Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: EmTBkIr/Mup4MY6KetOWBLOYyGpB4W/virjrmmDl5iI=
Subject key identifier: 7B:97:E3:B2:F8:91:11:E8:3B:5E:F3:3F:EE:09:F4:9D:A3:8A:FD:4C
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 019A7149D7E179D65E147AEBFCC2F4567769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: 6uUaRX5YWXUlJP9rGlHNt8NRs5kDENPwHQR4NTWFdhw=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d7:e1:79:d6:5e:14:7a:eb:fc:c2:f4:56:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=7b97e3b2f89111e83b5ef33fee09f49da38afd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:2c:ef:c5:c2:88:a5:ae:de:ba:04:e4:68:
ea:4b:72:05:b1:7f:8f:ce:08:be:29:72:c8:ee:52:
8b:5f:0b:0b:af:8d:81:03:a6:85:ec:5a:85:4c:21:
f6:0f:d7:b7:a9:e0:50:2e:3d:9e:04:f4:32:71:a0:
ab:b9:a6:86:d3:52:67:11:12:41:40:68:75:cf:a9:
ed:a8:cc:cc:8a:02:1b:75:2e:0a:a5:37:bc:dd:27:
db:19:15:84:3a:00:b5:f8:2b:41:fc:be:ac:ab:b3:
a1:8d:26:5e:ea:80:e1:8b:46:60:93:21:63:e5:59:
8b:7f:3a:fa:7b:f0:df:1e:f0:6c:77:c6:46:7e:87:
5e:ec:d7:db:4d:17:f6:c1:30:8d:f5:25:b3:5b:22:
d4:c6:11:8f:cf:f0:9f:1b:43:af:df:47:6b:2c:ff:
96:29:be:6e:bc:b4:bc:5a:6e:80:ed:d8:f9:03:23:
92:60:0a:b4:30:05:ea:b5:1d:d6:61:a3:79:37:48:
7d:e6:f6:7f:57:a9:47:18:b5:27:af:df:87:07:01:
d9:5e:49:76:c4:e1:7d:04:a3:30:68:fa:2a:e9:82:
6d:68:04:3e:59:9d:13:bd:d3:14:22:2b:cf:0c:99:
c3:53:82:3a:6a:92:ab:0f:70:13:5d:b6:34:b0:5e:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:E3:B2:F8:91:11:E8:3B:5E:F3:3F:EE:09:F4:9D:A3:8A:FD:4C
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:61:39:e8:27:25:91:90:ca:d6:fd:41:28:54:9b:83:2c:
91:d6:dd:8e:9d:8e:9b:4d:20:88:13:ee:49:fb:84:f0:df:66:
76:84:51:a1:e2:e5:57:0f:1d:69:e0:1f:a0:36:ca:20:54:6c:
ab:ac:21:2b:ec:d5:1b:4e:11:4f:1a:55:ec:40:1d:ae:2b:8c:
6b:aa:5c:4a:35:12:9d:91:00:cb:65:92:4a:ed:d5:2a:1c:b4:
b1:23:70:c0:01:5d:b9:54:23:5f:4c:42:1e:d7:63:78:72:cc:
97:de:69:0b:e3:3f:ec:c1:7f:9c:02:00:e0:ee:55:19:e4:3a:
ab:e4:48:59:0f:d2:7d:8d:7a:80:40:19:84:a3:7b:fe:a1:60:
a8:f0:92:56:c3:09:a2:21:4d:16:6e:32:90:3f:e6:a5:b2:04:
32:00:f1:ac:49:4b:ff:ab:d0:73:c1:76:3b:78:33:9b:8d:2c:
21:05:b8:c4:0b:e0:71:f9:4e:b2:ae:45:ac:4f:85:49:c7:99:
0f:e6:f8:70:6f:97:25:14:d9:c8:9e:96:ee:93:21:60:04:f5:
91:ad:df:40:43:ea:d5:89:f5:d3:cc:0b:88:0e:e8:f3:32:6f:
31:fa:a2:88:d0:c8:d6:15:0e:38:cb:50:3e:2a:46:a8:3c:7c:
e1:71:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:48 2025 by rpki-client