Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File: PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier: pPsEFyBSMPnWAIvK4sN3Cce5S6A1oNvMssmPTS7R8ZI=
Subject key identifier: 2E:BC:29:F1:BF:C6:4F:3E:EA:63:73:02:78:56:B0:65:47:DD:51:A0
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer: /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial: 0194BABBAD9890AE17D8CA13E272B5D1020A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number: 0380
Signing time: Fri 31 Jan 2025 05:00:49 +0000
Manifest this update: Fri 31 Jan 2025 05:00:49 +0000
Manifest next update: Sat 01 Feb 2025 05:00:49 +0000
Files and hashes: 1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: qAq6W3009rhFsvJG7uRgbaFTwAQZIw/UsiZqq7/qZDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:ad:98:90:ae:17:d8:ca:13:e2:72:b5:d1:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Validity
Not Before: Jan 31 05:00:49 2025 GMT
Not After : Feb 1 05:00:49 2025 GMT
Subject: CN=2ebc29f1bfc64f3eea6373027856b06547dd51a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:35:1c:67:6f:0a:8b:5b:3a:b9:3b:c2:55:
42:29:a9:d6:15:11:32:e1:c7:82:ae:ba:37:dc:72:
2f:ef:64:b5:c3:3a:a5:d0:42:9d:8d:ae:f0:05:d0:
ce:33:79:e9:79:81:02:12:91:9b:72:28:40:0f:d1:
3b:a8:a6:c7:a2:e8:43:c6:bc:20:92:2f:95:5e:ed:
a4:00:e0:c7:c6:22:1b:63:bc:c3:b0:91:24:b2:c1:
75:a2:16:77:a5:71:3f:fd:a7:7d:c5:35:82:c8:cd:
56:6b:fd:b0:90:e4:5b:1c:ce:fb:85:fb:fd:4b:eb:
e9:21:0b:c6:40:3e:16:bc:ed:a8:a3:b4:9c:2a:74:
77:8a:f8:93:ca:a5:1d:d8:d6:b4:7e:26:bf:76:0b:
30:b7:92:7f:20:a0:f2:5b:a3:6e:47:bf:3e:62:4e:
79:fd:5d:9f:cf:e4:a9:2a:cb:99:ae:28:79:ea:9b:
ee:26:e0:fb:c4:07:25:7e:68:11:1f:1f:63:75:fe:
90:8a:35:6a:1c:99:b0:0a:7b:0a:51:d1:c1:9d:87:
5e:5e:af:3d:ba:f9:9b:b7:2c:0b:8e:f1:f2:ed:8f:
0d:24:8c:09:e1:59:31:71:cc:77:3d:62:45:e0:a3:
84:0f:6f:a6:1b:cb:10:e4:d9:96:70:30:c8:c7:fe:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:29:F1:BF:C6:4F:3E:EA:63:73:02:78:56:B0:65:47:DD:51:A0
X509v3 Authority Key Identifier:
keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:61:28:e4:5c:56:e3:63:29:44:ad:5c:cc:49:ad:b6:10:e5:
1d:2b:0d:30:07:a8:88:bc:68:46:ee:ff:f1:35:9a:64:78:7e:
31:11:57:6c:75:40:05:f6:c0:1e:82:1e:88:0d:b5:9e:49:3a:
a5:9f:78:98:d8:c4:03:f1:71:c8:af:e5:29:af:a7:0d:25:a7:
d3:86:b7:8b:a2:8e:5e:6c:6a:77:01:04:e8:ba:d9:02:04:e2:
82:7a:18:aa:99:9b:60:e2:5d:42:f4:dd:83:7f:ee:55:a8:df:
47:dd:e6:3e:cd:2b:6f:56:4f:f3:78:24:ae:0b:fe:30:fc:8d:
5a:96:4b:fc:af:64:a1:6d:f9:73:54:d4:0e:ff:11:c8:1d:de:
e9:10:fc:9b:8b:e2:9d:aa:4c:2d:ec:b1:e8:b9:cd:7f:20:96:
5f:56:92:f9:89:25:f8:76:9c:ea:ab:04:10:c9:c4:e4:bc:7f:
7b:bc:c0:49:74:32:2e:bc:50:d0:73:40:16:25:2a:6f:b0:24:
4e:38:c1:c8:b2:b4:7a:4d:e6:54:94:f6:e1:03:43:ea:dc:74:
16:ff:c3:f6:33:68:41:d5:f7:8f:4f:a6:6d:6a:4b:9c:e7:56:
b8:76:e4:49:83:75:9b:3e:34:3b:0a:61:b3:62:88:2b:57:df:
db:e6:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:23 2025 by rpki-client on console-fra.rpki-client.org