Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: zPiRzcMLzq3YuMXIy/sqpoiT+jciAw7z7Mg6akwBw8I=
Subject key identifier: 77:40:05:2B:69:D5:0C:50:6F:F4:15:1A:B0:B4:1E:5B:85:8D:F0:6D
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0199FBEBEF3ACE4DC94B81CF83983D7C133B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 16CB
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: xmsedEF6VyhEnqZ60TalyISwnMkwIFL5b2c/+chMktU=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ef:3a:ce:4d:c9:4b:81:cf:83:98:3d:7c:13:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=7740052b69d50c506ff4151ab0b41e5b858df06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:71:4f:43:44:1a:50:87:57:35:39:ed:d2:
22:a0:d2:7d:83:83:fb:ea:f8:ab:21:27:af:0f:85:
d8:eb:0b:67:9e:ae:1c:42:e5:28:e1:35:fc:90:d8:
9e:41:5f:c5:a1:36:f6:16:be:7b:53:0f:83:a8:b4:
19:0c:c4:23:b0:e2:a0:3b:c4:7b:bb:90:6e:a8:97:
93:36:c5:d7:01:2f:94:d4:0f:07:f2:e2:bd:04:8a:
e1:c0:a0:e1:2a:57:63:af:8a:6c:7c:cd:40:e3:c8:
59:8a:da:a3:dc:3a:0c:64:9e:e8:e6:91:7a:28:53:
d2:d2:0d:65:f8:f2:b7:e8:8e:f3:ca:f1:e4:ad:93:
ae:9d:bc:0a:c0:46:c7:1d:f5:65:ef:2e:e8:b6:52:
e4:02:5f:49:76:79:9d:27:ba:f6:c5:51:86:a5:4a:
d3:f8:47:73:ec:7c:a7:bd:9d:98:59:c2:2a:2f:fd:
c4:15:d7:66:27:e5:59:81:c4:b4:b8:9c:7b:0e:b8:
9c:c3:09:6e:8a:0b:84:fe:a1:a6:27:f9:47:d9:39:
8a:cd:52:7a:c0:8a:18:fe:5f:de:13:c0:8d:5b:db:
73:60:33:e3:ff:83:01:81:64:e5:25:77:71:2d:88:
b7:db:c4:a8:b7:90:4b:3c:6c:14:0a:34:95:ec:74:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:05:2B:69:D5:0C:50:6F:F4:15:1A:B0:B4:1E:5B:85:8D:F0:6D
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c2:2b:b3:5f:1e:48:01:fd:7d:19:57:77:2e:47:ea:8a:c4:
de:0c:e7:8b:62:f1:a6:01:1c:22:93:06:ee:2b:2f:dd:c1:e1:
c6:17:e5:db:1c:f8:69:2d:6e:d8:44:ca:82:e5:cb:ce:f7:0f:
95:af:36:2c:a4:ae:0d:c1:11:f1:50:bc:fb:4e:e8:17:ec:32:
75:b4:7e:43:45:22:5c:30:a9:5f:f7:84:09:c9:34:23:e8:03:
96:2f:ad:60:fe:1d:5f:1d:88:ac:b1:0d:50:03:9a:b6:65:11:
4c:90:95:2b:c0:9d:24:ed:1b:de:66:27:fa:d2:69:fd:ea:62:
71:65:fe:e2:9d:c2:d3:1e:52:50:1d:32:72:97:58:81:ee:e4:
cc:c3:b4:08:96:8b:4f:c6:cc:1e:b7:93:23:3e:2a:76:f8:9c:
02:1b:2e:5f:32:ae:0f:04:94:50:29:25:5b:21:b4:df:6d:45:
5a:71:75:df:9d:7c:63:88:f9:11:ac:79:e0:32:2d:79:df:bf:
ff:36:82:a0:77:11:88:d1:b5:ed:f4:3a:40:47:9c:b1:68:2c:
b4:9c:4f:35:99:88:d8:71:f2:52:e2:6a:b5:bd:8f:eb:e7:a4:
26:f2:5c:a9:08:29:e6:f7:8b:55:3a:f1:3a:ff:c1:5c:8d:41:
dd:1c:87:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+86zk3JS4HPg5g9fBM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0
NWQwMTkwHhcNMjUxMDE5MTAwMjQ3WhcNMjUxMDIwMTAwMjQ3WjAzMTEwLwYDVQQD
Eyg3NzQwMDUyYjY5ZDUwYzUwNmZmNDE1MWFiMGI0MWU1Yjg1OGRmMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuutxT0NEGlCHVzU57dIioNJ9g4P7
6virISevD4XY6wtnnq4cQuUo4TX8kNieQV/FoTb2Fr57Uw+DqLQZDMQjsOKgO8R7
u5BuqJeTNsXXAS+U1A8H8uK9BIrhwKDhKldjr4psfM1A48hZitqj3DoMZJ7o5pF6
KFPS0g1l+PK36I7zyvHkrZOunbwKwEbHHfVl7y7otlLkAl9JdnmdJ7r2xVGGpUrT
+Edz7HynvZ2YWcIqL/3EFddmJ+VZgcS0uJx7DricwwluiguE/qGmJ/lH2TmKzVJ6
wIoY/l/eE8CNW9tzYDPj/4MBgWTlJXdxLYi328Sot5BLPGwUCjSV7HRWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdABStp1QxQb/QVGrC0HluFjfBtMB8GA1UdIwQY
MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt
ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl
LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMIrs18e
SAH9fRlXdy5H6orE3gzni2LxpgEcIpMG7isv3cHhxhfl2xz4aS1u2ETKguXLzvcP
la82LKSuDcER8VC8+07oF+wydbR+Q0UiXDCpX/eECck0I+gDli+tYP4dXx2IrLEN
UAOatmURTJCVK8CdJO0b3mYn+tJp/epicWX+4p3C0x5SUB0ycpdYge7kzMO0CJaL
T8bMHreTIz4qdvicAhsuXzKuDwSUUCklWyG0321FWnF13518Y4j5Eax54DIted+/
/zaCoHcRiNG17fQ6QEecsWgstJxPNZmI2HHyUuJqtb2P6+ekJvJcqQgp5veLVTrx
Ov/BXI1B3RyHKQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:41 2025 by rpki-client