Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: UtwhA2bvWEkk80u41SJ37fpJVrKINN6HFJo/sT+RynE=
Subject key identifier: 6F:5D:7F:C7:C4:08:19:14:64:7B:A3:A9:F9:80:0D:7F:BB:07:03:20
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 019650483F636BBE68DF08148D75C36131ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 0452
Signing time: Sat 19 Apr 2025 23:00:33 +0000
Manifest this update: Sat 19 Apr 2025 23:00:33 +0000
Manifest next update: Sun 20 Apr 2025 23:00:33 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: 5Rvu70EE6yUZdiKxPog5VwNmbGsT6sUzivxKRanSXgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:3f:63:6b:be:68:df:08:14:8d:75:c3:61:31:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Apr 19 23:00:33 2025 GMT
Not After : Apr 20 23:00:33 2025 GMT
Subject: CN=6f5d7fc7c4081914647ba3a9f9800d7fbb070320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:a5:f8:d6:26:a4:73:5f:66:1e:bc:3f:b5:
3b:85:1e:ca:03:af:a5:17:a9:8d:94:70:25:ad:c5:
b3:3f:f4:0c:75:15:a0:d5:14:42:da:d7:e0:5d:bc:
fe:f3:b3:47:42:e8:51:e4:2b:d1:de:64:de:17:13:
22:c5:73:89:c9:0c:6b:7e:89:24:fc:4e:0b:55:b7:
ab:21:5d:e1:e1:3d:f3:50:fb:ea:4f:b5:62:b3:22:
8e:ed:e7:d9:ef:93:ef:8f:8f:63:e8:38:57:3a:f5:
07:cb:4b:2d:21:41:a5:92:82:55:b2:74:d0:25:40:
cf:d7:2e:0e:96:78:9c:84:99:55:f4:8e:98:28:de:
48:82:a8:44:34:b4:cb:8c:c7:25:bc:43:fe:fc:65:
45:f4:15:bf:28:22:c1:59:93:24:43:6e:8c:e8:a1:
5d:27:1b:a2:40:0a:4a:96:5e:cd:c0:1b:4f:2a:75:
d1:d6:01:77:2a:2a:0a:37:42:55:7d:1d:ba:08:6f:
2d:3b:0b:67:8f:81:95:a6:db:4d:09:c1:5e:b9:36:
47:5a:7d:5b:3e:e5:20:11:eb:ed:09:08:33:5f:1f:
ca:b7:98:e3:df:a1:f6:5e:a5:56:01:4c:80:ea:18:
03:47:31:7b:94:7d:70:bb:03:c3:26:23:ac:c3:4e:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:7F:C7:C4:08:19:14:64:7B:A3:A9:F9:80:0D:7F:BB:07:03:20
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5f:8e:ea:b1:07:e4:1d:80:a9:1c:ce:80:ae:64:99:03:21:
8b:05:02:19:c3:05:bd:24:f3:a8:86:7a:09:98:ae:86:6b:24:
20:80:5c:f9:80:e2:21:1d:8f:34:1d:ee:4f:47:bb:36:46:98:
e5:9a:c9:80:68:ba:94:14:a7:05:06:85:c6:f7:61:68:9e:3c:
c8:19:04:16:bf:70:22:18:50:15:7f:04:7a:f5:54:bb:8a:f3:
13:ff:91:1e:d5:b9:9f:e3:19:67:b2:28:37:f7:dd:53:5e:d3:
26:16:08:a8:8f:ce:38:c5:cf:3b:da:ed:b7:42:57:79:42:b1:
24:cf:13:3b:5c:51:e0:80:02:2f:cf:0b:31:3f:36:48:00:7d:
cd:8b:bb:c9:d3:07:f1:91:48:83:b2:3b:0e:b7:55:5c:45:ad:
de:b5:f4:16:bc:2e:32:bd:e9:fa:ae:1f:38:42:85:96:58:c4:
82:13:24:42:52:96:79:2b:b7:30:80:88:a8:ea:f7:39:f4:e4:
55:c6:11:1c:a6:3a:ab:18:55:ca:14:19:c3:91:e2:ae:8e:2a:
76:98:2f:8d:f0:ff:39:59:7b:30:e4:b4:c1:5a:24:1d:f8:27:
02:16:4c:f3:e1:d7:9e:91:d2:dd:3e:df:db:03:d8:4c:1d:ac:
28:75:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:23 2025 by rpki-client