
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: +8jc78KQn8h1wkXeNNRZmqx7NNe+vmkRZOB4OGIEXAM=
Subject key identifier: 93:E1:03:95:C5:BF:7E:95:B9:3D:2B:80:80:A3:88:20:4C:BD:52:F1
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 019768F2ADCA6CA3BE089438DE58B2A32E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 41
Signing time: Fri 13 Jun 2025 11:00:24 +0000
Manifest this update: Fri 13 Jun 2025 11:00:24 +0000
Manifest next update: Sat 14 Jun 2025 11:00:24 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: MQM+olnvDvWEN7cVjDgKG7JJZjh4uVuXxYd2AmQm+NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ad:ca:6c:a3:be:08:94:38:de:58:b2:a3:2e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Jun 13 11:00:24 2025 GMT
Not After : Jun 14 11:00:24 2025 GMT
Subject: CN=93e10395c5bf7e95b93d2b8080a388204cbd52f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:1d:da:31:8a:6b:3b:5a:cf:3c:39:31:1e:
65:45:f1:a8:13:fa:b4:04:3c:03:b2:12:0d:02:58:
cf:a1:25:e9:c2:12:bd:d6:f3:b2:83:c7:50:71:b5:
14:48:f5:a6:72:7b:f5:4a:4d:69:fd:f4:b8:3b:26:
22:9a:48:50:e0:7a:35:2e:1a:2e:f2:5e:aa:1e:ec:
3f:5b:d6:35:4d:a3:3d:fa:01:bc:0f:cf:80:bf:7c:
f9:98:6e:27:01:ba:29:1b:95:5e:11:d1:29:4e:d9:
d2:65:31:67:22:19:03:6a:0a:a2:84:6b:14:3a:51:
44:04:f9:0b:d7:3b:7f:87:f4:d2:cf:13:23:7c:e4:
08:6b:ac:13:dc:14:68:71:5b:47:cd:4b:67:54:5e:
a1:39:b4:00:f1:40:c7:2e:33:fc:bb:38:b4:ee:ee:
35:ae:d9:05:23:21:62:18:45:11:df:72:ee:70:0f:
a2:e7:1b:de:fc:01:48:7c:a3:21:ff:c1:4c:cb:b8:
6b:16:28:40:1f:8b:f9:dd:a0:4d:40:b9:8c:b1:12:
b7:d7:69:7c:17:4b:33:44:54:ad:f8:3f:be:ab:c4:
6a:eb:ac:e2:ba:10:75:12:f0:bc:3e:e4:06:98:46:
c9:ec:da:14:d8:8a:a2:f6:02:00:e6:34:ef:68:e9:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E1:03:95:C5:BF:7E:95:B9:3D:2B:80:80:A3:88:20:4C:BD:52:F1
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:94:7d:c5:b1:ff:95:aa:f1:66:7a:ba:ae:ee:30:67:4e:
06:8e:dd:e5:d7:f9:6d:48:47:b2:42:4f:59:5e:e2:38:1a:01:
9e:2b:48:b1:35:d3:b5:19:69:13:6f:14:94:04:e7:12:01:61:
8e:0a:f6:9c:da:4a:53:c3:7b:eb:fa:a1:cb:b7:ea:3e:66:1c:
e7:7b:98:d2:46:38:24:bf:e3:f1:6a:ea:b7:aa:3c:22:83:dd:
4b:cd:01:00:66:ef:2c:b5:58:a6:95:6a:08:dc:d9:7d:2c:67:
87:7f:66:be:51:7a:14:06:75:8d:cd:51:31:28:14:93:b2:1e:
0f:2b:4e:8e:8f:47:3e:a6:40:49:12:63:3d:40:bf:5c:7d:6c:
47:dd:69:ec:cb:5c:b5:18:f5:82:06:e3:28:72:3b:80:80:b5:
8f:14:f9:29:58:a4:ec:2c:35:24:70:8b:3c:47:3e:ab:47:00:
3b:5c:18:88:2e:6a:90:97:0a:03:dd:dd:da:70:fc:21:8d:44:
b1:ff:1a:50:6b:87:2e:a2:c8:cb:25:5b:49:23:c6:2f:1e:2c:
97:5c:5f:a0:e4:67:ef:d2:9f:7b:84:17:3f:9f:2a:68:eb:6a:
e7:c0:4d:eb:f6:64:c9:92:05:7c:63:97:64:93:33:ee:06:f5:
27:5c:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:25 2025 by rpki-client