Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: wA0gkZIXTx6U9rhZvHLweHwYMCALRQlE6F90azd6EI0=
Subject key identifier: 44:EA:4C:0F:93:B6:8B:4B:B2:45:41:77:50:23:7D:26:D3:C2:FD:88
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 019511A25E0D95B693312EBFE5B91DA2961F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 03AD
Signing time: Mon 17 Feb 2025 02:00:08 +0000
Manifest this update: Mon 17 Feb 2025 02:00:08 +0000
Manifest next update: Tue 18 Feb 2025 02:00:08 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: sQbSbS9ZkGKlPC25yXyDXaZLlnCnCpQTEpYoL59xycQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:5e:0d:95:b6:93:31:2e:bf:e5:b9:1d:a2:96:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Feb 17 02:00:08 2025 GMT
Not After : Feb 18 02:00:08 2025 GMT
Subject: CN=44ea4c0f93b68b4bb245417750237d26d3c2fd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:4c:5d:35:0a:09:92:ed:28:f0:70:b0:46:
4d:e8:af:27:9a:7c:63:15:52:90:8b:96:90:fa:f4:
52:59:53:f4:07:09:27:38:9e:f1:83:8c:7b:ca:4c:
4d:12:06:e3:f4:0d:05:69:44:a6:47:12:6c:b5:3a:
cb:01:99:29:b1:9c:4b:2b:77:05:48:45:41:b9:92:
ce:a7:ab:58:70:7c:e5:96:24:a3:bc:17:87:f3:43:
c8:28:4b:9d:fb:cb:cc:dd:03:6a:37:cd:7b:59:f0:
fb:6d:72:35:22:ba:8a:58:09:8f:b9:53:e2:70:a5:
86:21:6e:0e:81:a5:c3:59:2b:cc:6c:bd:ee:43:14:
40:b0:e8:cf:0d:d1:64:f1:6e:41:c6:61:d7:a0:08:
90:e9:0e:e3:c3:00:20:1e:14:6f:3b:e2:8e:42:11:
4e:7a:40:f8:75:c2:94:d3:3c:bb:23:7f:e5:90:a4:
9d:62:60:24:b1:60:86:14:fa:02:a7:fe:9e:7d:5c:
1a:24:88:97:4a:42:4e:6b:c1:61:ad:63:67:12:6e:
3d:e0:18:3b:bc:38:5c:04:16:b2:d4:d2:08:f9:47:
33:e9:eb:3b:98:e6:b7:2a:ec:f0:52:8e:2e:1b:7b:
13:c0:5c:5b:31:ee:ad:9c:d0:4b:03:f8:67:4f:97:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:4C:0F:93:B6:8B:4B:B2:45:41:77:50:23:7D:26:D3:C2:FD:88
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bf:91:5b:87:52:8f:8a:05:3a:2c:cd:da:9e:0b:5d:97:42:
9d:be:0e:69:39:61:19:40:f8:c3:63:1e:74:48:c2:dc:ce:6d:
d6:58:a0:90:7d:b2:c8:73:f0:03:9c:09:b4:94:dd:37:05:f6:
df:b3:da:00:2b:37:65:36:12:be:46:19:74:58:a0:f0:56:08:
62:c9:e5:4c:6c:65:75:32:53:81:1f:c7:ba:0c:8e:b4:b1:40:
2a:bc:bf:58:06:d3:71:c4:1e:2e:c7:e1:dc:54:50:53:60:7a:
ee:6d:9a:df:08:dd:e3:c4:5d:5c:a6:4b:aa:87:43:03:1c:06:
8c:08:bc:0e:3c:1d:c2:1c:ec:3e:56:da:98:fa:15:6f:df:a4:
65:5e:00:da:b1:31:3e:7d:e6:3c:96:89:9e:ff:c0:bd:e8:0b:
9f:0c:f2:02:92:e3:cf:ed:b2:26:bd:fa:db:dd:4a:b2:3f:1b:
43:67:32:03:a0:63:99:e5:a7:6a:cc:74:96:ab:c2:38:a6:94:
4f:9e:58:e1:2b:73:87:0b:2f:70:0f:5c:94:c2:23:83:c7:bb:
97:13:4b:57:94:c3:cf:04:6f:3c:91:dc:22:74:bf:a1:7d:0a:
53:71:45:86:f2:fb:50:0b:57:2a:03:bc:41:b8:dd:77:5f:cb:
58:09:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:31 2025 by rpki-client