
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: PoVTTUxo3AmuW2ncJBi1oWo+VqcaBvfqbKlGevkbMrw=
Subject key identifier: 31:08:AE:9C:06:07:38:BD:CE:B4:40:6D:9C:06:29:83:BB:F5:8B:6F
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 0199FB7CBD8019DD576A79143EB4982D1745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: /pG4u87iMQGksMjjt8XvKcZ7uKO9fVM25O6ovYFFp14=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bd:80:19:dd:57:6a:79:14:3e:b4:98:2d:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=3108ae9c060738bdceb4406d9c062983bbf58b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:15:c8:42:7b:c1:33:2d:7d:b7:b6:ed:41:
6e:45:26:27:24:9c:9e:65:c1:72:18:da:70:df:c6:
0d:f2:9f:44:25:dc:1c:57:31:ac:a7:4a:c8:33:e0:
2e:07:14:81:0d:1a:a0:79:88:e3:69:15:64:17:c9:
e5:59:58:32:f1:8d:11:c7:5f:49:dc:78:85:e8:b8:
99:67:a7:4e:c1:f9:8b:a3:aa:81:3b:8f:15:14:3d:
92:15:b1:5e:b1:23:2b:5e:99:45:12:ef:72:fd:b3:
57:38:f5:64:46:f5:6d:d3:29:e1:18:8d:32:0f:b1:
a7:cb:a6:00:94:a6:45:84:f7:59:24:10:8f:cc:f6:
11:d1:88:0b:7e:23:cc:8d:0e:af:70:e2:eb:2c:fc:
f3:12:c8:d2:c5:94:bc:07:4d:37:a0:9a:4f:a0:be:
08:73:25:c4:6b:f6:3c:ca:6b:be:c4:79:f6:4a:af:
86:3a:20:a2:8a:11:dd:64:05:be:42:66:04:23:ef:
72:24:af:27:2f:9b:2c:39:3a:4d:f5:41:b2:41:13:
4d:e7:96:cc:d1:a9:e3:a5:ee:65:35:bf:ac:a8:a2:
32:3c:7e:e6:46:56:f4:a9:08:b4:61:70:4e:27:65:
fe:ab:91:a4:06:fe:c4:69:19:1c:95:e3:5e:09:bb:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:AE:9C:06:07:38:BD:CE:B4:40:6D:9C:06:29:83:BB:F5:8B:6F
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:bb:62:ea:3a:d5:20:8d:4c:f9:e5:6c:04:23:6d:d3:7c:
6b:18:15:27:87:8c:45:9d:8f:7c:e7:e2:4d:bf:a4:56:c1:b1:
8d:63:20:c2:b2:f5:2e:f9:59:9f:b0:a8:31:cc:4d:e6:19:66:
3d:2b:fe:21:d4:09:b9:80:6e:bf:78:f5:ce:2b:d9:a7:70:2a:
12:42:49:fe:40:a8:ad:f7:9e:03:79:ff:d2:60:2d:79:02:94:
60:f4:86:03:1a:04:cc:09:b7:a4:3f:76:ab:63:87:79:f2:f9:
55:ea:16:bf:2d:97:08:48:1b:7c:8c:18:59:67:6b:ce:24:44:
15:ad:0a:d4:ab:ce:ad:27:7e:60:b9:88:79:5c:54:31:53:34:
c9:b5:94:eb:5a:11:41:22:34:ce:05:c5:fd:eb:ec:e3:3d:85:
68:36:2f:9d:c7:f6:68:65:93:4a:b5:63:23:56:ac:48:08:6a:
90:29:4b:8e:81:01:33:0b:aa:0e:5c:1f:78:c4:0b:49:39:91:
43:01:34:9d:dc:ee:60:95:84:a7:91:01:25:e6:8f:52:fa:2e:
be:16:af:40:6d:f7:26:74:b9:13:2b:ac:48:a0:fd:5b:94:91:
d1:fe:33:3a:1d:f4:bb:92:4e:df:1f:a1:cb:a7:6d:2d:e4:f5:
1b:8d:b9:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fL2AGd1XankUPrSYLRdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MmExODJkOTFmNDU2ZDg1MDIxMGRiZjcyZGE3ZTQ3NWZi
ZjNjMDgwHhcNMjUxMDE5MDgwMTIwWhcNMjUxMDIwMDgwMTIwWjAzMTEwLwYDVQQD
EygzMTA4YWU5YzA2MDczOGJkY2ViNDQwNmQ5YzA2Mjk4M2JiZjU4YjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe8VyEJ7wTMtfbe27UFuRSYnJJye
ZcFyGNpw38YN8p9EJdwcVzGsp0rIM+AuBxSBDRqgeYjjaRVkF8nlWVgy8Y0Rx19J
3HiF6LiZZ6dOwfmLo6qBO48VFD2SFbFesSMrXplFEu9y/bNXOPVkRvVt0ynhGI0y
D7Gny6YAlKZFhPdZJBCPzPYR0YgLfiPMjQ6vcOLrLPzzEsjSxZS8B003oJpPoL4I
cyXEa/Y8ymu+xHn2Sq+GOiCiihHdZAW+QmYEI+9yJK8nL5ssOTpN9UGyQRNN55bM
0anjpe5lNb+sqKIyPH7mRlb0qQi0YXBOJ2X+q5GkBv7EaRkcleNeCbuZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEIrpwGBzi9zrRAbZwGKYO79YtvMB8GA1UdIwQY
MBaAFCUqGC2R9FbYUCENv3LafkdfvzwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEt
NTgyZjlkMmUzOGIyLzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iNzdlNmEtYWNlMy00ZmYyLWIyMmEtNTgyZjlkMmUzOGIy
LzEvSlNvWUxaSDBWdGhRSVEyX2N0cC1SMS1fUEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV27Yuo6
1SCNTPnlbAQjbdN8axgVJ4eMRZ2PfOfiTb+kVsGxjWMgwrL1LvlZn7CoMcxN5hlm
PSv+IdQJuYBuv3j1zivZp3AqEkJJ/kCorfeeA3n/0mAteQKUYPSGAxoEzAm3pD92
q2OHefL5VeoWvy2XCEgbfIwYWWdrziREFa0K1KvOrSd+YLmIeVxUMVM0ybWU61oR
QSI0zgXF/evs4z2FaDYvncf2aGWTSrVjI1asSAhqkClLjoEBMwuqDlwfeMQLSTmR
QwE0ndzuYJWEp5EBJeaPUvouvhavQG33JnS5EyusSKD9W5SR0f4zOh30u5JO3x+h
y6dtLeT1G4255A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:56 2025 by rpki-client