Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: bO0WdSmnUk5Id8ccOAcZczknB79/0/H3VBTiHDypL4g=
Subject key identifier: 3A:9E:C8:6D:8B:EB:0E:16:8F:9D:66:D1:75:80:0C:F5:F7:C7:33:7F
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 019A2741A131409FE701DD65AFA98304F19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 064F
Signing time: Mon 27 Oct 2025 20:00:03 +0000
Manifest this update: Mon 27 Oct 2025 20:00:03 +0000
Manifest next update: Tue 28 Oct 2025 20:00:03 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: otLxM18YrxyA3931SoOkEpHuLz7bUGRxve/V2YP2aiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:a1:31:40:9f:e7:01:dd:65:af:a9:83:04:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Oct 27 20:00:03 2025 GMT
Not After : Oct 28 20:00:03 2025 GMT
Subject: CN=3a9ec86d8beb0e168f9d66d175800cf5f7c7337f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:b4:77:a2:bd:c7:f5:6f:58:a1:92:34:cb:
4f:61:6b:f2:c7:62:d8:f6:11:d3:62:c1:a5:be:da:
4b:6e:9c:07:32:72:f6:11:f7:24:37:94:68:a0:24:
e4:3e:6c:90:60:d4:3d:e5:e5:76:cd:3b:ae:a6:94:
d3:89:32:6c:76:ed:b0:5d:d6:fc:53:b3:0e:ed:30:
93:ff:82:3d:d4:e9:53:1d:35:a1:bf:7c:64:c3:05:
9a:e4:52:c1:3b:fb:1b:87:f6:d0:37:e1:ad:45:09:
a6:7a:56:de:ad:41:8b:60:20:d1:0c:12:b3:b0:13:
de:c6:5c:b5:0a:70:33:bf:c2:5a:1c:f3:12:eb:a3:
26:d7:60:e5:e2:1f:ed:82:fb:04:fe:9b:39:79:47:
d8:01:39:33:21:f8:e2:92:62:b3:35:e2:e9:1a:59:
21:a2:0c:cf:7f:8f:b7:73:8a:d1:cf:2e:ca:99:03:
e9:07:db:d9:47:89:56:b3:2e:63:4d:e1:ba:54:40:
81:0b:0b:91:e0:7f:ee:60:27:50:25:82:b0:83:44:
b9:70:b8:e1:a9:5e:07:b0:14:07:1b:0e:3e:f2:b2:
3f:2b:87:ae:95:e3:52:07:c4:fb:68:05:01:1a:37:
d1:65:f7:41:d9:35:b3:b6:c3:34:a8:35:99:42:0d:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:C8:6D:8B:EB:0E:16:8F:9D:66:D1:75:80:0C:F5:F7:C7:33:7F
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:98:df:b6:04:75:9d:92:76:a3:14:d5:48:80:11:54:18:73:
3c:6d:ab:15:4c:47:4c:5c:db:41:c5:22:41:fd:46:8f:73:ee:
e7:72:86:d4:85:1f:48:c3:35:2f:29:20:a9:8e:de:bb:ec:1b:
c8:63:ae:07:aa:d2:44:cd:f4:ea:c1:5f:8d:84:2f:a0:fb:f2:
b5:03:d8:ec:04:40:c7:c4:99:e3:6a:bf:78:03:b3:ab:61:61:
16:e9:51:24:da:7e:59:38:8d:9b:0f:2a:b8:46:a1:7a:b4:1e:
d9:c5:b5:82:f4:f4:ae:b3:b3:1e:55:4a:59:2d:61:eb:7b:a3:
c2:c2:6e:71:0b:98:30:36:4c:5e:13:bb:9e:51:90:fb:c0:8e:
23:92:c0:ef:5e:6f:da:27:cf:52:9c:13:29:42:64:df:89:c3:
18:f8:d4:47:6a:c4:00:02:1c:f4:87:aa:96:7b:58:98:a4:2c:
ce:6e:b9:1f:a5:d3:57:a8:0e:8f:fd:0a:ff:80:bd:bf:df:a1:
c6:ea:f6:b5:43:ff:54:c9:13:62:f5:77:8c:85:82:36:86:cd:
5a:d5:7c:87:1d:90:9a:3b:12:da:04:06:50:cc:79:1a:bc:e3:
0e:d7:53:dd:77:3e:9b:87:be:18:83:c7:6a:b9:e3:17:15:c3:
70:a1:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:22:01 2025 by rpki-client