Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: 3NCegM4XliRsLtqMCFs/W9TVuwRV4mGhoLuvm9dF1r0=
Subject key identifier: B2:77:05:6D:A8:92:52:25:42:E7:8B:FA:6F:54:67:D9:35:BE:0A:66
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 0197481E2E216FA6F46B32D7EACFC32D37EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 02:00:26 +0000
Manifest this update: Sat 07 Jun 2025 02:00:26 +0000
Manifest next update: Sun 08 Jun 2025 02:00:26 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: I6q6bxRPNI2rt9kM+YAjDOq+7c3DVWrVlogQ88GtdFo=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:2e:21:6f:a6:f4:6b:32:d7:ea:cf:c3:2d:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jun 7 02:00:26 2025 GMT
Not After : Jun 8 02:00:26 2025 GMT
Subject: CN=b277056da892522542e78bfa6f5467d935be0a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:5b:ba:e8:b9:70:1c:87:1f:75:55:c3:b0:
b8:b6:8e:30:74:25:da:f6:97:33:2a:e1:d8:61:a3:
fb:cd:94:90:c2:f5:0f:f3:6f:b0:27:05:1c:de:26:
55:09:f9:67:66:94:80:e4:09:c8:83:91:12:8f:23:
d2:3f:cd:9e:18:b9:ff:a1:59:53:38:f4:ad:07:12:
94:52:f2:93:5b:64:fb:d1:67:80:c4:f8:dd:37:b5:
53:39:2a:f7:bb:2c:62:09:27:b5:fe:52:7f:14:5e:
65:58:cf:3e:21:c7:2e:d6:1a:88:62:f7:90:21:3b:
ff:7d:10:2a:79:54:88:58:2a:5e:47:ef:ca:9b:a6:
21:82:eb:3d:24:b6:40:75:12:84:50:7f:8a:15:fb:
7c:bc:97:eb:9a:b9:26:fb:91:65:3e:c4:3c:f4:fb:
9d:7b:fb:8f:f9:7c:33:8a:3c:38:e2:9b:4c:3c:f6:
3b:ed:f9:34:89:0f:63:a7:48:5c:1b:24:e2:d9:b9:
0c:b9:6e:74:81:49:6f:ea:27:d0:0f:af:7b:87:3b:
07:2e:96:56:d8:22:78:eb:ae:e2:80:80:6c:f3:77:
32:31:07:db:72:60:34:eb:db:01:ea:1f:82:30:54:
f3:3c:f0:ab:12:61:c5:26:a1:d0:47:7d:d7:cb:86:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:77:05:6D:A8:92:52:25:42:E7:8B:FA:6F:54:67:D9:35:BE:0A:66
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:9f:04:ab:8a:ce:50:fe:d0:65:21:39:44:a6:c6:04:85:
6e:3e:4a:f5:69:5b:6e:84:13:d6:59:a8:d2:cf:49:27:f4:3d:
30:47:36:e9:4f:56:1f:14:cd:6b:e5:15:6f:4e:f5:04:a0:07:
3a:96:b4:e5:01:1a:63:b6:d7:c2:60:e9:3f:c1:4c:55:a6:18:
a2:1e:4e:62:a1:87:ea:82:9d:7e:98:24:c5:62:d2:c0:dc:cd:
13:42:ce:d2:15:29:47:af:50:65:54:75:a1:9a:11:57:63:5c:
7e:98:73:b0:14:97:3e:fb:3c:57:d6:90:6a:fa:d9:d0:47:bb:
dc:49:42:4d:e2:ec:9c:e5:9b:d2:a6:6a:97:06:37:9d:73:ea:
b1:01:6f:f3:e3:a9:08:94:75:d9:b8:c2:80:68:bc:48:63:16:
33:fc:4d:6c:2d:3b:7d:f7:23:3d:28:81:ef:15:00:f1:d4:fa:
78:12:12:0b:18:17:e3:ba:3f:21:a0:1c:4e:c9:48:63:1d:48:
bd:2a:71:82:8b:43:6d:67:b0:ba:66:50:ba:d3:88:3f:d7:13:
97:37:fb:66:12:5f:87:6e:7a:09:86:a1:42:92:80:a5:01:46:
36:12:c8:ce:27:00:13:d3:7a:71:b1:44:1b:6a:be:df:80:15:
75:dd:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:54 2025 by rpki-client