Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: bcbdO2qFGIdtfx3kfe6JzI/GuHlq+ZqSOt8XpD8+Olw=
Subject key identifier: 4A:97:F9:CE:B5:38:FB:68:61:B8:FF:0B:8B:B8:78:C6:4C:F1:42:CC
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 01974779E1925D011F6CB1A165BBCFC7A2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 04D2
Signing time: Fri 06 Jun 2025 23:00:59 +0000
Manifest this update: Fri 06 Jun 2025 23:00:59 +0000
Manifest next update: Sat 07 Jun 2025 23:00:59 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: c2r+5OcbMG5dtfpJMTYAwd1M8RftaVxudSw8rG2yWZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e1:92:5d:01:1f:6c:b1:a1:65:bb:cf:c7:a2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Jun 6 23:00:59 2025 GMT
Not After : Jun 7 23:00:59 2025 GMT
Subject: CN=4a97f9ceb538fb6861b8ff0b8bb878c64cf142cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:81:38:32:69:4f:36:c8:ef:bb:0d:22:ec:
d0:bc:f7:92:88:d1:cc:7f:ae:d6:c2:df:49:01:c3:
4b:da:7e:61:54:ac:39:fb:59:61:4f:ce:a6:54:b0:
32:48:ca:5f:7b:20:bd:49:33:fb:0d:2e:5b:ea:8c:
4b:83:c2:ca:fc:1a:fb:3d:81:0b:0b:e2:a2:db:6d:
93:8c:00:d7:65:52:cd:05:f8:ef:f7:ac:37:b2:a6:
60:93:52:29:6d:3a:ba:bf:3d:d8:7e:9d:af:8c:02:
00:d1:6c:42:44:3a:f0:8e:c7:55:06:da:06:f8:b9:
73:f9:0e:e2:f6:57:57:32:fa:69:27:f2:e3:d3:75:
d3:8e:25:4b:30:81:76:01:05:92:4d:5e:5f:9d:00:
6e:27:64:c1:69:96:1a:1b:55:a3:e3:5d:e6:8f:ea:
ec:26:b9:7b:9c:4b:41:67:2a:3a:a3:0c:cb:69:3d:
3b:09:e8:33:7f:db:8b:56:39:fa:46:46:29:e2:d0:
43:32:16:27:1f:ac:3f:b8:84:16:bc:d2:5f:20:cd:
a2:c9:73:82:2c:c2:bb:e2:d0:b8:56:51:54:89:e8:
4f:71:fe:65:89:eb:0c:2c:b5:df:d2:07:07:53:d6:
74:34:a7:14:7f:42:c5:c8:eb:07:25:c5:66:a0:b6:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:97:F9:CE:B5:38:FB:68:61:B8:FF:0B:8B:B8:78:C6:4C:F1:42:CC
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:92:0b:d9:32:3e:6d:31:34:85:20:2b:d8:04:e7:30:2d:
f9:f4:89:0f:74:69:60:2b:69:ea:c4:cd:a4:f3:83:3b:70:94:
cf:ad:8a:83:6c:44:c0:4f:bd:6c:f3:1c:8e:73:c7:f0:08:ba:
4f:01:d9:91:78:69:72:5f:0a:56:68:4c:73:de:32:9e:b8:4a:
37:49:4b:05:58:72:6d:a3:91:8c:0e:dc:43:43:20:7a:8b:65:
45:cf:c5:ab:27:67:75:35:50:11:3d:92:5e:0a:c3:40:25:ac:
28:ef:db:c1:60:4b:c2:4a:ae:8f:40:9a:49:82:01:96:4e:68:
e8:c1:a7:d7:41:8e:dc:88:a4:68:3b:4d:56:31:c7:5d:27:99:
86:5d:97:e2:32:a8:8d:ae:91:e1:9a:40:99:f6:91:72:2d:9c:
59:5f:2f:e4:d9:05:27:7a:66:9f:6c:23:35:c7:7a:5f:e4:38:
61:dd:e0:0e:07:8b:11:4c:80:de:7c:a7:32:f8:10:76:e7:96:
d0:29:30:04:31:83:a7:43:fd:bb:65:ca:96:e6:80:98:67:9d:
76:ff:db:01:03:a6:fe:70:b6:17:42:13:52:d4:76:bd:e7:3a:
62:75:ea:c4:76:13:34:94:5c:de:ba:67:bb:76:38:75:5d:c0:
44:65:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:54 2025 by rpki-client