Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: a2GYMK1NLVOUW95lVoJ5oosf3/zX1WTmzLQ8wpLF5KU=
Subject key identifier: B5:24:28:86:DD:B1:35:91:46:2A:1D:6A:43:5A:6B:F3:76:3C:B0:FF
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 0197B63269ACE64C89AB63867DD1766D4F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:00:46 +0000
Manifest this update: Sat 28 Jun 2025 11:00:46 +0000
Manifest next update: Sun 29 Jun 2025 11:00:46 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: d5ZQgtIQ++g9twMlx3eq+uIop4kpnVOALZS0DdjnTqs=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:69:ac:e6:4c:89:ab:63:86:7d:d1:76:6d:4f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jun 28 11:00:46 2025 GMT
Not After : Jun 29 11:00:46 2025 GMT
Subject: CN=b5242886ddb13591462a1d6a435a6bf3763cb0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:62:98:6c:1d:41:bf:23:e4:1a:12:6e:ce:
ed:81:c6:7e:a2:2e:9b:f4:f4:63:a1:5f:80:71:eb:
8c:f1:73:de:4f:6b:09:99:22:d9:7c:94:84:d6:94:
c5:3a:8e:7d:f3:af:de:45:06:27:28:ab:5a:8f:79:
ac:0c:38:20:5f:21:fc:8d:09:5c:7f:45:71:45:35:
e7:1c:a7:8b:de:eb:7a:ea:46:2e:ff:27:ad:10:be:
07:ef:c8:c0:8c:80:d8:06:79:1d:8b:37:3d:38:8f:
8c:45:a4:f7:fc:00:a0:fb:6c:e0:eb:4f:35:8a:7f:
fd:f0:17:59:28:09:b2:4a:8f:88:a7:23:23:09:be:
37:ed:e4:c5:f6:8c:af:e4:cd:92:a0:d2:04:b2:5d:
f5:b7:e4:2c:76:06:ed:ae:bf:c0:64:f8:72:32:a7:
b6:57:42:2c:ff:e1:c2:99:f8:64:66:98:58:08:de:
94:2b:f4:34:93:f0:16:0f:84:13:ac:3a:7d:73:e9:
4f:f1:49:f3:ec:b8:98:83:35:22:d3:96:77:e5:8d:
02:c8:a6:92:5d:65:13:ea:eb:81:6c:1a:63:ef:c2:
f9:ef:43:1e:54:ec:cc:c2:32:1f:75:b3:09:e3:02:
ac:35:83:4f:b7:ff:0f:69:b7:8c:60:a3:6e:fe:46:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:28:86:DD:B1:35:91:46:2A:1D:6A:43:5A:6B:F3:76:3C:B0:FF
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c3:dd:73:59:5b:8a:71:cb:51:14:a6:44:7e:24:65:f4:e7:
b2:83:d4:8a:fe:8b:ab:e1:14:2e:ec:fd:c4:e1:9c:4f:1b:d3:
d9:8c:bc:39:98:00:6a:92:16:76:f4:5a:6b:27:19:17:38:d8:
c1:ba:ab:90:95:10:8c:64:d9:78:2a:75:ea:e3:4d:82:85:c3:
f6:64:a8:31:86:36:6b:b9:24:ef:9e:1f:9f:0d:3d:04:ba:52:
44:37:46:79:d8:78:aa:bf:5a:16:a1:c7:59:a1:fe:bc:23:d1:
62:46:97:7f:d9:b4:98:60:37:14:8f:85:3c:cf:6b:ce:56:91:
02:bd:ca:78:0a:8f:a7:59:a6:15:4c:0a:64:fb:1c:ff:fb:64:
51:56:c1:78:e4:54:d8:5c:c0:32:fa:f9:9a:33:f9:b4:b8:66:
9c:b0:b2:5e:c4:c4:a5:18:18:06:93:47:80:b6:8f:09:08:fc:
f3:76:45:06:89:d0:1a:c1:8c:5a:4a:e0:5b:88:2f:9a:a9:8c:
3a:3b:a8:db:9d:9f:48:1f:1d:0a:d7:69:95:12:59:b4:8d:1c:
44:82:2e:ea:14:b1:90:f5:53:68:15:5c:8e:e8:d0:48:b4:c8:
10:f0:30:25:1e:02:d4:58:ff:87:a0:49:2d:d5:4e:de:fd:e4:
83:8e:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:49 2025 by rpki-client