Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: 4+ZYE5xuyQ3P8xjwbkAZAReC+mWPmMSNTI8DL01SDHE=
Subject key identifier: 89:6F:3A:02:7B:25:06:F8:DA:CC:2A:61:87:4B:4E:6E:8A:15:0F:13
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019650ED37396E577325E0241EBFF2F6731A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 02:00:45 +0000
Manifest this update: Sun 20 Apr 2025 02:00:45 +0000
Manifest next update: Mon 21 Apr 2025 02:00:45 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: Ib8uXOW5eGL29+8PiyxWCfdaNk/17cZoVXljGHBXcKc=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:37:39:6e:57:73:25:e0:24:1e:bf:f2:f6:73:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Apr 20 02:00:45 2025 GMT
Not After : Apr 21 02:00:45 2025 GMT
Subject: CN=896f3a027b2506f8dacc2a61874b4e6e8a150f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:d4:cc:f5:8b:4e:c8:0a:dd:fa:da:67:f5:
88:88:18:cd:24:19:c2:bd:65:3a:98:c6:01:3e:32:
7b:ff:e5:2e:3f:fb:8e:d9:42:ee:87:66:40:01:6d:
b0:29:a8:2e:7a:76:19:b0:f1:9a:20:71:c1:a6:7c:
a1:3d:de:c1:0f:d6:b9:74:36:68:fc:cd:9c:6d:47:
fe:f6:9b:b2:18:b3:73:0d:a7:b5:07:c7:23:3f:df:
dd:82:77:87:41:1b:73:68:73:e2:21:c3:f3:90:d8:
29:4d:dc:08:8f:34:db:56:12:16:08:f7:53:08:70:
00:10:5c:07:c3:7e:0c:59:0f:80:61:df:ad:42:2a:
69:05:c4:24:69:33:db:d5:5c:c7:b9:f0:1c:2d:d4:
c1:c6:04:d8:4c:b1:d3:db:26:c0:3c:e8:55:5e:e1:
fc:dd:2d:35:5a:ae:c9:60:35:55:9b:c2:8c:f7:c6:
7a:c6:97:fd:02:80:ae:6d:b5:85:dc:11:61:86:8c:
8a:05:1e:50:ce:43:73:19:cc:61:a1:a2:65:eb:d8:
3b:7e:73:2a:d1:5e:c4:9f:ee:2e:f4:11:b1:96:8e:
32:22:70:ed:71:ff:9e:64:a8:1c:99:3b:e9:83:9b:
5c:4c:a0:17:2b:e9:7f:a6:34:7e:84:19:04:85:24:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:3A:02:7B:25:06:F8:DA:CC:2A:61:87:4B:4E:6E:8A:15:0F:13
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:46:7b:2c:2c:0c:bd:3a:b7:9e:7c:81:7e:d4:e3:6d:2c:90:
8a:99:69:7b:34:b5:c8:0f:b8:d1:c2:bd:e0:47:fe:02:6e:bb:
0a:63:91:c0:fd:c6:34:bf:1a:d0:b7:07:26:0a:11:5c:ff:9d:
a7:96:94:3c:f7:a3:7b:29:43:a2:39:b8:c7:78:1c:1e:28:4b:
4a:d0:ac:3f:b9:70:e4:7b:46:49:ec:17:50:0c:b2:6b:78:af:
e0:33:be:47:77:f1:11:e5:36:3c:53:5c:3b:43:cb:5f:70:87:
d0:bc:9a:0d:35:0e:30:6d:b9:79:e9:23:d1:4e:e1:2a:dd:8f:
d3:88:de:b1:0b:22:bc:6c:1a:fd:7b:74:df:ad:75:00:e3:06:
3d:dc:3e:fe:6b:83:2e:1c:76:92:9b:d2:79:d8:4b:2b:57:cc:
cf:8e:27:ce:e4:89:b4:e0:13:f1:08:ad:37:d2:9a:50:3a:3c:
d4:96:5a:13:02:a5:52:27:9b:1e:0c:d7:df:3f:54:ef:3f:ce:
42:8b:aa:b4:76:db:9f:2b:af:6b:a9:34:ae:7f:3f:b4:58:91:
74:10:2c:e0:58:f3:21:27:9e:aa:63:d3:eb:42:4f:27:4b:b8:
34:11:b1:54:79:dd:10:3e:43:27:1a:77:44:7b:8c:22:b2:54:
55:1a:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:25 2025 by rpki-client