Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: 3gFsBsncsDX7ThL9HrLenzRYOear10NdJ+ApFcmUH+s=
Subject key identifier: EC:F9:37:D0:4A:16:2F:23:32:27:B2:44:F0:CF:6E:09:29:C0:44:28
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 019A10BA5935C3F70F8F636173004584268F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 16EC
Signing time: Thu 23 Oct 2025 11:00:39 +0000
Manifest this update: Thu 23 Oct 2025 11:00:39 +0000
Manifest next update: Fri 24 Oct 2025 11:00:39 +0000
Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: 3TDjyHJz8uO3zGwBmUFNogTKYb+Ws8TNSrRZZ9VqRPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:ba:59:35:c3:f7:0f:8f:63:61:73:00:45:84:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Oct 23 11:00:39 2025 GMT
Not After : Oct 24 11:00:39 2025 GMT
Subject: CN=ecf937d04a162f233227b244f0cf6e0929c04428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:45:7b:ab:e6:64:17:25:33:5e:23:a7:4a:
db:db:74:a5:5a:81:b2:b7:60:11:94:0c:e9:3e:59:
7e:f1:7e:c9:d8:b0:08:c0:04:86:13:c4:72:61:40:
ad:25:82:5f:d7:dc:e0:84:c1:3e:98:1b:23:5e:bd:
22:cb:e5:e9:80:e9:fc:c5:f0:84:92:e4:1a:ff:c5:
3e:51:5d:2d:bb:bb:89:42:5f:4d:1e:fc:c0:1e:40:
b3:ef:9f:43:94:91:98:a8:25:b4:6f:61:26:d2:89:
f0:a5:ad:78:6d:dd:77:5e:dd:24:af:65:88:11:a2:
65:20:0a:cc:1e:77:69:85:eb:65:49:c9:37:d9:51:
64:c2:13:6f:80:e8:c3:a9:00:9d:d1:eb:3a:58:22:
da:68:55:0a:fb:1a:dd:df:ab:ea:66:70:35:f6:23:
00:c1:6a:54:a7:72:47:ed:ee:90:39:b2:a8:63:d3:
4e:80:f6:ae:57:4b:a5:23:ca:15:7a:49:5d:e9:2e:
66:a5:b3:7b:b4:fd:ca:ed:a1:1c:18:40:f1:7f:3f:
d3:57:4e:f5:c1:e2:c5:23:3d:28:d6:ad:36:be:ec:
96:e7:e3:aa:9f:68:50:8f:9e:9c:02:29:60:fa:af:
96:f7:a7:e7:d7:ea:e0:97:94:37:f4:0e:03:a7:88:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F9:37:D0:4A:16:2F:23:32:27:B2:44:F0:CF:6E:09:29:C0:44:28
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3e:c9:d2:3a:ae:a8:07:7b:a1:11:79:7a:94:1b:dc:b9:9f:
44:35:07:2d:77:11:d0:af:90:ba:37:b6:d2:82:cd:25:b4:6c:
74:d6:83:ee:a2:e9:e0:1c:49:fb:8b:af:a1:22:a1:bd:b4:54:
6b:3f:50:d1:66:61:6f:a8:46:dd:17:b4:09:07:0a:42:11:8d:
8f:7e:73:08:c7:d5:9f:67:ce:a5:3d:5c:ab:74:3d:f8:1a:de:
a9:a1:3b:61:a8:17:7f:c8:e1:7b:4c:9c:84:be:8c:bf:9a:7a:
80:73:46:76:75:5c:9b:f3:7e:64:7b:25:ac:bb:cc:a0:28:e7:
e5:94:3b:38:7f:a2:b7:9f:d9:17:d8:db:64:b3:76:45:5e:0b:
ea:5f:7c:c7:73:8d:65:fc:e1:28:04:8e:6d:6f:b4:43:0e:1e:
c8:11:db:3d:dc:d1:ad:8d:f3:2f:b0:0d:3e:6c:e9:43:73:4e:
4e:59:54:db:1c:11:be:7e:1a:3d:2b:5f:26:62:5a:e6:4f:e9:
6d:68:98:87:31:28:35:a4:b2:11:b9:d2:ce:f4:f5:56:0d:80:
bb:52:e4:a6:a6:cc:93:b1:45:87:d5:62:d4:b6:f2:b8:71:73:
fb:2d:8c:a2:e4:b4:0b:8a:4f:5c:77:c4:8b:a2:1e:dc:dd:e2:
16:97:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:43:23 2025 by rpki-client