
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: pV+Ry5Vwz8BIT9cm3RBMxLJLv0H3x6i0yZxEPbfavug=
Subject key identifier: 26:17:C4:C8:EC:E7:FD:3C:E9:05:E5:DE:C5:E8:E1:A7:0C:47:AF:F6
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 0199FC8F7342C3CADCBF760E264A098380F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 1374
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: KzyUnGG2BEfExUHdKuyQLkizviPOrA9Z+J5GuFUrr08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:73:42:c3:ca:dc:bf:76:0e:26:4a:09:83:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=2617c4c8ece7fd3ce905e5dec5e8e1a70c47aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:87:4f:55:9d:6a:ea:61:f0:13:6e:dd:1c:
d7:2a:b4:ca:44:3d:bc:25:c7:0d:4e:d4:e4:f2:16:
30:09:40:9b:08:da:f1:54:da:ae:fb:09:84:d3:9b:
30:92:9a:42:53:68:c2:e2:85:07:f4:d0:ec:22:a0:
e8:39:09:9c:b2:d5:34:d2:ae:31:6f:31:43:cc:5c:
97:f7:04:6f:4e:7d:f1:e6:87:9c:e5:58:03:5d:fe:
99:32:45:8f:e5:04:4c:a5:b5:78:8c:1b:eb:89:10:
fd:e8:43:10:5a:51:b5:90:4a:7c:46:61:5c:31:1f:
74:1a:63:b5:21:c6:06:3f:a9:67:3e:96:a8:2d:de:
34:76:45:7b:f9:65:20:12:76:52:16:95:06:47:11:
08:28:f8:64:53:84:1c:ba:d9:44:0e:14:fc:4b:7e:
7e:65:43:38:ce:d3:e5:11:fc:f6:c2:cf:fd:fd:5f:
b9:87:d7:9c:a3:08:0b:24:7e:e4:e9:50:94:fa:75:
99:cb:82:b3:f9:1c:a2:ae:1b:ae:57:e9:fa:f1:85:
e2:61:0b:22:a1:fd:6f:61:31:d4:b1:85:26:44:65:
0d:c6:5d:ba:96:17:55:f4:a8:05:24:bf:d9:23:c9:
77:cb:72:ee:aa:22:0d:8c:d6:35:74:43:c1:c1:02:
d0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:17:C4:C8:EC:E7:FD:3C:E9:05:E5:DE:C5:E8:E1:A7:0C:47:AF:F6
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:8c:cf:59:b0:7c:9d:6c:e8:5a:c3:6b:ab:b3:f5:0a:8e:
ed:b6:64:25:19:60:fb:96:2c:ee:49:d2:ab:8c:2e:0c:1c:db:
a3:e2:c0:4c:b7:33:9d:ce:fe:15:21:ce:53:9e:72:2b:70:70:
81:95:73:fb:fa:b7:da:9a:0e:e8:40:8c:ec:db:64:88:ef:c8:
1c:51:18:ab:4f:e9:f6:c0:cc:9b:b6:ac:93:46:33:f3:98:08:
21:8f:8e:48:6d:6f:56:06:5b:40:6e:68:e0:3a:12:af:c5:92:
28:ac:e3:63:d4:37:02:cd:fe:e4:b1:21:a4:75:f9:93:59:0b:
2c:17:fe:7d:08:ba:b3:08:1c:83:c0:cb:d6:f2:8b:d8:e4:f3:
35:74:3f:fa:94:25:70:0e:1d:4b:d0:79:c8:91:22:4d:b0:a7:
3a:18:60:09:de:a8:84:4d:49:72:9a:18:4d:c2:d9:e4:5d:0c:
c7:cf:fc:a0:85:79:f6:12:9b:d8:f7:ed:1c:32:e3:de:7e:31:
40:c8:f6:d3:55:74:ff:79:46:54:24:29:d1:ba:cc:66:1b:fa:
ac:4c:4c:59:ae:99:ce:99:a0:bf:4b:30:28:65:57:5a:58:ec:
13:f3:ae:d5:45:f8:b8:25:e7:e9:49:d6:ad:5c:cd:d5:05:53:
59:59:51:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3NCw8rcv3YOJkoJg4D1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjM5YTcwMmI5YjQ0MTE5ZmMwZWZiMDA1MjRlN2RkMTJk
ZWE4ZjYwHhcNMjUxMDE5MTMwMTIzWhcNMjUxMDIwMTMwMTIzWjAzMTEwLwYDVQQD
EygyNjE3YzRjOGVjZTdmZDNjZTkwNWU1ZGVjNWU4ZTFhNzBjNDdhZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoICHT1Wdauph8BNu3RzXKrTKRD28
JccNTtTk8hYwCUCbCNrxVNqu+wmE05swkppCU2jC4oUH9NDsIqDoOQmcstU00q4x
bzFDzFyX9wRvTn3x5oec5VgDXf6ZMkWP5QRMpbV4jBvriRD96EMQWlG1kEp8RmFc
MR90GmO1IcYGP6lnPpaoLd40dkV7+WUgEnZSFpUGRxEIKPhkU4QcutlEDhT8S35+
ZUM4ztPlEfz2ws/9/V+5h9ecowgLJH7k6VCU+nWZy4Kz+RyirhuuV+n68YXiYQsi
of1vYTHUsYUmRGUNxl26lhdV9KgFJL/ZI8l3y3LuqiINjNY1dEPBwQLQAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYXxMjs5/086QXl3sXo4acMR6/2MB8GA1UdIwQY
MBaAFFEjmnArm0QRn8DvsAUk590S3qj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUt
ZDQ0ZmU2MGQxOTQ4LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xNzA3MzgtNGZiNS00MjkzLWE5MjUtZDQ0ZmU2MGQxOTQ4
LzEvVVNPYWNDdWJSQkdmd08td0JTVG4zUkxlcVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEeMz1mw
fJ1s6FrDa6uz9QqO7bZkJRlg+5Ys7knSq4wuDBzbo+LATLcznc7+FSHOU55yK3Bw
gZVz+/q32poO6ECM7NtkiO/IHFEYq0/p9sDMm7ask0Yz85gIIY+OSG1vVgZbQG5o
4DoSr8WSKKzjY9Q3As3+5LEhpHX5k1kLLBf+fQi6swgcg8DL1vKL2OTzNXQ/+pQl
cA4dS9B5yJEiTbCnOhhgCd6ohE1JcpoYTcLZ5F0Mx8/8oIV59hKb2PftHDLj3n4x
QMj201V0/3lGVCQp0brMZhv6rExMWa6Zzpmgv0swKGVXWljsE/Ou1UX4uCXn6UnW
rVzN1QVTWVlRBA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:56 2025 by rpki-client