Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
File: JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft (raw, json)
Hash identifier: bQxujizB7RpJxPFxY6O7erDJpNchOtiUsR26OGX/GXU=
Subject key identifier: 02:69:12:E2:81:4C:EF:78:B7:60:E1:0D:EC:5A:C7:3E:94:8A:7F:DB
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 0198D5F17C77DCC40C39DDA9D0BFF82121DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: AuVvPbpIxYfbjHQfau6WKQEGa-g.roa (hash: U6m8+4Sl84CkDxQZPw+ZQm1IJSjlEAy/sYjRvvU6Ths=)
2: JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl (hash: eyWqWxkyE0BzUmo+WeodXcjjY/hg3StCGCyAjkzyjyI=)
3: dtGqDCamv_hVVWZjpqsIRYZCyw8.roa (hash: eV1f95aHCVJX6WIYYc+AMUUHYQd1RjaDWI8sAgDgSqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7c:77:dc:c4:0c:39:dd:a9:d0:bf:f8:21:21:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=026912e2814cef78b760e10dec5ac73e948a7fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:aa:c8:0c:71:19:49:6e:ec:7d:68:88:72:
43:6b:26:64:5a:e2:b3:1c:1b:82:98:51:7c:4e:bd:
74:e0:32:27:3e:2e:35:b9:60:d3:22:6b:e2:ce:2e:
e8:0f:41:0b:c2:52:98:4d:7b:0a:14:e6:9d:a9:6a:
a9:a0:8c:bb:e2:9d:f9:e4:56:10:45:44:d2:dc:97:
5c:26:23:75:15:d9:cb:ff:47:5f:5b:22:db:81:38:
31:c5:52:45:2c:88:b4:88:b1:20:3c:ce:79:0d:cd:
ef:d0:9b:35:fc:cc:59:7c:26:8d:75:6f:6e:b3:31:
29:ac:45:de:ed:0c:19:5b:e2:c5:22:30:61:8b:bb:
2b:32:31:a6:ed:45:09:10:2e:cb:8b:32:71:8f:80:
84:69:51:94:c3:be:f9:5a:61:fb:07:28:b3:74:67:
50:5c:a8:69:6c:55:91:1d:30:42:62:d3:71:07:7f:
81:55:4f:36:99:b6:52:d8:dd:07:6e:8d:7d:0c:a9:
ae:06:4a:b8:5b:24:31:e7:2f:c2:02:8b:89:d6:32:
28:65:e4:56:9a:c7:03:b0:1c:9a:bb:e2:82:40:f8:
57:1d:07:0d:40:72:9d:07:53:59:a7:12:f4:b0:e9:
00:99:0b:cf:73:21:97:c2:b2:a4:93:70:da:29:ec:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:69:12:E2:81:4C:EF:78:B7:60:E1:0D:EC:5A:C7:3E:94:8A:7F:DB
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:2a:36:d9:1e:07:32:e1:2f:85:83:2e:f4:e6:21:98:2b:
a2:89:c8:b5:17:30:06:a3:b3:9b:fc:a5:01:3f:41:ec:36:56:
61:1f:33:41:2f:99:9b:08:4c:4c:53:82:c3:df:16:9f:98:40:
15:d6:04:8c:ef:e8:60:b1:3e:61:49:09:be:61:2a:c5:cc:07:
72:d1:3e:ba:61:1c:ad:23:0d:b2:ce:0c:95:a7:71:62:a4:22:
94:e0:d5:f2:d7:85:d4:51:1d:f9:32:25:98:fc:30:68:72:5e:
f4:d5:96:b5:35:26:8e:b2:fd:49:0e:ee:a8:2f:7c:37:ea:8a:
77:b8:6f:ec:48:08:70:c4:e6:c1:3e:72:77:c2:59:c9:e8:78:
10:d8:eb:b6:54:bd:00:d1:d6:9b:6b:00:ee:65:2e:f6:f1:79:
68:50:4d:97:17:88:28:ca:e9:a7:ab:85:af:04:b8:97:92:7d:
ec:eb:96:df:1c:66:0f:af:db:7c:19:35:d5:94:2c:fa:63:70:
6f:71:d3:54:38:f5:6d:73:24:30:f5:6f:77:26:08:ad:6a:36:
22:66:31:04:ef:25:9b:b5:11:21:cf:9f:7a:57:8f:ef:7b:bb:
f2:f8:61:90:bc:67:1d:65:70:5b:78:0a:bc:6d:fe:42:6c:8b:
c3:a4:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:00 2025 by rpki-client