Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: 5P63PXbsxLLQgZqkocTUMS87viJnbM5Yrp2jg0AniM0=
Subject key identifier: 6E:C6:BD:AE:03:BD:FB:5E:6B:7C:37:BD:87:D8:04:01:4E:46:FE:2D
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0198D851600C2F23011B4A8BFF6CDF1F2BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1634
Signing time: Sat 23 Aug 2025 19:04:28 +0000
Manifest this update: Sat 23 Aug 2025 19:04:28 +0000
Manifest next update: Sun 24 Aug 2025 19:04:28 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: E1sOwVL3oQ5FyoRWEijW5GADfLhS41jgFnLMNBlNBpw=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:60:0c:2f:23:01:1b:4a:8b:ff:6c:df:1f:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Aug 23 19:04:28 2025 GMT
Not After : Aug 24 19:04:28 2025 GMT
Subject: CN=6ec6bdae03bdfb5e6b7c37bd87d804014e46fe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:d0:23:ec:b4:2f:37:d1:b2:ee:dc:1f:ae:
e8:bf:fd:6d:03:f5:4f:c6:3c:f7:66:90:88:74:53:
28:e8:ef:d9:73:f3:19:0e:25:2f:9b:a5:50:25:f7:
63:78:55:2f:eb:ba:c2:4f:3a:06:77:fe:f4:6f:70:
f4:6b:71:4f:59:2a:8e:49:8b:bf:32:37:bf:ad:6f:
56:07:d6:ef:fc:d0:f0:86:0d:f2:00:f1:a7:63:4f:
2b:c2:26:6a:47:7f:d4:2d:17:4e:2c:8d:78:7a:01:
ec:71:f6:3f:01:6b:24:08:d1:d5:a2:79:25:2e:ae:
ea:46:d2:37:9f:ad:1b:7a:b8:ab:65:45:b4:d9:54:
d2:b5:14:91:54:5e:4a:1a:9f:09:57:15:dc:03:a9:
90:13:aa:54:a6:8e:4e:51:dd:53:5f:54:e2:b8:35:
ff:60:0e:c6:11:e1:ac:29:7d:7f:d2:55:71:de:89:
c7:96:51:b7:2a:e1:59:d4:3e:50:8f:4d:77:52:e8:
52:0a:91:32:59:ca:47:f1:3e:91:6a:89:5e:d5:ca:
1a:82:0f:01:7d:fc:17:67:71:3c:bc:62:6b:39:86:
58:0c:96:b2:7f:a3:3c:74:94:c6:f5:10:6b:dd:05:
b2:84:2a:39:a1:b6:40:87:ae:65:1a:54:9a:a6:4d:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C6:BD:AE:03:BD:FB:5E:6B:7C:37:BD:87:D8:04:01:4E:46:FE:2D
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ab:22:c5:7c:89:c8:31:a9:61:c5:6b:0f:f6:dd:01:7e:be:
1a:91:d2:30:be:78:96:99:24:68:92:eb:18:9c:8e:64:1b:41:
14:e2:46:ef:88:70:44:a7:98:c0:e6:90:de:77:df:99:a4:a8:
83:71:a1:d5:64:a3:29:2d:75:ca:6c:08:22:d0:fe:a0:b7:dd:
94:32:d4:73:03:5f:8d:95:ca:db:cb:03:cb:ee:67:e4:f9:22:
0a:d5:9d:dc:83:93:d1:c7:d9:c0:a7:27:86:12:99:88:35:bb:
e7:45:b9:0d:2e:31:5f:2b:36:99:c9:63:e4:6f:04:5b:ea:df:
b3:a7:26:56:10:10:e8:33:f5:e1:54:0c:1b:aa:9e:42:55:71:
54:f7:ed:f1:0c:ab:96:7a:3d:b8:c1:a3:05:f0:c5:97:d6:65:
4c:bd:c0:85:7e:76:f9:f0:fa:2b:45:a1:e2:d6:9b:31:d0:d0:
5c:b1:58:6b:23:36:6c:2b:f2:68:96:b5:31:64:0e:51:35:a0:
93:e0:43:60:f4:06:0b:81:8d:60:f8:59:73:3f:41:6f:a6:31:
4c:f5:81:61:45:af:24:67:75:02:25:48:68:8a:90:eb:db:b8:
a0:25:00:dc:81:24:b2:5b:23:3f:94:bc:8c:cd:dd:a5:a5:6c:
b7:9a:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:21 2025 by rpki-client