Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File: vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier: bGROfPm4pZ+R3PVvblH3MYswMMHO62kA/F5SmBiVVCE=
Subject key identifier: 82:C6:8F:8C:AE:70:D4:90:7F:AE:81:0F:CD:E6:36:6F:F7:E4:1E:FE
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer: /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial: 0194BB603855A0F1B34C38E0D5BBD96A1679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: RTTb6TZnt90Bl8DjFwlKfb3KQQpnfDee0U4P9QZGwd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:38:55:a0:f1:b3:4c:38:e0:d5:bb:d9:6a:16:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=82c68f8cae70d4907fae810fcde6366ff7e41efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:3a:27:98:fe:8c:3b:99:19:6a:8b:d7:ab:
a3:e4:d1:9b:fc:90:8f:3c:39:be:93:59:b1:e9:85:
27:55:6e:47:14:ff:f1:f8:cb:d0:1d:47:3a:b8:43:
b7:a9:4c:97:b8:e4:c8:ce:f1:82:7d:ca:ed:0c:96:
92:32:4b:00:fe:be:0b:e1:80:51:88:fe:f3:7b:47:
f0:9f:e3:0f:a6:b9:a4:8a:c9:22:98:ce:33:78:1a:
18:d7:49:af:9f:dc:1e:a9:a8:e8:bd:6b:c8:d0:7d:
64:84:05:a2:07:e5:53:13:85:60:5c:fc:98:2f:03:
64:99:31:e1:ee:d0:df:82:ea:ce:7f:86:08:92:24:
58:c1:16:ef:98:42:d5:e3:c5:30:a4:f6:23:37:74:
0a:5e:5d:70:2e:78:eb:26:24:f9:d4:21:20:4c:55:
62:a9:dc:74:06:25:ab:c3:af:ac:fe:c7:e7:c9:35:
b2:0e:ba:bc:68:ed:bf:d9:2a:7d:d8:7c:d4:e8:e5:
68:f3:9e:1e:3b:d3:f4:7a:70:09:67:5e:84:b6:82:
52:3e:5c:ce:33:e8:e0:34:52:2a:38:ab:36:e0:ba:
a2:7c:01:6d:70:5c:df:58:4d:63:ba:5a:f0:a0:ef:
28:e6:d5:d7:55:18:4a:ee:ba:cb:fa:fc:79:78:bd:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C6:8F:8C:AE:70:D4:90:7F:AE:81:0F:CD:E6:36:6F:F7:E4:1E:FE
X509v3 Authority Key Identifier:
keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:36:7b:aa:2a:08:3a:02:55:6b:1a:b1:39:7c:d7:57:e3:a7:
f5:13:27:07:83:dc:07:76:36:1b:97:5e:63:67:37:74:fb:cb:
0e:83:6a:f2:ed:b2:a8:2e:04:f2:d5:1f:80:ac:1e:fd:41:9f:
63:a9:1b:94:45:38:60:18:68:d1:36:db:ca:bd:04:fe:d6:1e:
64:4a:e1:f5:1a:fb:1d:43:be:bd:e9:63:4c:eb:0a:e3:a5:5d:
92:35:ab:47:c5:69:ae:95:38:6a:47:38:73:de:a3:29:8a:ba:
e6:bc:d6:37:5d:04:69:9c:ca:6a:e5:c2:2f:ba:8c:05:f2:c0:
53:a0:2c:5a:ba:19:51:42:67:45:16:37:27:56:30:3d:ea:67:
f6:66:b3:16:fa:d6:9e:49:f0:26:0f:66:82:3a:bb:32:94:f9:
c7:b1:24:0e:8c:a3:b0:fe:2f:04:4e:16:e9:bd:50:60:e8:a8:
5d:18:6d:f9:a8:3a:61:0a:13:7b:c4:e3:d8:85:2e:96:b4:01:
d6:f7:1d:97:42:b3:d8:3b:2e:ce:5c:33:05:e3:cc:e8:b9:73:
22:e3:cf:42:c9:8b:83:ea:28:ee:86:34:46:6e:86:1a:b9:6f:
c2:ad:ad:73:03:79:7e:43:19:4d:b9:53:14:b7:50:58:33:04:
f0:d4:a0:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7YDhVoPGzTDjg1bvZahZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmEzNjMzNDZjMTJmODNjNjBkN2I1Y2ZkZWZlY2QzZTdm
ZjBlMmEwHhcNMjUwMTMxMDgwMDMyWhcNMjUwMjAxMDgwMDMyWjAzMTEwLwYDVQQD
Eyg4MmM2OGY4Y2FlNzBkNDkwN2ZhZTgxMGZjZGU2MzY2ZmY3ZTQxZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOE6J5j+jDuZGWqL16uj5NGb/JCP
PDm+k1mx6YUnVW5HFP/x+MvQHUc6uEO3qUyXuOTIzvGCfcrtDJaSMksA/r4L4YBR
iP7ze0fwn+MPprmkiskimM4zeBoY10mvn9weqajovWvI0H1khAWiB+VTE4VgXPyY
LwNkmTHh7tDfgurOf4YIkiRYwRbvmELV48UwpPYjN3QKXl1wLnjrJiT51CEgTFVi
qdx0BiWrw6+s/sfnyTWyDrq8aO2/2Sp92HzU6OVo854eO9P0enAJZ16EtoJSPlzO
M+jgNFIqOKs24LqifAFtcFzfWE1julrwoO8o5tXXVRhK7rrL+vx5eL37NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILGj4yucNSQf66BD83mNm/35B7+MB8GA1UdIwQY
MBaAFL36NjNGwS+Dxg17XP3v7NPn/w4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kZGYwNmUtZGI4Yi00NTg5LWE2NTYt
MTcxNjE0NjY0NGU2LzEvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kZGYwNmUtZGI4Yi00NTg5LWE2NTYtMTcxNjE0NjY0NGU2
LzEvdmZvMk0wYkJMNFBHRFh0Y19lX3MwLWZfRGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjZ7qioI
OgJVaxqxOXzXV+On9RMnB4PcB3Y2G5deY2c3dPvLDoNq8u2yqC4E8tUfgKwe/UGf
Y6kblEU4YBho0Tbbyr0E/tYeZErh9Rr7HUO+veljTOsK46VdkjWrR8VprpU4akc4
c96jKYq65rzWN10EaZzKauXCL7qMBfLAU6AsWroZUUJnRRY3J1YwPepn9mazFvrW
nknwJg9mgjq7MpT5x7EkDoyjsP4vBE4W6b1QYOioXRht+ag6YQoTe8Tj2IUulrQB
1vcdl0Kz2DsuzlwzBePM6LlzIuPPQsmLg+oo7oY0Rm6GGrlvwq2tcwN5fkMZTblT
FLdQWDME8NSgMg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:12 2025 by rpki-client on console-fra.rpki-client.org