Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: 4rH559NQLTfEMwn98/UPj6064rxZ7B1jC643daJJRak=
Subject key identifier: 31:9A:CD:C5:86:8E:36:02:A7:9F:AD:E8:24:2C:12:88:41:62:C3:54
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 0198D7061E24BC49A8FA18E6EAB2B1C5E091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 13:02:38 +0000
Manifest this update: Sat 23 Aug 2025 13:02:38 +0000
Manifest next update: Sun 24 Aug 2025 13:02:38 +0000
Files and hashes: 1: OA9cjZfM9pcs189DQL3OK7PNscQ.roa (hash: k0wLUi6w93vs71XE/cCMCBIvwa+yuzcb+Mk+I80oin8=)
2: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: //7bsIghA+t4A4qAKXNclkeSQrM73PoiLXNrY3aZT/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1e:24:bc:49:a8:fa:18:e6:ea:b2:b1:c5:e0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Aug 23 13:02:38 2025 GMT
Not After : Aug 24 13:02:38 2025 GMT
Subject: CN=319acdc5868e3602a79fade8242c12884162c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f5:46:5d:bb:e9:4e:8b:2c:b2:05:13:23:a0:
ca:2c:2d:94:82:5b:ab:8a:e9:df:3c:69:65:b2:10:
76:c6:de:e4:50:d2:1b:aa:ea:86:76:06:22:24:99:
b1:1c:84:11:6c:d1:f2:5d:65:d2:25:5e:70:d8:28:
2b:11:f5:d0:28:89:e7:7f:fa:e5:99:e8:fb:8d:12:
8c:7c:10:2d:40:da:db:85:6a:35:a7:dd:9f:0b:fe:
f4:bf:d4:57:9e:1a:ae:ad:d6:55:29:cd:93:7d:f5:
9d:7d:bf:46:4c:87:48:e1:01:b7:ae:6b:81:93:8f:
f1:72:18:94:93:21:9a:2d:40:f9:cf:d3:15:c0:ad:
45:40:bb:50:72:01:58:91:49:93:6b:97:9a:90:5b:
8b:80:44:85:36:27:70:9f:b5:8c:2f:09:cf:e3:1d:
1c:a4:31:13:15:65:e0:3a:12:cf:7f:56:3e:af:3e:
72:88:8d:3f:26:c0:8a:40:a0:f7:30:82:ed:b7:cc:
19:a4:f6:ab:aa:04:e5:1c:65:55:69:e9:4d:9f:90:
a4:b6:1a:72:75:cc:42:fb:45:f3:79:2c:0d:3b:ee:
60:b1:74:00:cf:07:b9:82:85:7b:e8:7c:c9:65:30:
29:4f:82:b0:a5:0f:be:e8:70:7f:32:04:c4:89:2d:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:CD:C5:86:8E:36:02:A7:9F:AD:E8:24:2C:12:88:41:62:C3:54
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cb:ab:83:f6:2c:91:d4:f2:9d:10:e0:2a:65:ff:58:d6:b4:
3e:82:4f:02:d8:26:c2:33:8f:cb:bc:29:5a:7e:90:a7:b5:4f:
46:44:1f:ac:07:7d:e1:47:1a:5e:76:34:cd:fe:a9:2b:5a:cb:
06:a7:01:35:c5:19:16:95:c7:36:3f:12:28:6e:b7:e2:e0:d7:
d0:5d:9a:37:74:19:ef:2b:39:9b:a2:6c:e0:d6:1c:25:7e:6f:
f0:34:93:81:1f:6d:e2:70:66:b2:a7:f0:46:9b:95:b5:2b:e8:
dd:c2:80:88:17:af:1a:12:67:46:52:12:43:17:02:df:06:69:
dd:1b:f8:04:47:a9:4e:35:29:7a:c8:71:fe:35:4f:a4:a2:dd:
79:81:aa:34:35:7d:76:87:b9:a8:ba:06:d2:3a:e2:9a:fa:8a:
ac:5a:15:09:db:2a:87:c6:19:6f:ac:f3:65:72:08:25:24:3b:
6a:7b:95:2e:cb:11:0d:db:be:53:ec:50:a1:46:3b:fb:c3:0f:
1c:a3:58:a0:d9:85:c9:e4:9b:5f:fd:16:39:a8:85:80:31:1a:
77:60:5d:71:35:cf:b4:df:79:68:10:68:e8:63:5a:87:03:c1:
d6:ac:61:3a:2f:f9:ff:f4:3c:de:68:c7:92:67:e3:a8:27:9b:
17:da:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:12 2025 by rpki-client