
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: VXJjLWZxEuiSKQLR6swpXZQso0f1YMimWQ3dBxJF6/M=
Subject key identifier: E9:24:6B:09:C8:0E:53:00:2C:DD:38:D0:17:92:5A:38:7E:EF:86:36
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 0199FF594C38462995F01D9229E19D82C3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 02:01:06 +0000
Manifest this update: Mon 20 Oct 2025 02:01:06 +0000
Manifest next update: Tue 21 Oct 2025 02:01:06 +0000
Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: Rqeho/WrZhEnKTgVBdDLa3mstQWd8ErUVE9KWyJN+g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4c:38:46:29:95:f0:1d:92:29:e1:9d:82:c3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Oct 20 02:01:06 2025 GMT
Not After : Oct 21 02:01:06 2025 GMT
Subject: CN=e9246b09c80e53002cdd38d017925a387eef8636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:08:46:0d:6c:a9:36:7c:49:83:7c:5a:77:
9c:f8:34:aa:20:83:f0:71:af:2d:0c:a8:27:2e:45:
38:40:6a:a0:23:b7:5e:14:2d:54:8a:68:be:ee:e2:
6b:ea:a7:47:04:ac:47:d9:12:ce:ad:a0:cc:ef:d9:
c5:0c:66:e3:a0:e0:87:dc:e6:bc:96:a2:80:72:87:
76:ee:65:69:17:b2:7d:e3:94:c9:d9:7c:44:99:6f:
47:dc:59:67:c3:00:f3:04:d8:26:d0:cb:6b:ec:f2:
3e:ff:c0:ef:1a:be:16:fc:74:07:fe:ea:20:e1:d1:
b0:0f:eb:ef:3a:e8:97:45:09:60:ae:45:d7:ac:14:
f3:eb:a1:aa:cc:eb:1b:4b:32:d3:99:ce:07:4d:e2:
b0:01:4e:4a:c0:8e:2b:21:01:7e:8a:f8:6d:10:52:
a8:c4:5b:ba:01:0d:18:51:f5:85:e0:be:a4:f2:84:
53:20:84:ec:29:c3:5d:22:a2:66:64:0a:16:d4:1b:
0e:b0:47:1b:17:c3:1a:fd:5a:59:b7:fa:5d:fd:81:
6e:6b:d3:d6:64:bd:13:76:31:a9:b4:4f:f8:d8:27:
b4:8e:4f:1f:c1:23:90:1b:0d:eb:7c:87:28:90:28:
ec:42:d4:ab:c9:3e:c6:18:2a:f8:8f:bd:51:02:fd:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:6B:09:C8:0E:53:00:2C:DD:38:D0:17:92:5A:38:7E:EF:86:36
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:67:4d:e8:3d:33:a8:85:63:0b:9b:ec:43:3b:07:40:67:
5f:74:bc:31:24:0f:4c:5a:e8:c6:a0:87:26:f6:d2:a2:b9:f4:
bf:43:62:16:6f:10:c6:cd:c4:eb:53:b8:5f:7a:99:be:48:9e:
19:17:6a:94:00:8a:67:29:ba:59:2f:06:34:1e:26:97:79:3e:
16:9c:25:81:6e:59:4b:05:1d:ae:96:36:eb:1e:fd:6f:f5:a4:
30:16:54:a7:8a:f3:d6:00:51:2e:f6:1d:5c:3f:75:2b:7e:39:
eb:af:fc:41:88:7c:3f:1c:17:17:18:92:e2:46:33:44:32:bd:
d2:88:b6:36:76:3b:d8:c5:22:6b:57:b7:39:e3:6a:21:10:06:
99:c3:7e:69:29:6a:68:e4:02:1c:16:69:fb:4b:85:98:0d:27:
e0:44:7a:50:50:47:20:a9:30:2b:a1:d2:7e:fe:f7:ad:f5:ac:
ea:78:a0:ab:df:d2:cd:b7:c0:91:8f:3d:8b:92:cd:31:4d:d2:
1f:fd:e3:c8:f4:23:1e:83:48:d2:70:fc:88:92:40:e0:15:33:
a7:bd:ec:ca:e6:1c:e3:46:05:43:7e:ed:e9:ec:ab:ed:40:79:
4b:ac:e3:5c:61:41:8a:a2:a1:0f:3c:5d:c5:51:dd:72:3f:71:
6d:09:bf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:11 2025 by rpki-client