Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: ype5fbEP/NS6YalxffAg7XTAfgJTCxtZ4q/8jMZzrAI=
Subject key identifier: 48:8D:C5:8A:43:E9:EF:7D:AB:EE:3F:8D:56:91:FB:CB:B5:A0:CD:0A
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 019679E8FAFAECA8D8A2AA9D55E1168C548B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 14FA
Signing time: Mon 28 Apr 2025 01:00:33 +0000
Manifest this update: Mon 28 Apr 2025 01:00:33 +0000
Manifest next update: Tue 29 Apr 2025 01:00:33 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: DhPQseODeD7mXo3Krm2VqGgGGu5eO2Kr/ia/9mbwPeo=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:fa:fa:ec:a8:d8:a2:aa:9d:55:e1:16:8c:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Apr 28 01:00:33 2025 GMT
Not After : Apr 29 01:00:33 2025 GMT
Subject: CN=488dc58a43e9ef7dabee3f8d5691fbcbb5a0cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:ac:d6:40:c3:79:b2:50:d7:d8:5d:5a:76:
ed:8a:ae:14:7b:5a:8a:4d:86:45:c9:dd:0c:5e:f3:
c9:ad:90:ff:ae:d3:3b:29:87:4b:18:24:1e:0e:8a:
40:6d:e1:05:b8:e0:36:55:ef:3d:09:19:b9:2a:db:
b7:b1:7e:fc:65:3d:9b:ec:9a:6f:10:6e:60:f2:ec:
ff:49:6b:31:c2:d9:82:df:03:4c:c5:fc:ac:eb:92:
76:80:00:84:70:d8:ef:e9:89:21:d3:11:6a:aa:ff:
82:cb:3f:50:56:de:f0:1f:26:25:aa:a3:17:16:23:
98:26:31:64:34:69:92:63:b1:df:4d:cb:49:b0:d7:
e2:78:40:16:56:4d:82:05:d7:51:75:cb:41:25:e1:
d2:86:4e:4f:b2:81:6e:b0:42:8f:1c:04:33:c3:36:
fb:5d:9b:1a:85:22:e6:15:be:0d:32:08:72:0d:d1:
7d:6a:80:32:61:5b:82:f1:7c:ae:2e:28:51:a3:dc:
17:ee:f6:16:f6:ab:c1:2a:9d:6f:a2:f7:b9:7f:a6:
2b:da:11:20:74:ec:7a:bc:8b:39:7d:90:3e:b8:51:
97:aa:54:61:bb:09:8e:cc:a5:2b:78:b6:5c:d2:d8:
f4:6f:c3:57:77:e1:f1:12:6f:e3:50:95:a8:75:3d:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:C5:8A:43:E9:EF:7D:AB:EE:3F:8D:56:91:FB:CB:B5:A0:CD:0A
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0f:7b:8d:e8:6b:0e:40:0f:51:4a:72:9c:fc:25:5a:34:31:
6b:48:21:3a:9c:9e:62:8d:2c:f2:03:f9:e3:d6:c6:24:0b:a9:
78:54:f8:4e:d0:23:fb:c6:19:b7:c4:d4:fc:25:20:9a:b3:31:
29:4b:ab:60:a1:30:e5:d0:27:3d:5b:ef:c1:6a:4c:0b:0d:79:
af:9a:0c:45:a7:20:0b:c3:56:42:cd:70:60:e9:96:2e:0e:1d:
dc:01:49:66:5a:68:03:09:a3:31:50:81:e5:7a:8d:c5:b3:0e:
ad:09:50:9e:a6:d6:9a:12:b4:f5:fb:a8:34:68:ba:33:7a:c3:
02:a2:ac:6b:dc:ed:51:91:4b:3f:82:d8:8e:b2:5b:61:39:33:
ba:38:6a:a7:ae:b1:43:0e:60:78:45:1c:29:50:60:4e:d1:12:
f8:6e:27:6a:9a:25:58:ea:a7:91:75:ef:2a:3f:4c:7e:02:dd:
d1:54:39:d7:af:32:12:6e:be:46:29:75:fa:50:61:7a:9b:70:
f3:ff:ab:1a:40:05:9b:09:c8:2d:fb:87:90:02:c2:68:c8:0e:
f8:0c:14:e2:68:79:0a:cc:5e:15:aa:fd:03:35:05:c2:da:8a:
a0:4c:a9:1d:a0:31:f1:4e:5a:45:3d:e5:c3:be:e2:86:5d:05:
f5:6e:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:10:38 2025 by rpki-client