Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: 7j68nBt8CSgWuL1b2/a4dtMdnkfTozvxQI7mvseXPOU=
Subject key identifier: A8:53:D5:64:99:05:75:84:DC:6D:FB:4D:5D:5C:51:B7:58:FD:FD:4E
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 019872CF95736F8FBF3C9CF21C989DF56E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 056D
Signing time: Mon 04 Aug 2025 02:01:03 +0000
Manifest this update: Mon 04 Aug 2025 02:01:03 +0000
Manifest next update: Tue 05 Aug 2025 02:01:03 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: EBZ+lXqEsBb8T7nRZE4knDVKWLuarr/TsPxbMoHNDgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:95:73:6f:8f:bf:3c:9c:f2:1c:98:9d:f5:6e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Aug 4 02:01:03 2025 GMT
Not After : Aug 5 02:01:03 2025 GMT
Subject: CN=a853d56499057584dc6dfb4d5d5c51b758fdfd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:1c:c2:92:c5:c2:cc:2b:27:c8:c1:98:1c:
b6:3c:b9:a8:e6:82:52:00:67:3d:f4:38:c1:1b:10:
09:12:76:31:53:de:db:84:e9:69:28:d0:50:7a:4d:
a1:95:e5:ae:2c:ce:d7:cf:91:aa:73:ee:15:6c:ce:
fc:c5:a5:8c:ac:38:4d:3a:fe:2c:f4:75:28:4b:c7:
00:d9:3d:5d:75:c4:c4:2a:c2:50:87:c5:4c:a4:07:
9f:51:40:3e:74:ec:78:e6:db:25:9a:bb:dc:45:55:
1f:fc:61:d9:cf:d2:62:d5:fa:c2:fb:bd:64:9e:20:
4b:c0:a6:9f:42:00:49:c2:25:9f:c1:43:4b:42:85:
c8:d6:0d:a8:4e:4d:dd:49:8d:ed:b7:ad:24:7c:b0:
4a:30:eb:6c:c7:c0:c0:43:73:58:93:60:3a:e6:4d:
cb:08:ab:8a:1e:00:0e:74:23:76:52:0b:43:07:df:
a4:28:5b:30:a9:32:b2:16:83:90:32:89:23:e0:1d:
32:7a:fc:c4:57:d7:9b:39:1a:b0:70:0f:5a:b7:da:
a8:c2:ea:dc:88:74:b0:43:2e:bd:3e:88:8b:d5:a1:
0f:74:cc:25:06:32:03:ff:80:53:51:59:84:71:b6:
86:fc:00:16:b7:f4:42:04:34:5e:28:7d:01:69:34:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:D5:64:99:05:75:84:DC:6D:FB:4D:5D:5C:51:B7:58:FD:FD:4E
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2c:65:99:be:f8:ce:52:e8:af:54:93:f9:7e:9e:c5:33:cd:
fe:28:6e:38:40:03:77:9e:4e:d2:4a:b9:bb:eb:e1:ad:4f:7e:
fa:24:aa:42:71:6f:60:da:a4:db:05:31:48:d1:01:9b:cd:3a:
fc:be:42:e1:e2:15:45:9b:5c:f7:79:5b:d2:8b:85:8e:e3:2f:
a1:2f:81:84:46:83:af:98:52:8d:ed:5f:79:83:41:77:48:51:
98:54:c2:f7:c9:3a:a5:c1:a1:a3:d1:d6:95:9d:c7:25:06:7f:
e6:7b:48:b4:c1:42:b5:38:5b:9d:c9:b1:f7:ab:24:7b:10:d2:
67:ad:c2:6d:84:47:0a:b9:d1:ee:6f:0b:00:27:f8:70:02:c4:
16:b8:83:51:b4:29:2c:2e:6e:da:8f:df:42:36:ca:40:83:b4:
38:66:86:cb:2f:88:e2:4d:e3:00:9d:76:07:17:0f:43:05:6d:
db:5d:1b:a7:1e:fe:f7:f5:1d:e0:47:2c:1c:be:39:5d:84:84:
f9:e3:aa:2f:50:41:d5:3e:9b:ff:56:51:b4:d4:fb:86:6c:eb:
ef:ea:e2:5d:f1:9f:17:3c:c9:e0:b7:0d:19:b6:5a:df:93:de:
10:22:79:43:80:89:7e:58:3d:82:98:30:93:c5:b7:13:18:f5:
1e:d3:ae:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:30 2025 by rpki-client