Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: kV1f6uDxuBNLC3LnQyLiK3ktGRG4HoqAW7K8CcQetGI=
Subject key identifier: 24:FC:27:61:6C:1C:9A:5C:1D:3A:CA:26:2B:48:E5:54:F1:36:60:34
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 01991688E10D3A6507F5216148A8B1B546E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 0A27
Signing time: Thu 04 Sep 2025 21:01:33 +0000
Manifest this update: Thu 04 Sep 2025 21:01:33 +0000
Manifest next update: Fri 05 Sep 2025 21:01:33 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: 5zep5XHlevNYOe+YccWyO0wMluqxlo7xeIWdTUZrn3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:e1:0d:3a:65:07:f5:21:61:48:a8:b1:b5:46:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Sep 4 21:01:33 2025 GMT
Not After : Sep 5 21:01:33 2025 GMT
Subject: CN=24fc27616c1c9a5c1d3aca262b48e554f1366034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:29:ed:7c:8b:28:22:8d:9d:73:68:75:10:
06:4e:64:4e:ff:a8:24:11:91:98:40:d0:9d:9c:87:
6f:c4:d1:d4:ae:ae:46:4e:6f:40:04:d4:38:73:9a:
34:d4:4c:d5:44:6f:97:8a:35:97:0d:f0:79:19:ea:
39:dd:c4:89:1c:6b:0e:81:f8:a4:16:2c:df:43:0f:
b4:0c:d1:c7:37:6d:77:37:90:b5:bb:cf:ae:67:ca:
d0:16:55:39:1a:a2:9a:42:c5:e1:ac:b5:51:51:22:
3b:21:4e:e7:77:7b:3d:40:4a:e2:45:d6:60:c0:2d:
d8:ad:b4:69:5b:d9:19:40:85:cd:11:8d:84:b9:ce:
19:16:09:b0:64:e3:22:53:c8:18:59:f5:0f:31:37:
6d:f6:cb:55:be:af:96:05:db:62:37:26:5d:3a:e9:
5a:b9:4f:bc:2b:a3:2b:b8:22:75:82:22:11:8f:18:
6c:22:cc:51:21:f3:fa:96:d0:b2:3b:91:57:9b:e2:
88:ab:87:57:8c:58:54:a4:d0:21:4b:18:be:66:ff:
90:c9:fc:8c:cd:4d:64:09:cb:c8:bf:a2:23:5b:72:
86:d2:53:88:47:af:3f:76:6b:8f:99:7e:98:00:f3:
36:dc:60:a4:08:f5:82:9a:59:27:9f:01:df:f3:05:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FC:27:61:6C:1C:9A:5C:1D:3A:CA:26:2B:48:E5:54:F1:36:60:34
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:67:14:ef:b8:58:39:27:89:59:01:5b:2f:25:95:57:ab:b2:
a4:e7:52:29:99:48:cc:22:d3:d1:49:f7:b9:94:a6:f8:cd:05:
d6:51:ba:78:96:ec:64:9a:df:13:09:8c:68:de:a8:98:45:3d:
44:5f:42:f7:97:ef:68:c1:1a:d5:76:e5:2a:3f:7b:d5:1e:a9:
8a:71:77:16:c0:d1:6c:bd:0f:70:0a:98:86:0d:1e:6d:71:76:
c8:04:e0:0c:12:52:8c:a2:e6:46:3c:da:45:d5:ad:4d:de:86:
bc:bf:77:74:a6:80:c9:a2:0b:80:8b:a0:e4:5c:e6:80:ff:df:
5b:69:9e:b9:96:05:24:b7:1e:b2:ba:6d:4d:39:8f:ea:89:9d:
84:f4:2e:24:c3:e8:74:14:fa:63:7d:62:7f:03:00:bc:31:f6:
54:cb:01:52:f5:e1:7d:65:cc:8d:25:44:da:c8:39:55:b2:41:
3c:51:89:be:29:62:2d:44:3d:d9:34:71:7d:b4:62:38:1e:65:
37:ae:59:c3:86:19:ab:a4:b9:a3:02:62:7f:93:b9:ab:69:be:
8e:97:40:f8:1e:14:75:11:e6:f1:52:fa:ae:34:05:ef:b6:78:
3b:6d:8e:e9:ef:ac:56:37:a5:f9:83:12:51:55:86:aa:ba:05:
db:61:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client