Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: PAne4hXR9z5nqV35ZdbDX64kv5RBwtUkgm5IrbAAbO0=
Subject key identifier: 96:9D:EB:64:5A:AD:69:BA:B9:5A:8A:5A:38:3F:36:8B:00:CA:B4:CF
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0196C34C00D87B3D95361FD1C0EFBF2CDD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1520
Signing time: Mon 12 May 2025 07:01:00 +0000
Manifest this update: Mon 12 May 2025 07:01:00 +0000
Manifest next update: Tue 13 May 2025 07:01:00 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: yNQJNubn5X2O95oJ55csBayl/EhWJjbZEARKe8svrmo=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:00:d8:7b:3d:95:36:1f:d1:c0:ef:bf:2c:dd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: May 12 07:01:00 2025 GMT
Not After : May 13 07:01:00 2025 GMT
Subject: CN=969deb645aad69bab95a8a5a383f368b00cab4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:58:ac:f0:3a:f3:95:3c:08:71:2e:9f:23:
73:53:96:b7:a1:24:7c:f7:05:1a:46:63:37:44:17:
0f:31:4e:93:9c:9b:64:ce:dc:f8:3a:fb:f9:1a:8f:
c6:c8:41:93:a7:12:5c:75:5d:93:4a:61:62:42:5d:
27:ac:20:f9:b9:b8:5f:66:62:df:e4:46:2d:9f:08:
be:d9:b0:5e:b5:59:81:ae:22:fa:df:78:b8:cd:51:
7b:e6:cf:b8:85:20:48:5d:b2:e0:d8:cd:af:39:24:
46:9f:18:ac:fe:70:d0:d8:e5:1c:f2:bf:e6:13:c4:
65:37:10:0a:e4:57:f7:9d:36:6f:db:93:dc:e2:ff:
5a:30:09:56:e1:3d:f3:09:49:64:72:9a:66:c4:1e:
6a:be:a9:1c:ff:ce:85:65:32:be:f8:83:93:58:31:
fe:ab:6a:e3:d7:04:6a:b1:02:d0:c5:70:05:48:c0:
f6:3f:1c:92:a4:be:ea:e6:0d:cb:1d:41:42:8c:c2:
a2:5d:00:a5:fc:97:b2:45:ad:a5:68:f4:0c:90:4d:
ea:05:42:8c:a9:72:48:54:4a:eb:16:ba:f3:fd:25:
d7:2a:ed:b8:75:93:fa:15:e1:d3:67:55:11:e1:8d:
ba:93:08:8b:41:76:e3:c9:87:2f:51:7f:35:e0:99:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:EB:64:5A:AD:69:BA:B9:5A:8A:5A:38:3F:36:8B:00:CA:B4:CF
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:71:c1:0b:94:5b:84:27:16:f9:e2:f6:16:31:b3:a9:53:7c:
00:5e:42:8c:d7:03:30:0f:2b:08:18:0a:46:2d:d3:c9:90:9c:
b8:f0:66:74:c4:ee:c2:5a:c8:3b:bf:93:5e:8d:06:f0:90:bd:
61:b7:9e:c8:8c:21:41:dd:73:ae:87:73:3b:b5:63:a1:c9:3e:
c2:a4:c7:2b:89:d4:82:17:52:88:96:b0:89:11:6c:67:b6:aa:
9d:1f:59:29:7f:13:55:43:93:43:8b:11:4e:03:bb:f4:7b:c0:
e5:38:fe:e1:4e:11:80:8b:1d:f0:0f:53:d3:42:39:7e:1c:24:
2d:2f:eb:80:a1:dd:c1:f2:ce:6b:1f:5a:b9:dd:b6:50:8b:f1:
c3:96:c1:b3:80:14:af:67:ab:73:14:17:35:86:3d:b1:4e:dc:
54:9b:9f:94:cf:71:ad:88:90:f5:91:cb:14:09:9a:82:5a:9b:
24:fc:fc:0e:ad:bd:f9:b3:84:dd:58:81:5f:56:78:a8:64:88:
f5:6a:b4:cb:c2:36:11:ac:fb:ed:9f:5e:ff:d1:d9:0b:68:37:
05:1d:a0:aa:45:a9:03:8e:36:22:a6:2a:6d:0a:2a:dd:17:0b:
39:cf:0b:1e:97:e7:54:fc:87:3f:ab:0e:46:0b:a3:1e:e8:ca:
e4:a2:a1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:54:52 2025 by rpki-client