Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: VrWuWQYpVU62qfkS1//W2CXw7Y7A820bAR0MAzYu/uQ=
Subject key identifier: 79:90:CB:F7:F2:E0:2F:8D:EE:81:CC:1E:52:C6:82:62:F3:10:BC:70
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01982C6ECB0A9E9E2C1D239472F6F660D0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 15F4
Signing time: Mon 21 Jul 2025 10:01:55 +0000
Manifest this update: Mon 21 Jul 2025 10:01:55 +0000
Manifest next update: Tue 22 Jul 2025 10:01:55 +0000
Files and hashes: 1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: pasOdaqbdpf98071h0SFwtnuUbgVYQGQRoiI1Iqojz4=)
3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:6e:cb:0a:9e:9e:2c:1d:23:94:72:f6:f6:60:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jul 21 10:01:55 2025 GMT
Not After : Jul 22 10:01:55 2025 GMT
Subject: CN=7990cbf7f2e02f8dee81cc1e52c68262f310bc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:10:88:d3:a1:f3:e3:c2:30:8c:f9:54:b5:
33:6f:6e:03:4a:27:25:e5:66:cc:4f:3e:7b:15:1c:
80:65:a0:99:86:d0:73:fe:ab:bd:c9:14:1d:38:fb:
82:b6:6e:74:60:49:14:54:ed:ed:fc:bb:e1:88:be:
73:b0:bc:44:67:e3:a2:ce:4e:a5:0b:61:0f:4f:0d:
d7:1e:30:fa:c5:9c:ea:aa:f6:bf:99:40:65:35:03:
df:7c:42:c7:11:b0:92:44:59:6a:16:da:ec:9f:5e:
c1:36:9d:19:84:0f:d4:bb:7b:18:69:e1:b5:12:f0:
ae:35:fb:0a:09:40:2f:be:99:80:fd:a4:f5:e0:79:
a0:f5:dc:d3:dd:53:8e:f8:db:a2:b9:2b:c7:e8:38:
b3:76:7d:73:ac:bb:d3:51:1c:bc:5d:77:27:35:cf:
30:4d:5b:d5:fc:33:c9:d4:b6:0c:26:71:08:88:6e:
9c:9b:72:30:3f:36:13:4a:77:f9:02:d2:b2:37:af:
cc:0b:cf:ef:3a:e3:1e:90:81:a1:c0:d2:8f:a5:86:
bb:5b:21:99:41:63:0d:dd:a7:b7:59:20:3b:2e:26:
73:00:54:7c:ba:a6:bf:b2:81:09:cf:ee:d1:36:0f:
cd:19:e4:be:8a:1e:3a:f5:db:0e:18:43:ec:16:07:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:CB:F7:F2:E0:2F:8D:EE:81:CC:1E:52:C6:82:62:F3:10:BC:70
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:61:39:dd:cc:4d:58:f4:11:d1:f6:56:e3:12:f4:b5:9c:
66:5e:7b:f1:cb:64:b3:c5:5c:b0:18:da:eb:8c:d8:6c:f6:5c:
9b:6d:4a:e8:0d:b0:06:de:86:a2:ca:b1:17:fc:1a:10:13:37:
3b:b4:39:04:63:8a:2d:e2:86:f3:cb:fd:3b:6b:d4:16:db:94:
60:db:5d:84:37:3a:ea:ee:e2:84:76:8d:23:b1:bf:94:50:33:
f4:c2:e3:5f:5d:60:7b:66:01:f2:56:6f:49:0a:74:25:b8:bc:
2a:d3:b7:f7:16:9d:55:49:00:cb:db:04:da:7a:fe:d7:93:5a:
33:d4:da:42:04:07:fd:da:85:73:d5:27:a8:15:20:5f:7e:f8:
e0:fb:eb:8a:fe:20:c0:56:08:a8:b0:0c:be:9d:25:07:53:1e:
6e:cf:01:52:57:68:d9:f2:62:db:77:3a:f5:44:7d:db:68:bb:
59:51:0d:bb:dc:3a:05:69:f7:75:77:dc:21:35:88:9d:64:ef:
2b:1f:f3:7b:ef:e4:c8:93:fa:7e:b4:4b:e8:ae:a7:02:00:5f:
f3:42:15:21:9b:e3:09:b4:37:49:35:1f:05:d3:d7:e6:84:cc:
80:db:f7:bb:7d:c0:da:31:61:61:df:28:5c:90:a1:5c:97:1d:
05:27:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:44:18 2025 by rpki-client