Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: 8tV6W9ZBaH9eoFxb6EjbXQEfTgFJlYT+xwG2iTqYPf0=
Subject key identifier: 70:DC:36:81:0C:25:13:D7:8E:44:6F:AF:2D:6A:B0:63:A8:8C:49:F6
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 0197B77CB3FA6FE37E266B054FE0EC7E6633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 050C
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: e8oFo5ZipcSwl/lxV+SwXkLhML3M3IjUXIEialSKdkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b3:fa:6f:e3:7e:26:6b:05:4f:e0:ec:7e:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=70dc36810c2513d78e446faf2d6ab063a88c49f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:8e:ff:75:d7:e6:4b:c1:48:e2:b7:cb:0a:
d8:76:b6:c4:2f:37:37:45:97:63:25:e4:64:29:fd:
a1:cb:28:6b:8a:41:ac:df:e7:79:a2:f0:e2:23:39:
fd:02:82:cd:22:89:75:6b:95:df:a8:7d:0f:9a:5d:
ce:cd:eb:56:ec:6e:cd:22:d3:2f:42:7f:c6:32:d3:
2c:89:f5:28:fe:7b:a7:12:fd:dd:89:28:7a:cb:73:
1d:16:9c:1e:08:69:b4:6d:1b:91:87:4d:03:f3:98:
f3:38:98:eb:ca:08:b3:74:eb:39:8b:a9:c7:67:02:
25:46:02:b6:74:7e:6d:13:37:5e:41:54:6e:83:58:
d2:3b:72:2b:1f:51:ef:97:83:4b:af:09:b6:66:96:
20:a7:d3:17:4d:d4:3b:02:67:93:11:92:ed:96:d1:
7a:a0:26:4e:9c:fc:29:05:e4:95:12:b3:6f:43:79:
e3:17:93:ef:f3:7a:d2:b4:0c:54:08:5c:4b:00:b4:
d3:ea:29:9a:d1:ea:aa:23:19:81:81:6e:ab:32:c3:
c3:dc:d0:fa:8a:c8:fb:0f:0b:de:1d:c1:60:68:66:
19:26:ae:71:6a:ae:07:1f:b1:0c:20:4b:f8:4e:d7:
7c:d8:15:ab:76:c2:a8:e4:37:3d:49:1e:ee:64:aa:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DC:36:81:0C:25:13:D7:8E:44:6F:AF:2D:6A:B0:63:A8:8C:49:F6
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:45:0e:ed:b0:71:03:4b:e4:4c:07:ff:8f:b7:49:8e:c1:
ce:00:24:43:d4:26:e4:33:54:6b:d8:e5:37:35:c2:36:db:a1:
f7:f0:7b:65:d2:68:ea:c6:71:4c:17:6c:b0:fe:aa:c5:33:c3:
7a:5d:ec:ed:78:c7:49:b0:68:8b:79:47:34:31:5f:db:fc:06:
ec:6d:1c:37:c8:1b:80:56:8f:aa:c2:b6:c8:02:aa:87:8d:c7:
ee:1e:0e:5b:55:26:63:4c:93:0c:d5:a5:6d:76:8a:32:fb:ce:
c4:9f:b0:22:97:ee:be:1e:73:32:9c:f9:0d:dd:dc:fc:23:a1:
59:c3:71:41:19:10:af:96:f7:b3:56:f6:15:5d:dc:0c:ba:97:
c3:4a:54:13:25:db:4f:a5:83:e4:f3:4d:ff:d9:f7:53:35:e4:
61:79:26:98:45:b1:52:9c:56:0a:10:53:3d:33:c7:c8:cf:c4:
46:7a:de:62:6e:17:0a:4e:a5:de:af:18:6c:f8:e2:9c:bc:29:
de:e0:07:85:13:67:6e:5b:4d:9c:59:93:ff:f9:d2:21:12:dd:
42:ca:4f:d3:cf:ee:8e:04:ea:c9:d1:20:e8:e3:6f:95:72:9a:
cb:9c:23:57:2d:7c:34:92:7b:35:9f:2d:cc:a9:69:e6:33:80:
34:e8:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:54 2025 by rpki-client