Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: ol7/fghq4XycW8jMVaHsHm9KTOyXeb0qeSPtx1yX/YM=
Subject key identifier: 99:BB:52:F4:D6:7F:0E:89:5E:06:1A:B9:90:93:19:2E:BC:74:5F:82
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 01976D3E21B7F5D0A2AAAB476FA8A248EDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 07:01:17 +0000
Manifest this update: Sat 14 Jun 2025 07:01:17 +0000
Manifest next update: Sun 15 Jun 2025 07:01:17 +0000
Files and hashes: 1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: 2xiHswTWfAqRIehasq91jtQw4E43HT9d2wenlwaZgrg=)
3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:21:b7:f5:d0:a2:aa:ab:47:6f:a8:a2:48:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jun 14 07:01:17 2025 GMT
Not After : Jun 15 07:01:17 2025 GMT
Subject: CN=99bb52f4d67f0e895e061ab99093192ebc745f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:d7:5d:75:39:bf:a2:5a:b1:5f:a2:c7:51:
18:22:f8:65:d7:4a:bb:fe:48:5b:fe:2b:d2:6c:0f:
a9:12:82:22:81:17:3b:3f:9a:29:73:db:ef:8a:b0:
30:85:9c:7e:1d:dd:84:d8:ba:27:8b:1f:fc:a0:e3:
c6:6b:58:e3:c4:d8:cc:ea:7f:73:b4:19:a9:32:6c:
32:fd:58:4c:61:a1:83:b9:8f:f1:38:56:9c:95:8a:
e1:4f:5e:48:dd:40:25:22:f8:64:97:d7:29:68:9a:
fb:0c:7c:5c:ae:11:67:f5:a5:28:80:93:32:63:05:
89:cd:0a:ed:84:9b:2f:72:ba:82:ab:d0:c9:65:56:
c7:60:80:43:41:dd:36:d3:a4:bb:a9:dc:54:ed:86:
02:f0:9a:ea:46:ff:4f:3c:c1:b4:df:66:cd:34:91:
f2:30:d6:2c:9d:4b:02:09:fc:e5:e7:cd:0e:c3:87:
06:2c:c3:8e:95:fd:f8:ad:40:e7:3e:e5:b6:27:eb:
96:b8:bb:54:3a:d0:5d:00:21:47:b3:52:28:9e:68:
26:50:9b:ce:aa:88:29:94:c3:04:d2:0a:8b:b2:12:
1e:54:5f:4b:6f:bd:41:1a:5a:2a:27:fa:98:7d:57:
a6:9e:82:72:6d:5c:28:9c:ed:27:b5:f1:97:45:79:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:52:F4:D6:7F:0E:89:5E:06:1A:B9:90:93:19:2E:BC:74:5F:82
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:30:0c:38:b7:b2:cb:bf:e2:60:58:d9:3a:bc:72:1b:49:f4:
cc:26:d5:fa:1a:7d:88:27:8a:c2:a2:34:f7:6a:76:4c:b6:1e:
2a:e6:92:71:d7:e5:67:17:be:c6:2b:13:39:91:c8:5a:ad:ba:
0e:e8:80:de:6a:38:5f:35:f2:83:7c:07:c3:d8:3c:91:07:75:
cb:93:e1:4d:ec:9e:44:24:f5:f6:68:45:f1:36:b5:5f:f2:52:
7a:fe:41:85:bc:73:c5:ef:3a:46:2a:dc:83:14:4d:dd:24:a0:
d9:8e:e9:6d:bb:63:98:87:8d:9b:c4:37:7e:ca:b6:89:0d:62:
59:b7:4a:94:eb:93:b4:80:c4:cc:74:d0:3a:4e:e2:a1:02:9e:
9c:fe:7d:33:17:1b:f8:2a:af:e6:8c:9a:79:1d:12:82:e1:2e:
0c:81:3a:37:4f:74:96:11:1c:11:76:71:ef:ba:d9:cd:51:ec:
36:d4:88:65:f4:24:2a:12:2d:8e:e3:fe:98:68:57:f7:09:b1:
6e:6c:0c:1b:56:d1:06:f7:d9:d3:56:7f:1c:75:b5:d2:48:f4:
7a:0d:de:f0:3d:22:2b:55:54:5f:78:b1:a4:20:51:e7:07:54:
80:31:7f:62:be:3b:c5:ee:97:e8:48:c8:87:bf:5f:fa:22:9c:
36:34:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:45:54 2025 by rpki-client