Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: /e4rrPsZX5Udt22W/0MnyKxbVEvFe37sxgUth0fAi+o=
Subject key identifier: C7:D7:67:C5:52:70:36:9F:00:E0:92:E9:80:38:22:22:78:FF:43:F0
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 0194C507F066FCC8A6CD2187FF2757C180A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 05:00:19 +0000
Manifest this update: Sun 02 Feb 2025 05:00:19 +0000
Manifest next update: Mon 03 Feb 2025 05:00:19 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: UrcM53bvs9ipRO2s+HvMKsXSBGYdkeG9hmKilXK4O+Q=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:f0:66:fc:c8:a6:cd:21:87:ff:27:57:c1:80:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Feb 2 05:00:19 2025 GMT
Not After : Feb 3 05:00:19 2025 GMT
Subject: CN=c7d767c55270369f00e092e98038222278ff43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:e8:5c:b9:4d:33:ee:cb:48:14:d5:0b:c6:
cf:0b:e8:32:0d:b4:ef:62:6b:8b:67:ec:dc:c7:20:
f7:37:82:7c:80:f1:95:45:79:70:af:0d:c2:3d:ae:
6a:81:ce:6a:df:bf:d7:a2:5e:b4:28:46:8b:e4:ab:
cc:34:94:a6:f0:16:a3:95:9c:3b:1c:a8:3b:05:da:
22:8b:74:f3:67:51:32:c2:91:99:58:df:83:af:25:
55:61:49:f1:db:e0:56:c6:ed:fc:80:45:47:a9:f5:
84:f0:eb:dc:99:bc:87:9b:7f:99:3b:36:b7:53:38:
06:a0:4c:5d:f6:ed:ac:84:57:b0:0c:07:fc:55:94:
6e:d6:c2:ee:b7:59:08:5d:c3:71:ef:44:cc:08:01:
dd:33:d6:b0:a9:be:f7:9d:a6:d1:64:c4:c5:2a:3c:
99:4d:6c:ad:35:ab:c3:0a:35:ca:82:1d:74:c4:50:
10:03:e5:1d:35:9d:4f:67:17:0e:20:1a:2f:18:8c:
7a:4d:5c:02:d3:f3:ad:8c:78:03:18:f9:98:c1:48:
87:34:0f:43:38:fd:db:a6:cf:47:dd:b4:d1:3b:76:
35:3b:db:d8:f6:7f:9d:a7:0d:ac:86:c1:72:ea:29:
cf:77:6c:a8:d7:b8:22:aa:90:3e:4b:a6:30:55:e1:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D7:67:C5:52:70:36:9F:00:E0:92:E9:80:38:22:22:78:FF:43:F0
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:99:53:e6:ca:e1:af:fa:62:4c:dd:98:e9:b5:9e:65:dd:8d:
73:a5:97:d0:f0:d4:62:ba:a9:0b:0f:27:39:78:c4:2b:9a:f7:
11:b8:d4:d9:eb:04:49:7a:fb:c1:3c:24:1b:d8:db:55:ba:9f:
00:97:74:bb:3b:f9:df:77:1b:a1:48:a5:ab:d5:cf:b5:9e:e1:
39:ef:5f:3b:46:51:99:ba:71:45:d0:86:ab:4f:fe:d6:6d:52:
3f:bb:30:a4:1a:bf:33:cb:42:dc:e5:1c:59:1a:28:df:84:de:
8f:f7:3b:0f:1e:06:40:67:40:a8:e4:e6:59:08:70:92:af:a3:
12:eb:ce:e5:29:4a:0f:05:19:fd:a7:bb:8d:6a:dd:95:b4:65:
fd:4c:35:31:67:34:24:69:61:41:fe:c8:4b:2a:d9:86:aa:97:
b0:7b:bd:9c:37:0c:dd:d0:61:0a:84:82:fa:26:d8:8a:a5:1c:
db:06:41:36:c0:bb:bf:bc:8e:74:3b:d7:8f:a3:ae:57:48:47:
a0:02:d5:11:af:99:2f:09:45:e2:10:24:f0:b0:e8:70:0e:ae:
e9:41:f5:09:2a:a7:32:55:be:f3:2e:84:93:af:63:ee:aa:b4:
99:b4:c2:f5:4b:8c:f3:73:2e:eb:5d:b4:ac:bb:1e:04:01:f3:
e6:94:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:49:28 2025 by rpki-client