Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: iQsqDdZ1h1w/BBIaldYWqmXfje03Ve5ClsDUQtM1htU=
Subject key identifier: 7F:D3:E3:54:89:8A:E0:0F:9A:A9:87:A0:97:C5:AE:C3:23:EE:A1:FA
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01988CFE26C9EAF1B9233549ED1AE442FFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 04:02:02 +0000
Manifest this update: Sat 09 Aug 2025 04:02:02 +0000
Manifest next update: Sun 10 Aug 2025 04:02:02 +0000
Files and hashes: 1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: 6e4cyqRBw/xfF4WEaVzmWViORIlZbpM5yzb5wE8a89w=)
3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:26:c9:ea:f1:b9:23:35:49:ed:1a:e4:42:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Aug 9 04:02:02 2025 GMT
Not After : Aug 10 04:02:02 2025 GMT
Subject: CN=7fd3e354898ae00f9aa987a097c5aec323eea1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:4f:d0:b1:61:4a:12:d1:1f:53:da:49:fe:
d3:3e:ed:8c:90:91:da:de:11:52:ee:2a:08:35:a5:
c4:0e:e2:62:91:7d:07:e6:a6:44:a3:92:26:5b:7d:
3d:b8:66:3a:72:bb:a6:d1:1f:38:e3:f9:c9:0f:78:
1d:35:2b:7d:5b:bd:1e:75:b4:bb:15:81:32:3f:aa:
1e:dc:75:35:fe:75:5d:ad:f8:0e:30:76:5e:d3:01:
52:49:0c:aa:46:18:6f:eb:54:d4:c8:37:7d:65:95:
fb:ce:ac:61:c5:5c:47:4b:37:44:0e:f5:8c:92:26:
5d:77:56:fc:a3:1a:7c:ef:df:e1:d6:d1:99:79:d4:
69:ca:2d:4c:3a:b3:43:31:a1:6c:e7:93:58:75:b0:
00:91:bd:55:3f:5f:4c:c1:3e:97:8f:b4:24:16:15:
98:36:2f:dc:20:8d:56:86:4e:34:44:a2:38:22:9e:
56:a1:07:94:22:4d:05:6f:da:24:70:fa:35:1c:a1:
71:e5:41:b6:2c:9f:5c:27:58:a0:9b:51:ec:9a:5a:
00:df:0d:48:7d:17:76:81:a7:1d:4b:41:99:a7:ef:
c3:45:08:63:57:6b:e9:a8:a0:26:a6:0a:92:ec:4b:
55:d1:4d:1a:6a:b3:68:3e:52:d5:5d:01:43:f0:d8:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:E3:54:89:8A:E0:0F:9A:A9:87:A0:97:C5:AE:C3:23:EE:A1:FA
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f5:1c:98:fd:62:d9:7d:77:50:87:e5:17:2a:e0:8a:b9:15:
05:04:c4:be:c2:4d:af:c1:4f:6c:2c:05:f7:3e:30:30:44:07:
a7:57:5e:3b:8b:83:c0:68:c9:bd:fc:4e:ec:33:84:77:82:8f:
31:5f:2e:d5:99:ff:4a:4f:21:35:c6:db:47:6d:17:49:1d:dd:
72:f5:b2:6c:04:7d:52:37:51:c8:05:ac:f7:bd:b2:63:d3:08:
2d:74:0c:f4:35:1e:5c:96:7b:ee:09:42:04:c9:f8:53:df:45:
e3:92:55:e6:07:3d:46:33:f3:69:0b:af:21:1d:1e:c0:5a:37:
93:5a:37:1c:4e:c1:1d:3b:ab:29:d8:37:29:b5:98:a4:48:f9:
d7:7a:30:0b:5f:70:c0:5d:3e:54:f4:cd:cf:dc:21:72:72:d3:
c4:82:7d:94:bc:43:a2:43:63:e6:75:5f:81:39:95:f1:12:19:
86:6a:de:48:fa:e3:b8:08:26:a0:4c:4a:af:33:78:fd:3d:e5:
9c:47:79:d9:f3:de:7e:0d:bc:49:c9:6a:ba:84:8b:0e:e7:5c:
b2:6c:52:7d:ad:4c:92:f1:a6:2f:63:c8:ec:8d:79:aa:07:b7:
1c:c1:1f:c4:3c:41:fa:4a:92:d5:27:d2:85:ad:6f:fe:05:54:
4c:b0:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:51 2025 by rpki-client