Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: 0BVJHugZGak5quvfBvwHwXFCgcFXaISWHED723YauQQ=
Subject key identifier: BE:64:A9:59:23:E9:13:9A:53:BD:BD:7E:61:88:DA:28:D4:CE:63:E2
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 0197470C49400842E9B462C5C1FFD2D81A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 0937
Signing time: Fri 06 Jun 2025 21:01:16 +0000
Manifest this update: Fri 06 Jun 2025 21:01:16 +0000
Manifest next update: Sat 07 Jun 2025 21:01:16 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: MZLti/zsayxR4l87oWXWRoPFmHqfSjH/hpIHjqkIlWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:49:40:08:42:e9:b4:62:c5:c1:ff:d2:d8:1a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Jun 6 21:01:16 2025 GMT
Not After : Jun 7 21:01:16 2025 GMT
Subject: CN=be64a95923e9139a53bdbd7e6188da28d4ce63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:51:f8:ce:93:fb:c4:e7:2e:9a:d6:61:73:
b3:b7:2d:81:b3:65:93:84:8c:0c:57:aa:89:9d:f8:
10:ae:13:b8:e9:a9:71:e5:2c:cc:24:88:4c:ea:fc:
e3:fc:a0:52:9d:8a:2d:05:c8:0a:a6:ff:ab:8c:1b:
49:ae:90:b6:02:3a:14:1a:dd:bc:ae:1c:4d:be:e0:
b4:e0:68:0e:0c:8b:ee:13:3f:7a:e8:29:d7:4e:c9:
28:66:15:98:db:18:ae:db:01:b3:e5:c6:d4:64:93:
38:46:b0:7c:9b:d9:82:ba:11:f3:09:98:ef:e0:ff:
4c:21:a3:7a:89:c0:6c:e0:5c:e9:eb:d8:3b:76:d5:
35:e8:e5:f7:c3:64:82:09:bf:3f:1d:ba:f2:49:5b:
8f:6f:1b:da:1d:5a:6a:ba:8b:86:cd:04:a8:68:32:
0f:59:ff:b9:11:db:8f:6f:f6:17:e0:e1:12:3f:b7:
ca:b5:7d:46:e1:93:da:06:59:ba:1d:61:70:80:c4:
a8:eb:6c:fa:08:e0:0f:d0:e4:36:64:44:7d:33:0d:
be:be:d7:01:15:26:ba:53:83:82:47:c2:90:f2:16:
d1:69:f9:37:18:17:73:c2:96:46:b8:4e:a8:4a:b7:
cd:bb:9e:5a:40:1d:83:8d:26:61:a5:78:0c:69:65:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:A9:59:23:E9:13:9A:53:BD:BD:7E:61:88:DA:28:D4:CE:63:E2
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:88:6a:da:c3:66:06:96:55:54:63:bf:b3:ad:0d:0f:bf:
12:23:ca:5f:33:35:94:f3:8f:2d:4c:af:90:e2:c3:67:68:e8:
0e:a9:41:de:99:6c:b0:a0:12:73:b7:3d:81:81:4d:bb:08:d1:
1f:a0:7d:d3:8b:3c:4f:f1:a3:17:3e:08:ed:0e:fe:44:55:f8:
36:01:f3:20:f6:62:96:c3:1f:b4:19:8b:1a:c5:e7:b8:b9:99:
73:1c:18:22:87:c2:49:d9:ed:19:5a:20:fd:08:7f:b4:ea:c2:
d5:4b:9d:75:5c:35:09:14:72:d0:ae:e6:96:23:cd:49:f3:b2:
2f:4e:21:2a:68:a3:a4:27:4e:bb:5d:53:c1:a7:03:d0:b2:18:
b8:f8:90:4e:88:d1:e0:63:9e:a1:2a:92:32:47:8f:bd:49:b4:
88:51:94:c0:32:9a:b8:c5:71:e4:0a:50:95:a0:86:cd:3a:76:
d7:cd:f4:77:98:19:29:70:9e:c2:77:43:aa:92:99:ea:9b:7d:
03:4e:23:73:7f:c2:e0:ec:d6:db:ee:31:5d:35:69:07:7b:8c:
1f:57:7e:5a:d9:d7:bc:db:bf:31:37:54:6f:b9:62:98:f1:0a:
be:a3:bd:54:34:5c:4b:d2:a9:ff:f5:09:23:22:ec:1d:cf:6b:
ea:d6:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:41:02 2025 by rpki-client