Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: Qlu73ptyVVWUB05JLsmsYXPZmcKoJYy2BVvX3zp0JB8=
Subject key identifier: F0:37:B2:B6:42:B7:51:28:45:D7:00:24:F8:42:FF:D3:A2:22:79:1C
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0197B88FC36B87BAF5BB319CF5368783C2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 159F
Signing time: Sat 28 Jun 2025 22:01:58 +0000
Manifest this update: Sat 28 Jun 2025 22:01:58 +0000
Manifest next update: Sun 29 Jun 2025 22:01:58 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: hKbhLxlKb0fHQ3J55iFqs9JEl1aNcXo3JYqNwnhP7Ok=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c3:6b:87:ba:f5:bb:31:9c:f5:36:87:83:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jun 28 22:01:58 2025 GMT
Not After : Jun 29 22:01:58 2025 GMT
Subject: CN=f037b2b642b7512845d70024f842ffd3a222791c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:0e:ed:68:10:27:31:1a:0a:74:16:d7:0b:
b5:60:49:c5:8d:48:fc:66:be:57:fc:d0:cb:f0:d2:
e8:85:d8:81:48:d6:7d:d7:0c:df:49:98:84:b3:bb:
68:ac:4a:dc:9e:b1:a1:16:60:c7:1a:fd:65:5c:3d:
7d:b2:d5:45:65:f4:e7:a8:de:96:36:6d:71:51:68:
1a:8e:b7:c7:14:89:a9:51:18:ea:45:5c:95:8a:f5:
79:df:52:42:03:a3:40:b0:93:a2:5d:ec:10:9e:26:
7f:74:90:d7:ee:17:12:1f:a8:56:f6:60:99:a2:85:
ad:e2:2d:01:d5:ef:b7:77:7f:d8:bf:4c:0e:79:dc:
f9:1c:d9:d1:c0:89:b6:c8:fe:15:dd:85:99:da:a1:
49:19:be:b6:de:c0:ff:9e:31:9b:6c:0d:8e:92:3e:
2c:e0:f5:1d:8d:6f:46:a8:64:02:f5:0b:d3:28:ac:
6e:15:36:55:42:c2:4e:69:83:37:6c:d9:56:ad:85:
0a:9a:1b:78:3a:e6:d5:9d:73:52:3c:fa:82:42:74:
52:41:9d:d8:eb:c2:23:13:9a:36:d7:e9:8a:0d:8f:
2b:cf:78:12:e5:cb:12:9d:68:9d:13:35:d9:8d:c1:
9b:0d:24:68:51:07:2a:67:ff:9d:33:33:87:58:5e:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:37:B2:B6:42:B7:51:28:45:D7:00:24:F8:42:FF:D3:A2:22:79:1C
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:f6:6b:f6:39:80:7a:c4:02:97:b8:3d:0f:ff:41:cf:05:
3e:76:1f:91:c2:98:db:87:75:ed:03:bb:a5:de:74:2d:03:de:
e0:73:2b:79:ae:b3:57:3b:df:99:7a:2b:00:fc:7f:4b:76:19:
96:1e:cc:9c:9c:46:9f:54:3b:80:01:b1:bb:34:7a:7e:09:9a:
90:b3:88:c4:de:5e:e0:ab:37:e4:59:78:ae:41:74:61:b5:34:
a7:70:52:72:02:35:0e:06:04:40:d0:49:a4:e3:5e:28:00:97:
5a:69:d8:03:f6:25:e4:bb:c2:6f:49:67:f7:fc:e2:7a:8e:22:
03:f9:92:b3:3f:3f:8e:3b:b1:e9:67:0a:2a:26:81:dc:48:de:
a7:73:06:cd:11:fa:98:33:0b:d0:72:66:d0:8b:88:ba:41:b9:
1f:48:5a:e1:45:d4:2e:8b:e3:86:16:93:85:89:fe:c8:e2:1c:
28:2f:66:32:aa:09:43:a7:60:a8:6a:e1:6b:1c:42:09:e1:ff:
70:a2:84:65:83:41:2d:98:67:05:d6:37:67:61:07:90:39:5e:
63:8a:71:f4:bc:e0:45:b1:24:95:67:05:d8:2a:b2:f0:88:7f:
17:19:f6:e9:a7:d5:91:13:fc:da:f2:d2:25:7f:8c:3b:27:b1:
14:00:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:01 2025 by rpki-client