2e:b7:50:cb:ba:
c7:74:23:3a:6e:46:af:72:5d:d5:36:34:0a:3f:10:
4e:fc:a3:fd:62:e1:fb:39:20:3c:8f:d9:6d:c4:e3:
47:21:fc:f8:e9:d9:b5:8b:2f:6e:54:30:fe:41:f2:
ef:3b:b8:fc:83:0e:e0:4a:d2:bb:79:59:f3:bf:6b:
f2:7c:00:20:76:f2:67:0d:eb:4d:ff:b2:77:74:0d:
be:25:be:4a:ac:79:a1:27:f1:f7:8b:e4:cd:62:03:
49:2d:39:6c:6d:7a:1b:d5:d8:2a:58:7e:f2:62:41:
7e:cb:c4:f9:93:bd:b2:2f:09:57:67:20:3c:93:d9:
d2:a3:c8:a4:03:3f:9a:ec:4b:e6:45:65:31:db:db:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:3B:60:22:B9:EA:6A:CC:AF:0D:38:93:78:41:E6:FB:01:B8:61
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:85:0e:29:29:b2:fe:8d:a4:7b:c5:3e:fa:27:87:cc:15:09:
6e:37:94:f2:33:dc:69:72:0a:45:01:d8:67:91:07:a2:71:c4:
49:44:14:53:d0:dd:5d:e8:05:eb:7d:cb:a0:66:4d:b6:08:f1:
f7:b2:65:b3:e3:75:88:c6:de:d8:20:6d:29:2c:58:2f:bc:76:
f2:84:99:a4:1a:d2:2b:e7:14:6b:d4:5c:13:2d:59:d1:7c:f6:
a9:2d:0d:16:2b:ec:b5:96:a3:a9:d1:7b:5f:10:5a:60:f7:3b:
78:75:d2:f5:b7:2d:14:21:a5:02:80:fc:72:79:52:88:10:26:
6d:0d:8e:44:80:9e:59:42:c1:64:6c:85:4b:4f:53:21:26:41:
92:fd:47:31:03:5d:48:95:b4:c5:df:6f:01:e4:eb:7c:60:7f:
63:6f:51:c5:7b:e3:f1:23:a0:cd:07:8d:e1:33:b1:91:54:3a:
10:f3:18:ff:5d:a0:9c:db:05:ee:a5:68:b3:b6:59:00:fa:73:
86:c7:5f:ec:8a:33:50:d5:1c:d2:b2:39:2f:00:94:ad:04:12:
3a:42:6d:5a:a7:c7:38:91:31:3d:2c:f3:8d:1b:8f:8e:c4:87:
59:ef:c6:d7:b6:dd:25:89:f3:62:c0:e4:09:39:80:2f:0b:56:
e8:25:95:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMUN8ipGTnupUcqgqziQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk
ZWE4ZjYwHhcNMjUwNjA3MDcwMDU0WhcNMjUwNjA4MDcwMDU0WjAzMTEwLwYDVQQD
EygxNjQxM2I2MDIyYjllYTZhY2NhZjBkMzg5Mzc4NDFlNmZiMDFiODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoIjwu62PSD3cJoJhpciEPrm+66
CJzbwWrMyxPZA3mfMfvj3QkB/hlES9jBDSyUM7qD+lGNDme0vQyg6SrllleCg0Ya
XvXIVDPn6h6Da8Vr5vy8Cvsp5iUXC5P+TEYAEEXJTeS6cWc/5MO+xX8bNkmiLrdQ
y7rHdCM6bkavcl3VNjQKPxBO/KP9YuH7OSA8j9ltxONHIfz46dm1iy9uVDD+QfLv
O7j8gw7gStK7eVnzv2vyfAAgdvJnDetN/7J3dA2+Jb5KrHmhJ/H3i+TNYgNJLTls
bXob1dgqWH7yYkF+y8T5k72yLwlXZyA8k9nSo8ikAz+a7EvmRWUx29sHmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZBO2AiuepqzK8NOJN4Qeb7AbhhMB8GA1UdIwQY
MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt
ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4
LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIUOKSmy
/o2ke8U++ieHzBUJbjeU8jPcaXIKRQHYZ5EHonHESUQUU9DdXegF633LoGZNtgjx
97Jls+N1iMbe2CBtKSxYL7x28oSZpBrSK+cUa9RcEy1Z0Xz2qS0NFivstZajqdF7
XxBaYPc7eHXS9bctFCGlAoD8cnlSiBAmbQ2ORICeWULBZGyFS09TISZBkv1HMQNd
SJW0xd9vAeTrfGB/Y29RxXvj8SOgzQeN4TOxkVQ6EPMY/12gnNsF7qVos7ZZAPpz
hsdf7IozUNUc0rI5LwCUrQQSOkJtWqfHOJExPSzzjRuPjsSHWe/G17bdJYnzYsDk
CTmALwtW6CWVaw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:37 2025 by rpki-client