Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: zmgepXiR3k4VZPnIDOdESxtM5LM/ypLEn1Q6zOMnqpU=
Subject key identifier: C2:A3:B8:B2:B2:02:C7:8C:17:5D:4B:8C:F8:94:69:15:DD:20:10:49
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 01984853394730CEE3BEEA00B182731F599A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 0557
Signing time: Sat 26 Jul 2025 20:01:10 +0000
Manifest this update: Sat 26 Jul 2025 20:01:10 +0000
Manifest next update: Sun 27 Jul 2025 20:01:10 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: isp8hjS99KE5OLmS1XKNRo2egLcfYUQ+vMXDiSjhDRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:39:47:30:ce:e3:be:ea:00:b1:82:73:1f:59:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Jul 26 20:01:10 2025 GMT
Not After : Jul 27 20:01:10 2025 GMT
Subject: CN=c2a3b8b2b202c78c175d4b8cf8946915dd201049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:b3:dd:29:8d:cc:88:a4:14:31:2e:21:07:
1b:18:5b:59:08:56:aa:ec:c6:b4:eb:bf:60:3d:eb:
6d:e2:e8:f9:8a:c0:97:4a:f2:f7:aa:47:ff:60:3e:
ff:a9:5c:5b:99:f7:d2:2c:b9:c8:4b:d5:2d:7a:93:
1e:21:4c:f0:c6:a4:1a:44:ad:f5:f3:31:0e:af:96:
d4:5b:c5:ca:17:92:f0:37:5f:07:95:f5:32:c3:00:
f2:da:24:3a:37:7b:bc:b7:33:e8:b8:59:2a:9c:0a:
ac:49:92:b3:a5:61:dd:0d:6c:3e:20:62:26:c1:d9:
90:e6:7e:18:77:82:7c:04:87:1e:7c:0e:8d:37:e9:
e2:94:ba:ac:57:81:47:5e:79:ad:0a:a0:2e:d7:bd:
fc:86:d6:50:06:cb:aa:93:de:4d:bb:be:2b:18:93:
03:e9:fc:08:cd:f0:00:62:5d:67:11:70:24:3f:ca:
8d:85:fc:d6:79:f9:5a:6b:63:7b:4d:47:a7:c9:2d:
f2:7e:0f:1c:0b:6f:be:b5:34:41:08:3a:13:3d:42:
03:c8:60:3a:dc:bd:af:f7:44:97:a7:39:45:97:97:
d8:16:a6:1c:1c:fe:d5:10:59:90:dd:c7:75:f2:a2:
cf:b6:ba:31:f5:4d:5d:d5:0e:ab:43:3a:d5:e2:ac:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:B8:B2:B2:02:C7:8C:17:5D:4B:8C:F8:94:69:15:DD:20:10:49
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c1:76:9b:c7:59:39:ef:0c:2f:df:9c:76:20:11:70:be:5a:
49:08:55:23:3e:2c:2e:17:23:c1:73:e8:a7:7a:92:c9:1b:d2:
e2:20:56:fc:27:92:c0:b7:ff:9e:19:46:de:0c:10:9e:70:4b:
a5:bf:6f:44:c2:f7:85:d7:9d:87:46:7b:38:d9:28:1a:d2:1c:
4b:e2:9c:5f:f8:74:31:58:e6:4c:23:04:36:3a:44:87:87:06:
d3:67:67:f7:36:ec:4b:ed:83:ae:86:56:af:a8:83:33:d5:20:
69:a0:ca:79:02:12:71:55:73:a5:eb:47:71:5d:a6:b5:cb:50:
83:8d:2d:fc:71:74:31:8c:19:04:e7:8e:30:5e:ea:c2:3f:98:
53:5f:52:73:51:78:cd:39:8c:3b:84:7e:af:91:d1:7f:fc:56:
e0:0e:af:55:64:dc:2d:4c:42:93:f4:9e:f1:5d:d9:f3:d2:ce:
ca:4d:c4:34:5c:ec:81:05:ba:15:31:00:6b:ab:53:93:c1:04:
7e:68:01:06:bd:07:e1:3c:c3:84:af:7a:9c:ba:65:3e:a9:4d:
4d:7c:8f:c3:45:f8:df:b5:27:6a:0f:1c:a4:33:d3:90:d4:11:
34:fb:a7:18:38:a1:48:ee:17:06:09:f2:81:84:7f:82:f0:56:
1c:73:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:48 2025 by rpki-client