Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: sUsOJUZ+61AQFch5qdEqNWnlEJzAkkM/fMH4KBzytFE=
Subject key identifier: 33:F0:75:48:5A:FF:F1:FA:06:8C:66:98:24:3E:05:C6:D1:0D:E9:E4
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 01901C6A3F519271C6E326240A9D2AD1C65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 0581
Signing time: Sat 15 Jun 2024 15:00:43 +0000
Manifest this update: Sat 15 Jun 2024 15:00:43 +0000
Manifest next update: Sun 16 Jun 2024 15:00:43 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: OxCJmtrdmtcJQrdbkBLfL1zaRjpyjfjB54Gj1/WQo8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:3f:51:92:71:c6:e3:26:24:0a:9d:2a:d1:c6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Jun 15 15:00:43 2024 GMT
Not After : Jun 16 15:00:43 2024 GMT
Subject: CN=33f075485afff1fa068c6698243e05c6d10de9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:ef:b0:9c:4a:b6:54:da:21:b1:9d:c9:59:
e7:17:fe:0b:38:95:06:50:19:27:22:15:ef:19:01:
70:6f:63:69:45:a9:84:e4:2b:67:8e:21:93:18:ae:
59:51:fe:f4:92:d2:72:ae:0b:bb:6c:56:37:01:c5:
32:53:e1:d2:2d:6f:ce:19:f1:65:49:48:3c:1e:35:
d6:00:8a:a1:a2:63:05:f5:e2:45:20:09:0e:0a:f1:
1d:b1:96:94:5c:e5:82:02:cb:d4:fd:80:76:09:5f:
e7:39:08:cb:bd:78:d2:6f:83:ea:8b:6a:c3:0c:61:
e4:9d:b7:30:2f:65:62:28:c1:b4:48:b9:49:61:ec:
47:13:6d:2c:50:7f:d4:07:1b:8c:e9:5b:fb:0d:84:
e1:aa:be:bd:60:dc:29:65:6c:ce:87:9d:9d:5b:00:
6b:83:f5:43:79:40:88:42:7e:fe:6e:83:9f:56:2b:
11:91:67:0d:e6:e6:23:e0:72:48:37:47:64:e6:f1:
1c:dd:c0:ef:cb:f5:95:17:51:07:60:0d:8d:09:fa:
78:89:35:41:31:1c:b2:4e:5a:8c:34:74:d8:08:ac:
42:3f:b7:9d:e0:34:b0:96:33:21:42:6c:b1:b9:47:
6e:f0:4d:b5:b8:d8:02:b8:e1:fb:ed:eb:16:0f:f9:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:75:48:5A:FF:F1:FA:06:8C:66:98:24:3E:05:C6:D1:0D:E9:E4
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1e:c9:a3:4c:80:08:5a:de:a4:74:fc:d5:d8:ae:e0:2a:a5:
3e:ff:54:77:b8:b5:cb:dc:d4:bd:71:c0:0b:0a:e0:e6:a1:07:
69:b0:06:e6:b2:81:d8:68:10:a8:59:3f:97:ff:a6:00:1b:1e:
48:14:fd:ce:2f:eb:dc:0d:2f:43:3d:da:1f:33:7f:93:30:1e:
2b:5b:86:f2:1c:8b:e9:a6:a9:07:ae:79:d7:9f:b5:bb:99:ae:
b7:76:a6:3d:ce:a9:0a:8b:e4:fc:29:32:40:c9:c5:ca:bd:23:
96:34:e6:36:ec:a0:b5:d5:74:d1:68:60:85:3a:b9:5f:81:4d:
d8:ac:d9:d2:c2:ed:f8:c5:01:b8:05:02:da:e5:bd:16:b7:69:
9d:97:14:5d:c3:5f:5b:04:3a:91:e7:50:84:17:0e:c6:fa:44:
65:2d:83:a9:57:45:90:55:df:07:08:b6:d6:8d:4f:5d:1f:bb:
3b:3c:0f:34:7a:4d:09:76:30:7f:cc:1f:13:b9:96:50:ad:09:
d8:90:22:a5:89:16:a1:a0:75:ef:67:c6:6c:78:fe:fc:fb:e8:
cf:ed:b6:cf:5c:c9:c0:63:24:fb:39:97:b6:e8:3d:c9:f2:0a:
1d:c8:60:11:70:07:62:da:a7:8c:3d:37:bd:f6:96:ff:2d:f3:
d7:4f:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:53 2024 by rpki-client on console-fra.rpki-client.org