Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
File: ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft (raw, json)
Hash identifier: KVu1yLTjXLb2+tvwmLaJ6sDA5qiwdiMpsNQpempn4YU=
Subject key identifier: 41:8D:EA:2A:2A:51:81:37:E0:B4:3B:AE:0F:81:BC:3B:18:2E:A0:A3
Authority key identifier: 7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
Certificate issuer: /CN=7ed77eafdb387afd17574272c9374c8180370f52
Certificate serial: 0197B820D8C87AE37A24E7399B2EBA589081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl (hash: sq9yzDD9R0GKeB/KLohw8hj5QHqmT3yYtRiP9/MSGDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d8:c8:7a:e3:7a:24:e7:39:9b:2e:ba:58:90:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed77eafdb387afd17574272c9374c8180370f52
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=418dea2a2a518137e0b43bae0f81bc3b182ea0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:82:13:32:a7:87:c8:8e:8b:5f:a2:ae:fb:
79:6a:72:38:dd:32:36:36:5b:62:92:0f:7b:4b:66:
aa:40:19:8f:eb:fe:6d:f6:4e:8f:90:71:cc:9d:42:
e2:40:36:34:f5:22:e1:e4:f9:67:1c:36:70:ee:8f:
9a:af:20:b6:47:75:8b:f7:60:14:e3:14:fe:c5:12:
a7:85:70:4f:83:91:1b:16:22:33:8b:3e:a4:5d:ff:
d1:5b:6b:cc:15:ed:b0:95:b1:70:6d:f5:d3:06:fb:
d3:6a:e5:8f:ed:98:06:eb:e3:17:0d:43:31:82:aa:
1c:4d:57:dc:77:d4:42:9b:3f:dc:38:2a:86:fc:12:
31:4f:92:6e:0e:30:65:75:4c:74:99:06:33:b6:da:
ce:11:92:9e:a7:5e:13:2e:5d:fb:29:c0:bf:3d:9f:
53:a8:ce:bf:14:97:15:40:24:d7:41:c3:c9:a2:d2:
04:0d:e6:61:e5:62:f2:9e:1b:8f:08:54:fb:91:b9:
e2:51:dc:5e:5c:a3:24:9a:03:79:41:c4:73:3d:c7:
22:fc:ff:8a:b4:73:e5:75:81:83:a9:92:35:09:ac:
5d:43:0f:05:18:13:28:b4:a4:c1:1b:aa:bd:46:60:
b1:7c:32:c5:ac:ab:ec:81:2e:3c:dc:66:3a:7b:4c:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:EA:2A:2A:51:81:37:E0:B4:3B:AE:0F:81:BC:3B:18:2E:A0:A3
X509v3 Authority Key Identifier:
keyid:7E:D7:7E:AF:DB:38:7A:FD:17:57:42:72:C9:37:4C:81:80:37:0F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd-r9s4ev0XV0JyyTdMgYA3D1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/bbc9e2-50f6-465a-9ecd-bc4017c9459b/1/ftd-r9s4ev0XV0JyyTdMgYA3D1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bc:99:8e:14:fc:b2:1d:e0:7b:f9:66:0c:3e:8e:04:42:c2:
12:42:74:6c:98:0c:b6:73:3a:bb:de:27:59:46:e6:a7:e6:d5:
14:0f:d4:22:96:92:57:e3:8c:c8:6b:d3:0c:48:01:92:0f:fa:
32:6c:ff:ac:b9:57:bc:1f:ac:fc:10:1e:48:e0:6c:ae:16:9f:
ee:45:e7:2e:23:08:3d:9b:b1:9d:dd:09:28:e6:9a:29:c9:f4:
36:1b:b3:37:18:ae:56:0f:ae:f1:5f:c6:48:cd:15:b8:5e:c0:
fd:9d:9f:cc:21:72:bd:bd:52:a3:56:34:4f:dd:7a:ec:10:e8:
25:e0:3f:31:7d:7a:1d:29:d9:f5:97:bb:64:30:51:db:30:a7:
c7:3d:a9:6b:70:cc:33:6d:78:3c:2d:61:5a:62:fa:eb:f7:c7:
b7:78:95:92:f0:d4:87:e5:68:49:37:29:20:80:3f:7a:11:3c:
ef:e5:97:0b:ac:ac:95:50:02:64:4b:47:dc:7f:9a:a2:7e:43:
4c:14:a9:77:0b:4a:a1:10:3e:15:ab:46:fd:a9:6c:d6:5e:ba:
64:62:24:ba:43:50:65:41:c0:12:e3:d7:2a:d9:4c:6e:e6:10:
41:17:04:92:1e:a7:fb:19:b0:99:ee:76:af:8d:2a:2a:7d:8b:
e7:2a:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:23 2025 by rpki-client