Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: sv1/QO7boEFkhQuPZESIWozZ2qAn+G8J2VobNVDRVWQ=
Subject key identifier: 66:64:B5:DB:67:48:CD:37:28:A4:74:8E:85:EC:CD:8C:41:41:5B:DC
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 01987374315BD4A5F79F8E11E2C8B10C13EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:00:51 +0000
Manifest this update: Mon 04 Aug 2025 05:00:51 +0000
Manifest next update: Tue 05 Aug 2025 05:00:51 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: ens+PHcxdS30bC2I79l3NzWdiTRDzMpEsG4Oyk4Q1tk=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:31:5b:d4:a5:f7:9f:8e:11:e2:c8:b1:0c:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Aug 4 05:00:51 2025 GMT
Not After : Aug 5 05:00:51 2025 GMT
Subject: CN=6664b5db6748cd3728a4748e85eccd8c41415bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:06:c5:16:3e:6f:ed:ea:b8:7d:4a:01:ab:
42:a7:bd:8f:36:4b:21:b5:ba:67:92:46:4b:6c:cd:
5e:72:23:32:7a:dc:ee:28:0f:b2:f4:c2:93:88:85:
26:04:d9:b2:e9:06:e5:6d:79:4a:37:2f:18:fd:8a:
85:ff:12:b8:61:bc:20:c7:56:01:0a:c7:1b:23:06:
de:65:a5:40:dc:be:31:a4:ec:8f:ff:6d:23:c3:df:
2d:9b:d7:e3:af:14:47:55:51:b3:48:4e:e6:6c:69:
a5:dd:9f:28:16:70:a3:ab:85:d0:4f:36:53:28:42:
73:24:8e:fb:52:6d:a1:3a:c6:80:8b:2b:ed:b8:df:
87:6f:4e:be:32:a9:f1:5b:cb:8f:5a:6e:3c:90:96:
63:0f:9f:b6:03:d4:b5:fb:ec:5c:0e:98:ff:c1:38:
02:d2:15:cd:bc:a2:75:7b:31:38:66:70:c2:5c:f1:
36:4c:46:c0:3c:e8:2f:ad:77:53:e6:57:66:0c:2b:
10:4c:d6:d5:c0:f2:0a:01:45:25:4b:f4:f4:f7:6a:
ee:d0:2f:09:c0:dd:d2:c3:68:a8:44:8f:b0:2f:b2:
69:e3:a8:b4:37:b7:fc:4a:d0:be:f4:e2:49:9c:3c:
4d:86:81:ad:10:9a:52:7d:b0:0a:70:e9:1e:8d:78:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:B5:DB:67:48:CD:37:28:A4:74:8E:85:EC:CD:8C:41:41:5B:DC
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:f7:4f:42:b6:11:fe:1f:42:79:b4:dc:6b:e6:76:60:0f:
4e:31:43:d3:7b:5d:2c:30:a4:9a:c2:f3:22:99:df:c6:fb:88:
8f:11:63:22:54:f0:e0:01:5a:61:55:73:95:05:00:54:92:c4:
7c:79:96:bd:71:82:ed:ac:ea:c7:28:14:41:3b:99:b1:99:72:
88:25:38:bd:3c:2e:3d:1e:60:1a:3e:ba:e6:20:38:4d:4a:32:
c8:da:db:a3:01:f1:4b:be:83:1a:a1:34:20:68:66:ec:ac:8b:
d6:06:f1:7f:1a:40:fa:85:48:f7:3b:89:d2:8f:e7:b3:17:cb:
6f:36:05:26:dd:c2:33:e0:04:b7:fb:13:9c:b7:5f:0f:0d:93:
c9:1a:52:75:c8:74:00:2f:0b:6f:e4:55:14:65:e2:ef:34:71:
1f:c4:7a:c9:f2:60:07:43:de:b8:2e:95:a5:35:96:3a:e0:ae:
93:7e:db:74:2b:b0:7e:e4:e3:85:75:7b:db:94:ea:fa:0c:c4:
30:fd:aa:8e:6d:32:af:26:47:f2:3c:61:73:2d:ad:a1:0d:f5:
73:27:ed:e5:a5:8a:66:bd:bd:45:4b:d5:61:ed:ec:80:5e:b4:
ac:37:06:a8:d2:1a:f5:6c:d3:be:e9:53:4c:92:dc:0a:e7:9f:
3a:ac:1f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:49 2025 by rpki-client