Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: kFWWwHXxlm3jsFVKnZ+paXd67AdVJQRdzqI7GHel7aE=
Subject key identifier: F4:CC:D2:DD:01:4F:E8:34:96:9D:F0:49:A9:54:C4:1F:16:2D:68:B1
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019848F72AB1A19FCE8D707459F392E12DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:14 +0000
Manifest this update: Sat 26 Jul 2025 23:00:14 +0000
Manifest next update: Sun 27 Jul 2025 23:00:14 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: kz7OSUWN2OKjP4S++twfWljz5mqaFx676MBqhkICuy0=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:2a:b1:a1:9f:ce:8d:70:74:59:f3:92:e1:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jul 26 23:00:14 2025 GMT
Not After : Jul 27 23:00:14 2025 GMT
Subject: CN=f4ccd2dd014fe834969df049a954c41f162d68b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:d4:58:1f:00:47:36:d9:7c:92:fa:45:a6:
f3:96:f1:8c:bb:ec:8b:03:f1:f0:f6:06:12:00:1a:
01:24:a3:e2:f5:d8:81:08:8c:8d:5f:60:1b:10:8c:
21:2d:21:c8:9b:21:2c:e1:2e:e3:50:d2:9f:4c:f6:
fc:59:0d:56:96:3b:35:37:16:cd:4a:90:03:93:05:
18:4e:0f:33:f7:2a:74:56:13:d5:91:61:d5:f8:49:
b1:2d:be:79:e2:16:10:22:28:0a:53:e9:26:81:14:
be:00:7f:b1:02:9b:01:16:fd:55:41:fe:17:5b:a9:
52:b6:7b:e4:18:6a:dc:d7:c7:ea:10:27:1e:65:78:
b9:60:f3:65:5c:d8:66:59:ca:f8:f4:5a:aa:ad:ee:
42:3d:21:b7:c9:07:fd:4b:81:39:f3:ba:d5:32:6f:
16:0a:72:48:7d:0e:4b:e5:94:cb:e8:c5:42:ec:13:
6d:71:c0:ca:05:f4:c9:91:5f:ed:e4:02:5e:83:56:
67:25:bd:68:0b:21:8e:72:2c:37:dd:5e:54:54:b9:
c3:6d:76:77:f4:19:9b:87:04:c3:ea:26:53:ff:e3:
10:82:f8:6b:aa:a1:11:26:bf:7e:9a:b4:af:5b:73:
44:c6:ef:94:78:b8:4d:f7:97:fe:98:27:9a:5d:a3:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CC:D2:DD:01:4F:E8:34:96:9D:F0:49:A9:54:C4:1F:16:2D:68:B1
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:33:22:36:4b:45:b4:e6:61:2a:15:18:ed:ce:0a:29:35:72:
7f:65:73:4c:93:9b:8e:0a:b4:da:72:bf:e7:48:df:f0:b4:5f:
b2:69:25:a1:21:00:b9:2c:a1:bd:b7:05:5c:fb:32:ab:4f:15:
75:4a:2e:06:66:34:7a:3d:d3:49:73:5d:77:9c:70:83:0f:b3:
f2:b9:2a:5f:15:ef:9d:22:31:23:20:1b:0d:66:59:6a:ac:7a:
83:21:6a:b1:77:02:ef:cb:20:56:7b:62:28:20:9e:bc:04:d1:
15:96:15:56:a4:2f:0f:8a:25:eb:71:ed:1f:8e:03:e7:98:39:
6c:82:27:1f:ac:c9:31:30:af:57:c4:63:9f:2e:37:e1:36:15:
07:d5:bd:b5:5e:30:2e:81:1e:bd:27:f1:65:85:2c:5c:66:88:
bd:8e:55:35:98:be:ca:88:fc:2e:d7:93:fd:8d:6c:c8:88:ea:
89:65:a9:de:99:fb:9a:ff:55:a5:13:7c:1c:75:fa:d2:7a:55:
94:08:d5:89:a9:c9:ec:71:35:06:21:5e:b2:e6:4d:6a:8d:10:
d8:97:d4:e7:e7:d7:f5:2a:52:62:86:b3:a6:62:e4:77:3f:88:
77:40:05:1d:6f:e3:32:4e:ee:eb:3e:d2:0e:76:11:f0:eb:0e:
d4:f1:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:26 2025 by rpki-client