Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: CCgNDznJtwAq8xzapZfQB5a/elBww1xoIKhKa39Plz0=
Subject key identifier: D9:69:A2:D9:B2:55:1E:76:50:A4:08:CD:95:93:F7:09:5A:2F:F7:30
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0197808D234B67CED8B32CD5864FC3D208A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1582
Signing time: Wed 18 Jun 2025 01:00:22 +0000
Manifest this update: Wed 18 Jun 2025 01:00:22 +0000
Manifest next update: Thu 19 Jun 2025 01:00:22 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: nZ7ZUcOzv7oirvhFpBZCjqPQOsjjCRA1G2OqIHrsj28=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:23:4b:67:ce:d8:b3:2c:d5:86:4f:c3:d2:08:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jun 18 01:00:22 2025 GMT
Not After : Jun 19 01:00:22 2025 GMT
Subject: CN=d969a2d9b2551e7650a408cd9593f7095a2ff730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:01:bd:67:14:c6:93:80:99:e0:d1:ef:83:
13:99:b9:00:97:fa:97:01:b9:ce:b0:fd:ad:a7:ca:
51:fb:51:26:7f:4e:08:4a:92:b9:94:09:56:38:11:
92:29:7f:ad:15:4c:22:73:c4:28:3f:50:09:4f:08:
d3:b7:d6:6f:25:25:ac:29:2a:a1:a6:8a:ca:ce:36:
0b:d9:69:62:25:ac:7f:1f:39:d6:01:c8:d5:26:8e:
37:f3:d0:02:19:1d:96:de:d6:82:b1:57:7a:3d:cb:
82:9b:f8:c4:6c:20:45:80:2f:b6:b4:42:ac:50:8e:
03:51:f5:3d:17:65:5f:e2:e7:1d:64:92:4c:ec:e1:
2f:34:7a:eb:68:f5:25:83:b1:d3:56:b7:5c:33:04:
50:26:03:90:06:30:e3:bd:7f:4d:39:c7:de:87:ff:
79:54:fb:28:21:ca:18:f5:2e:0c:fd:e6:fd:0e:df:
20:c2:29:0b:9a:c4:c1:81:8f:8a:0c:5a:e6:64:df:
b7:a0:a4:b5:1d:78:ea:9a:43:70:37:49:50:4b:23:
70:c7:3c:7d:e3:90:f9:57:ca:f8:9b:c6:50:19:d8:
c8:5e:e6:51:1c:fa:e7:32:b4:6a:bc:09:6c:5d:30:
3e:ff:9b:af:ca:9f:ad:10:ad:00:f9:eb:66:bf:6a:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:A2:D9:B2:55:1E:76:50:A4:08:CD:95:93:F7:09:5A:2F:F7:30
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:69:3e:ea:8b:54:25:d7:b9:40:c8:6c:6d:3f:ea:78:b0:
33:57:16:d5:35:88:8d:a2:4e:4c:65:7d:1a:a7:45:95:8c:32:
e7:f1:0a:09:e2:63:36:1a:72:c9:72:43:0e:de:eb:9d:b7:a7:
14:64:32:6e:27:3a:f8:3c:1b:56:50:df:9d:b8:82:34:7a:68:
60:e3:19:c3:77:2e:fa:bc:93:54:0c:8e:11:1c:06:8f:d3:c3:
bf:92:4e:26:ba:29:38:ee:2c:3d:d8:90:8c:98:95:00:4b:85:
3c:e6:f9:c3:c1:81:07:7a:4d:bd:59:0c:18:85:6e:99:2b:7e:
9c:11:00:98:ac:69:b4:80:27:a8:52:ad:45:70:2e:44:f6:16:
a5:77:1f:bd:e3:df:15:06:ba:0c:87:69:66:55:27:02:16:9e:
f3:ea:c6:b8:d6:b7:d9:aa:1c:dc:0f:82:58:a2:a8:32:a5:2c:
7b:ff:34:b1:62:39:04:b6:53:56:c1:3d:ae:9f:e3:bf:f4:05:
52:60:52:0d:c8:46:62:ec:32:13:a8:a6:56:b4:36:af:a5:12:
25:59:7a:d3:64:6d:ba:da:d5:ba:30:8c:87:37:56:de:5e:45:
0c:fc:d5:70:72:f8:7b:af:c9:ca:49:29:ed:91:ab:4a:68:7a:
5a:00:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:41:55 2025 by rpki-client