Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: KhhDsK21yGLAm8AZw3nd3kyWMe1FBDW7/8+KeHTUBDE=
Subject key identifier: E8:31:44:2A:92:DC:9C:42:88:CC:95:DE:39:71:37:DC:3D:47:D7:D9
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 01976CCF60A9523C28B7FE4FB36D3CA1DECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: h9nKJKzTi/hYPV+doTFYbUzyM/6TL/61Jyw55EGFw+g=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:60:a9:52:3c:28:b7:fe:4f:b3:6d:3c:a1:de:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=e831442a92dc9c4288cc95de397137dc3d47d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:fe:6f:36:e3:5a:64:d5:55:b3:17:57:99:
a7:ff:4e:31:b7:78:26:c0:fe:eb:68:fe:a6:57:76:
a8:8b:99:38:79:eb:3b:a4:7f:35:fc:8e:3f:1f:16:
79:ab:05:d5:51:34:56:7e:1c:f2:8e:41:06:04:e6:
37:2a:53:90:ff:3b:c0:14:6c:a1:c0:22:63:7f:d3:
e8:71:48:5d:c3:4c:ba:40:d4:cb:8a:d8:e0:4d:46:
04:df:f1:2a:49:a6:b0:7e:cb:c3:05:b0:43:10:ce:
94:06:35:5c:43:f0:69:25:89:c9:24:b8:23:55:bd:
b0:31:9f:08:f0:a6:cc:00:10:a2:92:ec:e4:5f:a6:
22:71:c1:3e:76:58:08:c9:e2:67:36:0e:5a:78:64:
3e:11:21:58:4a:0a:9b:2a:56:c3:07:84:7e:dc:d3:
35:ee:75:69:b8:78:17:e7:ca:22:cc:ee:72:4b:99:
84:35:aa:0e:3f:5a:4f:3d:4b:0e:fb:c3:4b:c7:89:
3d:07:a8:85:a5:8a:ab:3f:af:15:0f:ec:14:02:46:
61:11:ac:4b:03:14:3c:10:f5:48:de:d8:20:71:86:
60:31:d9:c6:79:74:81:84:a9:7c:14:0a:9c:e6:1c:
63:b0:a7:63:c4:8f:e3:95:fa:d5:53:b7:93:68:fe:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:44:2A:92:DC:9C:42:88:CC:95:DE:39:71:37:DC:3D:47:D7:D9
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d8:db:ff:ce:49:a5:2d:5e:b6:63:f4:68:8c:90:5d:8e:96:
f7:1e:52:23:6d:e9:1b:85:c1:b2:fa:82:2b:fc:04:1c:98:b1:
87:23:3c:eb:14:e4:b3:48:47:9e:08:78:82:cd:a7:f7:1e:a1:
fd:f8:3e:0f:1a:94:d4:9e:11:da:98:35:16:82:64:e6:5b:81:
a9:0f:0b:00:f2:99:7b:64:74:bd:b7:89:1a:14:c2:74:77:79:
c8:28:a9:7f:ef:92:e9:fa:f1:bb:c9:dd:d1:ad:48:09:44:f3:
7f:04:fa:a7:11:90:3b:d6:5f:e0:31:5d:7d:e0:77:e4:ce:bd:
1d:28:3d:3f:2f:ed:c1:45:95:2b:ff:bd:3d:00:26:5e:70:10:
b0:f0:f4:bb:ad:15:07:8c:51:32:45:73:65:ef:06:83:57:f3:
9c:27:46:2e:ce:47:b5:04:fd:76:d1:dd:c6:69:82:ab:bb:db:
09:43:80:6a:69:2b:fc:ae:f2:f0:30:f8:5c:42:1b:b9:7e:67:
6a:65:bc:61:c5:9e:6d:60:3d:67:04:99:c2:2f:10:9d:bf:54:
fe:89:3f:e8:0f:76:d9:9e:3e:d4:02:a0:16:17:13:07:a7:e4:
6f:9d:0d:16:02:01:eb:7f:cd:5a:0d:66:bd:6f:77:0c:f3:18:
a5:2d:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:11 2025 by rpki-client