Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: dFnzFjqpSh6KLtoyzu8w8ar/5HK4YkQigoEFqW12Gx8=
Subject key identifier: 96:0A:85:3E:0B:F8:33:B2:FD:C6:66:D0:77:84:1B:A8:3C:7F:2D:04
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 0197B74507B2E349EA2A745B41E3F621BA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: AuLdSBH66XSxMVIMy5JarBs/emuUyWnmRiMUsiysiSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:07:b2:e3:49:ea:2a:74:5b:41:e3:f6:21:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=960a853e0bf833b2fdc666d077841ba83c7f2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:de:1d:fe:45:13:58:67:08:09:61:3e:2a:
60:e3:7f:d6:03:97:22:87:e4:e4:92:01:54:3f:a8:
4f:d0:27:64:77:81:e2:d7:db:e0:b7:ac:4a:fb:74:
38:0c:e9:99:13:6d:2e:e4:17:12:2e:56:fc:50:80:
e4:11:24:a8:ed:a8:59:88:a0:9e:39:e4:98:23:2b:
b9:0d:1b:91:53:18:49:04:d6:61:fb:26:b6:49:d2:
d8:76:b2:6c:3c:c6:4d:be:d6:6c:dd:e8:57:e1:89:
4e:d9:32:64:79:23:27:cf:7e:23:a1:ad:f7:fb:cb:
68:a3:56:ac:d4:66:ac:00:2f:1a:dd:c8:45:ba:bb:
68:b8:94:82:89:a8:a1:69:dd:8d:7f:18:d5:7a:36:
81:17:e6:fc:04:55:77:c7:84:48:8f:a5:cb:83:e1:
9a:c0:48:51:ea:05:cc:8a:cc:fc:b3:63:59:1f:6a:
6a:f0:91:cf:f8:3d:d3:ba:08:9b:20:00:2a:d3:fe:
4c:0f:96:30:65:34:bc:46:9c:ea:c4:ac:d1:6d:8c:
be:c9:0c:a7:eb:17:a1:bd:31:8c:59:59:d6:5c:e3:
ef:61:c7:dd:1f:fa:89:e7:47:16:06:cc:6a:9c:57:
1e:2d:80:b2:4f:9f:fc:e2:28:5a:05:cd:28:62:48:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0A:85:3E:0B:F8:33:B2:FD:C6:66:D0:77:84:1B:A8:3C:7F:2D:04
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fe:85:ce:a3:73:f9:ec:d7:0f:d0:09:f6:17:fa:30:b6:28:
7d:31:5a:48:ab:10:a8:32:ae:f0:14:19:22:c0:ad:da:c0:80:
b3:e1:d6:88:75:25:b0:9c:1d:bb:96:95:86:24:85:0e:3f:8f:
bc:44:a0:5c:4e:23:27:41:37:10:61:18:8f:fb:28:fd:d0:01:
95:1a:b4:ba:24:9e:f3:be:13:21:77:64:26:87:54:55:42:47:
c5:09:9d:61:92:62:00:af:cf:2e:ea:5e:af:88:61:24:62:5a:
25:3c:0c:4c:cd:90:48:c5:85:fc:f2:1e:0c:15:da:46:ef:63:
de:80:9e:5e:c9:c2:18:80:60:7f:19:dd:ec:f0:e0:f3:ca:75:
e5:af:ae:9e:83:b9:80:4e:19:d4:e4:f0:04:b0:0c:8f:f2:b1:
57:e8:6c:32:b3:e9:d4:27:53:6f:06:79:66:f3:53:de:76:a4:
83:e8:43:57:d1:37:fe:f7:00:a9:49:b2:ed:49:bb:18:8b:fc:
65:eb:b5:c5:4d:1b:83:ae:2a:a2:76:e7:36:a1:93:78:25:14:
ee:00:ac:d5:8f:06:95:86:0d:a7:de:8e:7c:90:49:5b:e3:c1:
a8:fa:78:4d:48:bc:9c:63:b8:86:65:a6:72:96:39:d5:64:fc:
7b:2a:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:56 2025 by rpki-client