Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: n3HdgeEvoBiJ4679EdMcGT0FIgy5YqUqPbuggyF3R5k=
Subject key identifier: 52:4C:FD:56:67:AD:F5:97:7E:FB:53:CB:F6:DD:99:35:93:74:13:10
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 0196AA9E4A5FBBB54E55F7FA497E785E34A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 08E6
Signing time: Wed 07 May 2025 12:00:22 +0000
Manifest this update: Wed 07 May 2025 12:00:22 +0000
Manifest next update: Thu 08 May 2025 12:00:22 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: 7rymDiZa/eaNCk3XRym1Dtb/7Qvkmy8r+F3zRa4Qb+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:4a:5f:bb:b5:4e:55:f7:fa:49:7e:78:5e:34:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: May 7 12:00:22 2025 GMT
Not After : May 8 12:00:22 2025 GMT
Subject: CN=524cfd5667adf5977efb53cbf6dd993593741310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:ee:d2:4c:28:52:f9:b3:af:c4:9d:7d:50:
1b:cd:9f:f7:17:b7:6d:1e:71:92:05:93:ae:1b:b9:
e0:2f:96:d5:41:69:04:08:7e:e8:e1:61:bc:5a:09:
78:5a:de:71:1d:74:44:d7:08:bd:7b:69:61:4b:35:
8f:5a:dc:66:4b:bc:66:a7:bd:f3:12:ed:b2:e1:a5:
e8:1a:be:0f:8b:d9:e0:f5:20:22:4b:ca:ed:ae:47:
44:55:9b:73:99:38:c4:d8:8d:56:fb:c7:aa:fe:27:
eb:48:b8:14:96:a1:b8:e9:31:e9:08:b5:c2:f5:ad:
3b:74:65:50:84:72:e2:51:d4:88:4f:98:ab:f2:34:
0f:72:7a:af:d2:3a:d4:f4:cb:c7:17:bd:c9:c5:8a:
f4:cb:62:65:93:9a:2a:35:4b:21:44:33:35:a7:d3:
a1:ee:4a:9c:ac:0d:01:d2:86:b2:a4:53:f2:e1:b2:
ee:40:db:f5:9a:36:80:9b:18:dd:0c:3a:2f:35:8c:
6d:43:35:d6:98:48:8e:70:09:8f:32:ef:20:17:bd:
13:60:1b:f5:91:7c:fa:9f:c0:92:a0:3c:d3:04:a6:
0d:ee:9f:ad:35:fc:5a:64:0d:50:6a:4d:aa:27:f4:
d7:84:df:5a:d4:fb:e9:91:41:43:d2:d0:80:ba:e9:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4C:FD:56:67:AD:F5:97:7E:FB:53:CB:F6:DD:99:35:93:74:13:10
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:ce:97:3d:c6:67:6c:49:ae:76:b5:16:61:96:5b:af:7c:
ef:2b:ca:98:ec:44:2c:82:d1:36:91:07:e3:ed:84:a0:9f:03:
4e:de:9f:15:8c:d2:03:40:2f:8e:8a:dc:18:cd:01:cb:20:30:
6e:72:92:2e:5f:6f:93:9d:33:ba:19:ec:68:74:4a:27:03:cb:
48:c1:06:e3:ac:72:82:d4:4a:c9:7d:75:e7:7b:d2:60:9d:85:
20:5c:00:e7:59:8d:8e:02:93:fd:d9:a5:1e:49:7c:01:8e:b8:
bb:a0:cd:ba:24:bc:83:3d:fa:19:73:d5:93:e4:e5:8a:8a:e5:
00:e7:76:c1:17:77:a4:62:19:58:16:16:04:b0:54:a5:11:12:
26:9e:2d:b5:32:d7:4d:8a:4c:7e:3b:99:cb:78:02:9e:18:91:
92:c7:6d:e8:40:68:cc:30:a4:b3:7f:4b:a1:c1:60:88:de:24:
39:45:ab:25:d7:20:d0:8e:31:8d:11:66:0b:93:c9:ef:85:54:
cf:3e:7c:be:79:bf:91:ab:52:f7:05:e9:f5:8e:96:bc:61:9e:
d8:d2:9d:c5:a6:30:33:7b:87:2c:99:91:9b:2c:02:22:27:97:
40:be:fd:12:cf:29:52:b9:ad:13:cc:ba:1c:62:65:38:1c:42:
63:43:85:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:29:13 2025 by rpki-client