
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: 27cfk6F/eQaVPnyGj/kOCslazgKjLb1o4goS7oZeJjw=
Subject key identifier: 36:7A:01:8B:3C:90:64:16:D0:FE:BA:76:91:0D:0B:46:67:01:3B:74
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 019923314E1B945CA476AC660B257DF484D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: UjZCc8IL74n+5/JVqWuf+WyQv22Rxhai2RI61c6BH+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4e:1b:94:5c:a4:76:ac:66:0b:25:7d:f4:84:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=367a018b3c906416d0feba76910d0b4667013b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:2b:8b:38:ca:c4:77:bb:95:49:80:63:7e:
57:31:72:45:2f:5e:26:ac:3a:ca:66:d5:63:0d:2f:
b5:83:66:aa:8c:de:1b:9c:00:a3:cc:df:3d:0a:04:
17:ec:ef:d2:6c:69:a0:42:42:c1:d6:49:5a:49:61:
16:0c:bb:1e:c8:f9:89:02:ae:a6:d7:f1:54:74:12:
45:a8:fe:69:6d:e7:c8:04:51:e6:ee:93:5f:52:fb:
99:b6:89:e8:04:10:1b:6b:9f:ce:54:e1:06:e4:5f:
88:47:03:ba:cf:36:cc:78:ab:0d:cf:6e:e8:c1:2e:
8a:43:52:8c:cb:11:a1:5a:b3:18:28:66:e1:51:b3:
e1:56:f4:3e:e8:ee:13:5d:24:b6:2c:52:6e:37:ce:
42:81:b0:6f:20:1b:54:dc:14:bf:09:4b:e4:ac:ee:
13:ab:70:4f:7f:65:f2:e7:22:43:41:18:83:b3:4e:
f7:53:3e:99:d0:d5:1b:e1:a4:d7:e3:59:f6:75:96:
20:87:f3:15:eb:3e:94:30:67:c9:5c:d9:e2:3f:96:
b4:ee:54:44:b1:f6:dc:cb:c0:83:43:b1:5a:07:05:
e3:3b:0a:5b:c7:6e:73:9d:92:72:e5:48:33:57:36:
8e:f9:a0:83:e7:0a:6a:4b:31:44:dc:57:9a:6b:cb:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:01:8B:3C:90:64:16:D0:FE:BA:76:91:0D:0B:46:67:01:3B:74
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c1:bd:28:f1:2a:95:fb:28:8a:f0:42:a9:99:7a:d2:cc:d3:
e7:03:84:38:50:f3:57:47:2e:e6:87:e0:79:31:f0:c0:64:4d:
1c:8c:2d:6f:34:5a:5b:b7:bc:da:56:9b:8b:77:76:6d:98:e7:
d9:73:25:53:bd:a0:3d:5b:74:05:4a:2f:54:11:c5:6a:3d:ee:
91:07:86:d4:8a:b6:b4:79:d9:e8:9a:30:9c:5c:e9:0d:78:4b:
53:9d:70:be:05:d5:d4:d6:a9:06:87:6c:c7:80:1d:c3:23:64:
53:7c:5f:a2:44:19:1a:25:ea:4b:21:65:eb:cf:64:65:0d:97:
5e:f6:3c:f8:2f:21:50:a7:15:52:95:95:e5:86:7d:d4:24:b0:
85:70:5e:14:b5:2b:bd:d2:e9:54:5f:e9:51:17:a5:b6:24:0d:
a9:89:c7:f0:8a:65:58:56:50:9b:c0:2f:31:e6:50:85:e7:c0:
f8:8b:0d:43:a5:1b:8f:88:29:24:24:94:d6:8e:8c:57:88:f9:
a9:8c:14:95:8b:5d:4d:9e:e9:c2:b1:d5:83:50:3a:4c:c7:bc:
7b:02:12:11:5d:d0:18:1e:10:aa:0b:bc:5d:b7:02:73:e6:f7:
d0:b1:9a:49:48:cb:23:1b:98:b4:24:51:83:e3:c0:e0:59:ea:
e8:05:0c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMU4blFykdqxmCyV99ITXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZDc3ZWFmZGIzODdhZmQxNzU3NDI3MmM5Mzc0YzgxODAz
NzBmNTIwHhcNMjUwOTA3MDgwMDU3WhcNMjUwOTA4MDgwMDU3WjAzMTEwLwYDVQQD
EygzNjdhMDE4YjNjOTA2NDE2ZDBmZWJhNzY5MTBkMGI0NjY3MDEzYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoccrizjKxHe7lUmAY35XMXJFL14m
rDrKZtVjDS+1g2aqjN4bnACjzN89CgQX7O/SbGmgQkLB1klaSWEWDLseyPmJAq6m
1/FUdBJFqP5pbefIBFHm7pNfUvuZtonoBBAba5/OVOEG5F+IRwO6zzbMeKsNz27o
wS6KQ1KMyxGhWrMYKGbhUbPhVvQ+6O4TXSS2LFJuN85CgbBvIBtU3BS/CUvkrO4T
q3BPf2Xy5yJDQRiDs073Uz6Z0NUb4aTX41n2dZYgh/MV6z6UMGfJXNniP5a07lRE
sfbcy8CDQ7FaBwXjOwpbx25znZJy5UgzVzaO+aCD5wpqSzFE3Feaa8slvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ6AYs8kGQW0P66dpENC0ZnATt0MB8GA1UdIwQY
MBaAFH7Xfq/bOHr9F1dCcsk3TIGANw9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2Qt
YmM0MDE3Yzk0NTliLzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYmM5ZTItNTBmNi00NjVhLTllY2QtYmM0MDE3Yzk0NTli
LzEvZnRkLXI5czRldjBYVjBKeXlUZE1nWUEzRDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcG9KPEq
lfsoivBCqZl60szT5wOEOFDzV0cu5ofgeTHwwGRNHIwtbzRaW7e82labi3d2bZjn
2XMlU72gPVt0BUovVBHFaj3ukQeG1Iq2tHnZ6JownFzpDXhLU51wvgXV1NapBods
x4AdwyNkU3xfokQZGiXqSyFl689kZQ2XXvY8+C8hUKcVUpWV5YZ91CSwhXBeFLUr
vdLpVF/pUReltiQNqYnH8IplWFZQm8AvMeZQhefA+IsNQ6Ubj4gpJCSU1o6MV4j5
qYwUlYtdTZ7pwrHVg1A6TMe8ewISEV3QGB4Qqgu8XbcCc+b30LGaSUjLIxuYtCRR
g+PA4Fnq6AUMtg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:30 2025 by rpki-client