Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: HE0RLdNcnp93UIhCWxM7c8pZNT7L1D9JgLnT1xdmyAE=
Subject key identifier: DA:45:79:93:EF:B8:65:99:80:81:0E:AB:CA:FD:F2:96:3E:44:78:33
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01973918FF2CFAFFEDFB1400345B203CA6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 1576
Signing time: Wed 04 Jun 2025 04:00:28 +0000
Manifest this update: Wed 04 Jun 2025 04:00:28 +0000
Manifest next update: Thu 05 Jun 2025 04:00:28 +0000
Files and hashes: 1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: PRllDKJzR+vuHBQqev+frRQ0Oktf294CguP84GijSoA=)
3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:18:ff:2c:fa:ff:ed:fb:14:00:34:5b:20:3c:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jun 4 04:00:28 2025 GMT
Not After : Jun 5 04:00:28 2025 GMT
Subject: CN=da457993efb8659980810eabcafdf2963e447833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:3d:dd:25:e2:40:91:32:bd:6a:d8:26:4e:
84:aa:2b:97:34:dd:e4:c8:34:c4:1f:08:f6:2c:25:
8b:3c:5c:08:7a:ec:86:7e:59:fb:ae:f6:d0:67:8f:
64:e8:ff:cf:70:08:10:b6:77:a3:a5:51:f0:57:87:
d9:d8:08:5d:54:c8:26:1f:3b:04:db:38:6c:53:71:
fd:74:e6:df:bb:6f:52:be:27:b1:7a:5d:64:4c:fc:
03:be:aa:65:72:e0:18:53:ca:93:22:a6:7b:fc:cc:
0b:2f:c9:c7:a9:62:0d:86:2c:fa:4f:62:c9:c6:96:
88:19:fa:f2:51:36:ce:3b:4c:de:ef:1f:af:e4:ad:
a5:43:5a:e1:43:9e:04:3b:6b:3a:f3:c0:52:fa:4f:
51:7a:38:fb:b2:a7:cb:1c:a0:9f:8f:5d:6f:75:79:
dd:50:ce:c2:03:ec:a1:cc:2d:76:a4:8e:ed:25:1b:
b0:65:4a:7c:52:43:9a:18:78:1a:1f:5d:44:22:f3:
2d:ce:8f:01:80:d9:fe:2a:7a:c4:1e:1d:c5:23:56:
9f:9e:a8:cc:ac:5e:24:16:e3:c7:a0:97:34:e3:e3:
b4:30:ca:17:a6:68:d8:20:f1:ef:dd:ab:45:bb:30:
6b:0b:c3:46:f1:6d:65:aa:97:1e:4a:d6:27:b5:30:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:79:93:EF:B8:65:99:80:81:0E:AB:CA:FD:F2:96:3E:44:78:33
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:03:15:9d:95:9b:20:b3:ec:18:20:6c:9b:66:2c:bf:7b:f8:
d7:e0:0a:8b:19:47:86:ee:3d:f2:cc:28:cb:ed:59:d2:6e:16:
21:db:32:ef:f6:01:58:1a:be:03:06:43:d7:c0:08:ba:29:47:
92:2b:af:d1:88:0e:2e:69:38:93:af:ec:3a:32:85:4c:88:6f:
c6:28:fd:f5:30:f1:39:fa:56:53:3f:8d:75:c2:d6:76:ef:77:
48:91:db:d8:52:94:9b:ad:33:48:77:c7:6b:d0:b2:3d:70:02:
df:4c:8a:04:47:7c:e3:c9:ba:20:36:b0:55:0d:4e:6b:23:bd:
02:a2:69:f4:f7:ff:e9:ce:58:f2:99:cd:da:91:29:5a:a4:d6:
fe:54:52:88:57:1b:71:d2:e4:02:db:62:ab:b5:dd:46:9d:1c:
52:4c:8d:df:2b:b4:43:d7:81:62:d9:ab:38:67:81:28:8b:a8:
8f:ee:9e:e1:a9:62:92:6b:6c:fa:9e:09:96:44:d7:36:b3:a9:
fe:ef:6e:79:5b:cc:22:ec:85:ad:9b:8b:aa:30:3f:60:1f:af:
b9:9b:53:40:99:8f:ac:ab:7c:ef:af:b8:02:e0:be:4f:a8:70:
3e:54:26:89:60:dc:e3:d8:1f:ce:0b:1f:b1:98:f3:f8:8a:14:
51:d6:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:11:25 2025 by rpki-client