Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json)
Hash identifier: lSZJTioYwhGzXALvTKIGIi0eVHlAHbV69g21LYVegWk=
Subject key identifier: A7:AA:B0:2E:D8:B5:AD:B8:45:B5:5B:94:B2:7D:61:93:61:11:94:57
Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Certificate serial: 0199FC5909ABFE3F1B730A8FFF1B059E214C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
Manifest number: 0A9E
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: RselxicbeqC+knn4WgrZ1ZRcuQHhNjBTOwy7qtCQE2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:09:ab:fe:3f:1b:73:0a:8f:ff:1b:05:9e:21:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=a7aab02ed8b5adb845b55b94b27d619361119457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:b5:c9:ae:95:c5:8e:6d:8f:f4:c0:08:54:
4b:31:16:31:32:26:ef:5f:43:c4:d9:d7:31:4e:5e:
f4:0b:0b:79:31:76:ce:19:ea:3b:5b:f3:35:8a:ce:
58:a6:50:cb:70:b7:4a:e2:04:5f:c9:ba:71:19:09:
61:f4:10:27:f4:f2:93:95:f4:a0:5f:0a:8c:c6:c8:
33:6a:df:6b:56:07:21:ca:46:c9:14:4d:8f:9a:4b:
ca:01:01:6e:f8:47:92:fc:e5:02:a8:85:38:a9:b4:
8b:fd:56:fd:b0:78:d0:9e:6a:33:97:9f:18:00:7b:
e0:81:c2:3b:fd:3b:4c:cf:49:90:a3:05:2a:f3:d6:
1e:75:ba:b7:db:d7:5a:8b:ae:d2:a2:15:58:54:00:
1f:3b:c6:b0:45:8d:e0:7b:9d:c8:75:4a:4e:84:3b:
e9:87:56:94:38:d6:db:c8:a3:bb:55:0a:47:3f:d0:
00:04:ed:34:d0:d0:44:b6:13:2e:bd:2b:e0:a1:79:
96:f8:6b:7c:56:37:69:ee:d0:1a:9a:4c:58:e3:2a:
c3:05:76:14:ee:f5:a9:0d:96:56:30:38:b9:46:2d:
bc:36:61:0d:37:e4:3d:59:f3:14:3e:63:29:71:99:
f6:0f:ff:10:37:71:d4:33:27:31:ff:f5:65:89:6c:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:B0:2E:D8:B5:AD:B8:45:B5:5B:94:B2:7D:61:93:61:11:94:57
X509v3 Authority Key Identifier:
keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:65:e7:9b:d7:6a:81:67:fc:3c:10:ea:d0:0d:2a:8e:77:91:
15:76:b0:fc:c2:f8:bf:92:72:d4:0f:5c:cb:9b:fb:e9:4f:18:
c9:4b:df:e8:1e:a2:23:4e:13:e0:22:99:fd:5c:41:eb:3a:9d:
db:16:72:43:ac:18:7d:52:15:48:fc:22:2c:d5:f2:2c:c2:46:
ac:5a:f4:86:2b:04:81:8a:3c:73:ee:23:2a:97:5a:d5:cc:4d:
81:d2:46:e0:38:4d:f0:d0:d9:d5:f9:53:4d:81:8f:1b:dc:31:
dc:6e:bd:c9:09:12:04:87:11:ee:e9:bf:ee:58:f9:76:58:ea:
79:b1:33:2e:eb:58:31:c2:37:c8:1a:71:2f:29:15:0c:57:f3:
30:03:8d:3c:9b:1e:16:7e:80:91:9a:7d:2f:24:48:0a:a9:e7:
94:ae:da:c2:3e:9d:ff:0a:d2:c7:c6:77:5a:06:dd:b2:c3:7f:
80:b1:3e:1a:6e:90:30:38:7d:68:08:3b:72:f2:cb:41:e6:27:
0a:b6:27:b1:87:7b:5c:03:40:1a:27:5f:4e:bc:1c:46:9d:72:
88:a9:7b:9f:a0:6a:ef:d1:dd:ce:0b:be:a5:68:f8:cc:df:e1:
fa:70:cc:6e:34:6a:60:0d:b9:51:81:e0:32:cf:7f:93:bc:3d:
a7:cf:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:39 2025 by rpki-client