Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: kI0HNS0MKkxYUtTV7VV8l6VLHadaqF9YqsUhstZsIec=
Subject key identifier: 15:29:37:90:14:F6:74:70:B1:D4:63:99:76:76:11:51:3D:A7:08:BE
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 0198D5F1372809E89077C8D762A1EA7F06CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: /vc9SW52LspJlsLFDxEn1uRC4f+aEBpkeIlgVlTmfR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:37:28:09:e8:90:77:c8:d7:62:a1:ea:7f:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=1529379014f67470b1d46399767611513da708be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:1d:f4:5c:f9:29:7b:e5:30:d4:41:61:61:
57:d5:6b:ca:24:89:84:a8:fe:df:cd:20:6f:0e:d1:
8a:d7:c4:78:73:2f:1a:98:7c:a7:3f:8b:63:91:ea:
6b:d6:6e:20:24:77:bd:79:20:3d:52:1b:34:30:72:
b3:cf:db:fc:0c:17:13:f6:80:d8:1e:8a:3f:24:1c:
7c:7a:de:17:17:f7:5e:cb:b8:4f:a6:9d:bc:1e:ce:
b0:af:03:a4:88:e3:d0:b5:7e:3c:00:e6:a5:a8:80:
f5:f0:e8:b4:27:2d:08:da:7c:6c:64:23:23:cf:7f:
d2:69:fa:0b:23:9b:c8:6e:ac:75:98:b5:3a:bb:23:
54:18:a1:35:09:ce:04:83:3a:e0:30:65:f4:f4:34:
e7:c8:b9:67:62:dd:7e:77:70:89:c3:28:a4:f5:d9:
c0:6c:d5:a2:70:15:bc:e0:a5:ec:77:20:31:2f:e1:
72:5f:e0:e8:ff:56:b7:3a:4b:89:23:3c:6c:17:2b:
d9:11:8a:bf:86:1f:ea:bc:52:d0:a4:f4:06:25:ad:
50:86:3d:10:ba:58:b2:d5:4b:26:2d:9b:ee:2d:92:
82:0e:3e:56:42:bf:69:87:38:73:71:a3:e1:6a:12:
8b:eb:82:89:33:ee:93:2d:7a:0d:77:0e:6e:7d:fa:
d0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:37:90:14:F6:74:70:B1:D4:63:99:76:76:11:51:3D:A7:08:BE
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:85:97:bb:5e:8c:53:ba:8f:82:fc:c1:21:2e:18:09:6d:89:
3e:f9:f4:9a:5c:c6:ab:67:e8:fc:9b:69:5f:03:1c:1e:a7:93:
73:67:96:fc:94:83:da:42:56:e0:fd:b2:2a:f4:92:ec:fd:31:
8f:a5:2b:e1:10:6a:ff:56:33:f3:56:04:87:4a:82:11:a9:ac:
40:c2:04:86:ae:fd:d5:6d:d0:1d:35:88:22:44:29:a6:f7:d9:
c9:6f:aa:6b:68:cb:92:c3:f4:c7:7b:53:e4:ff:05:1b:7f:9b:
f8:63:2b:86:cf:df:cf:98:77:9b:2b:8f:eb:7d:f3:d2:35:48:
62:6e:a9:3c:d0:81:36:70:3e:92:e7:ea:92:b2:f6:bc:ca:90:
5a:ce:54:3a:a9:e3:2f:c8:d1:c7:e0:d0:a5:a8:2f:a1:15:a6:
51:9d:17:11:54:d4:59:e4:13:9b:32:3a:5d:5a:75:33:c6:d3:
fe:ef:70:71:fd:90:08:c1:01:91:d3:45:a8:e7:8e:b8:31:d9:
83:82:a6:94:56:57:e3:53:35:c6:b3:c4:58:a0:dc:21:da:96:
60:cc:1d:ca:56:8e:b0:0e:cb:70:c9:25:52:2e:f8:3b:e9:0c:
45:a5:91:bd:d2:19:72:95:e4:04:28:6a:ff:02:5c:3c:43:be:
f7:98:21:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:33:16 2025 by rpki-client