Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: fJwg0KXyKPEjUkjZrzH98xzsQKkM1ZXGT6Je90T7tK0=
Subject key identifier: 3E:F3:58:8D:C3:BF:EE:9A:A6:05:9B:FF:FE:B1:E8:A3:5B:06:F6:F6
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 01969E2C8B694C0890174847746E39343A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 02:00:41 +0000
Manifest this update: Mon 05 May 2025 02:00:41 +0000
Manifest next update: Tue 06 May 2025 02:00:41 +0000
Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: ZO75OTvSqYt/Yyux6ZEBU3pp6pfwb9XOiO8uFt74OUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:8b:69:4c:08:90:17:48:47:74:6e:39:34:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: May 5 02:00:41 2025 GMT
Not After : May 6 02:00:41 2025 GMT
Subject: CN=3ef3588dc3bfee9aa6059bfffeb1e8a35b06f6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:43:c4:06:1f:9e:3f:92:e8:2a:52:cd:3f:
e2:cc:85:4c:b4:2b:ed:5b:9d:70:f5:7f:9c:14:09:
2f:8f:80:86:23:65:08:ad:f3:9e:d3:4d:2c:bc:22:
ec:b3:4b:9a:c5:44:60:32:82:b2:3e:42:75:07:49:
cc:e1:f7:3d:b9:fe:d6:0b:05:7c:5a:aa:65:c7:a7:
a4:df:70:50:c3:e8:3c:65:62:0d:48:16:47:2f:23:
98:a2:d4:39:2a:00:20:e0:bc:68:fc:84:4d:8b:3c:
61:78:8d:30:df:66:0a:e5:40:50:f8:29:72:e8:41:
1a:fa:8a:99:2e:d9:ab:b8:cd:ab:8c:b6:bb:8a:34:
17:f0:b3:4e:71:51:d8:f2:8d:74:89:a5:b0:ec:d6:
73:aa:5b:06:8a:82:63:fc:77:b0:bc:87:15:72:60:
35:f0:aa:4e:e0:4e:6d:8c:cf:fe:05:c0:c7:2e:ab:
3e:aa:cb:17:d4:d9:88:75:cc:45:d4:d6:f8:51:5d:
0b:cc:94:65:79:4e:c3:3f:97:56:86:27:74:5f:e8:
7d:42:3a:1c:92:13:f8:0d:7a:65:74:36:85:6d:18:
7c:d8:66:f5:fc:1a:67:ab:f2:f7:c3:d9:da:7a:c5:
41:95:0f:ca:e2:6c:92:6f:2e:2a:92:a3:27:aa:70:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:58:8D:C3:BF:EE:9A:A6:05:9B:FF:FE:B1:E8:A3:5B:06:F6:F6
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1a:3e:bd:d6:c1:1a:4a:3c:5f:cd:c1:b4:a2:0a:8a:69:a3:
8a:c5:09:3b:2d:5b:cb:b8:9f:72:fe:61:cd:ef:51:c3:44:c2:
d3:63:35:52:7e:ef:eb:6d:2c:7f:42:09:62:dc:3e:6a:9b:d9:
4f:20:e7:f8:46:ca:01:7b:cc:d4:b0:66:cf:a3:71:6b:64:05:
38:6a:8e:be:63:7d:80:cd:4b:21:43:c7:57:d9:9b:64:77:39:
6d:e5:ee:89:e1:49:f1:01:d1:55:b4:6e:da:cb:bb:8d:88:7e:
ae:e4:dd:48:76:92:9b:9a:02:60:59:5f:d1:26:45:d2:b6:87:
56:d7:23:b8:be:93:7a:eb:dd:46:ac:75:9a:03:10:d0:cd:98:
34:6f:3e:5a:e5:af:f7:bb:39:ba:47:cd:65:9e:11:6e:88:c0:
82:b7:a4:d2:60:15:4d:52:50:0a:63:f9:05:13:16:f7:b1:a3:
3c:2e:86:75:55:0f:3b:cc:05:1f:91:b2:73:ad:6e:e6:3c:8d:
7e:c2:33:ce:26:5f:37:b9:5f:87:86:f9:51:f2:5f:cd:35:af:
26:9f:d4:8a:3d:72:12:8e:ab:f5:90:2b:68:63:71:5b:eb:4c:
8d:33:a0:78:6d:36:5b:ec:10:e7:f2:d3:02:32:03:e8:35:1d:
54:6a:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:49:55 2025 by rpki-client