Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: +hbrhU1GDvCIbpoakE1JljA4rQ1hJsVTCsOwJ0z8oUo=
Subject key identifier: 7F:A0:3C:BE:62:AD:A3:EA:F4:D5:05:3B:C9:B0:E2:61:71:03:A7:5C
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 019A7149BE447DD5BB909823006C9829811B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: /7u5ApbmX3As14uKNu9RDREwpHkJQTpKI6+Pu1MAET0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:be:44:7d:d5:bb:90:98:23:00:6c:98:29:81:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=7fa03cbe62ada3eaf4d5053bc9b0e2617103a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:e6:d7:fd:4a:18:d7:e0:aa:b7:04:02:30:
c2:20:7f:88:ef:66:29:54:45:f0:30:18:63:d1:c6:
dd:7f:8c:39:ff:9c:d6:52:64:b9:e1:37:54:03:cf:
c4:ae:43:d8:45:02:98:7b:88:64:f3:a2:c8:00:ea:
27:ba:fa:5d:e3:21:61:cb:3e:c5:10:4e:60:73:62:
0c:34:76:2f:bc:0c:f6:47:d6:f8:64:eb:e5:6b:39:
62:7b:b7:56:21:7c:cf:e5:6e:12:1a:be:b9:8e:83:
f7:10:98:35:1b:00:0b:c4:d4:de:77:b5:dd:02:dc:
cc:87:3b:08:0a:6a:de:6f:db:02:60:e0:08:f9:03:
c9:be:0d:f2:b5:5d:b5:4c:63:31:a7:59:15:d1:b9:
18:38:b4:25:6d:24:62:da:f9:7f:1c:78:61:4c:0d:
45:07:6e:4b:ce:d2:dd:96:4e:60:f0:94:6d:9f:06:
10:9d:a1:67:ee:ef:a7:51:eb:88:46:80:20:76:98:
a7:d6:5b:5f:01:6d:8e:98:f0:59:8f:31:b5:fe:04:
1d:ab:e8:c1:62:a5:0d:cb:54:bd:68:49:0e:41:b8:
be:5c:59:41:43:d2:b0:15:ca:09:ad:87:2a:de:16:
75:34:a3:62:be:0e:2d:e2:bd:61:93:85:17:4c:ba:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A0:3C:BE:62:AD:A3:EA:F4:D5:05:3B:C9:B0:E2:61:71:03:A7:5C
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:64:43:10:89:b5:fb:e5:7c:e9:11:2f:97:bc:be:2e:1e:9b:
c5:36:d4:1a:3d:a1:75:5f:d3:16:d2:f4:17:e9:20:69:63:1a:
4f:1e:79:4a:33:b3:c1:08:42:65:30:34:02:5d:7d:19:aa:b0:
4b:66:38:4b:b6:2e:91:c0:61:36:ba:4c:36:98:cd:8e:b1:47:
61:82:8c:67:8b:f2:1d:92:a6:22:a6:e0:54:9c:ed:45:55:a3:
e3:64:9e:ec:27:55:15:54:3c:a9:23:f7:98:f6:38:00:af:f5:
0c:c5:28:34:81:3c:b5:04:94:e6:86:93:ab:72:a6:96:bb:ce:
a0:12:5a:cb:bf:5e:62:bc:da:58:ff:5f:be:fd:c5:85:b9:46:
91:f3:48:34:d8:80:46:ad:67:22:4b:d9:65:c4:6a:d0:7e:12:
24:7b:ef:3c:ad:97:c9:04:6d:7b:a9:f2:4f:11:30:6a:0f:9d:
22:08:4c:11:88:35:6e:96:b8:8e:83:8e:1e:73:c3:03:5d:f0:
3f:34:2e:b6:60:33:ea:c4:fa:0d:bf:ff:a4:54:db:af:08:bd:
d7:28:cb:af:f8:cd:6a:49:a7:f6:3a:cd:90:4f:17:b4:46:4e:
fc:f7:68:c8:4f:25:60:ba:7a:bf:45:f6:18:42:a5:90:92:cf:
16:73:76:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSb5EfdW7kJgjAGyYKYEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDc3ZWFmZGIzODdhZmQxNzU3NDI3MmM5Mzc0YzgxODAz
NzBmNTIwHhcNMjUxMTExMDUwMDQ5WhcNMjUxMTEyMDUwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZmEwM2NiZTYyYWRhM2VhZjRkNTA1M2JjOWIwZTI2MTcxMDNhNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ7m1/1KGNfgqrcEAjDCIH+I72Yp
VEXwMBhj0cbdf4w5/5zWUmS54TdUA8/ErkPYRQKYe4hk86LIAOonuvpd4yFhyz7F
EE5gc2IMNHYvvAz2R9b4ZOvlazlie7dWIXzP5W4SGr65joP3EJg1GwALxNTed7Xd
AtzMhzsICmreb9sCYOAI+QPJvg3ytV21TGMxp1kV0bkYOLQlbSRi2vl/HHhhTA1F
B25LztLdlk5g8JRtnwYQnaFn7u+nUeuIRoAgdpin1ltfAW2OmPBZjzG1/gQdq+jB
YqUNy1S9aEkOQbi+XFlBQ9KwFcoJrYcq3hZ1NKNivg4t4r1hk4UXTLpafwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+gPL5iraPq9NUFO8mw4mFxA6dcMB8GA1UdIwQY
MBaAFH7Xfq/bOHr9F1dCcsk3TIGANw9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2Qt
YmM0MDE3Yzk0NTliLzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2QtYmM0MDE3Yzk0NTli
LzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGRDEIm1
++V86REvl7y+Lh6bxTbUGj2hdV/TFtL0F+kgaWMaTx55SjOzwQhCZTA0Al19Gaqw
S2Y4S7YukcBhNrpMNpjNjrFHYYKMZ4vyHZKmIqbgVJztRVWj42Se7CdVFVQ8qSP3
mPY4AK/1DMUoNIE8tQSU5oaTq3KmlrvOoBJay79eYrzaWP9fvv3FhblGkfNINNiA
Rq1nIkvZZcRq0H4SJHvvPK2XyQRte6nyTxEwag+dIghMEYg1bpa4joOOHnPDA13w
PzQutmAz6sT6Db//pFTbrwi91yjLr/jNakmn9jrNkE8XtEZO/PdoyE8lYLp6v0X2
GEKlkJLPFnN2Rw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:10 2025 by rpki-client