Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: RYnDP0GdBbeSJDnw8w1enmh9PM8hossrNtIyorF2Xco=
Subject key identifier: 57:3C:E7:39:50:27:C8:4E:5D:DD:B2:BA:73:60:E7:52:DA:0F:1F:AD
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01988B0F54BCD7DFAD32DC400BDA1436D6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 160C
Signing time: Fri 08 Aug 2025 19:01:34 +0000
Manifest this update: Fri 08 Aug 2025 19:01:34 +0000
Manifest next update: Sat 09 Aug 2025 19:01:34 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: Ealppk8TIDXdpVhXn25VcY090KUu8n+v/lOgNT8MOPE=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:54:bc:d7:df:ad:32:dc:40:0b:da:14:36:d6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Aug 8 19:01:34 2025 GMT
Not After : Aug 9 19:01:34 2025 GMT
Subject: CN=573ce7395027c84e5dddb2ba7360e752da0f1fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:80:db:d3:5a:d6:57:b4:f0:1f:9b:0f:46:
37:dc:f5:c7:8c:72:98:de:c6:64:60:a0:a6:0d:ca:
25:88:1f:04:4a:bf:d9:75:8f:bc:9d:46:94:8d:49:
38:63:de:32:4f:a2:ff:3d:6a:9a:7d:a6:48:b6:2e:
c9:3e:a6:b7:0b:5a:4a:e3:77:96:f8:97:70:ac:51:
c8:c6:18:2b:1d:0f:39:1a:c2:a2:f3:69:54:2e:80:
8f:4b:98:8d:d5:bf:ef:4c:01:fa:65:73:c3:e9:c1:
93:ec:f7:39:1c:62:2d:05:69:9f:98:d0:16:b8:08:
a7:2d:dd:d8:bd:05:78:b2:f9:72:06:77:6b:34:fc:
a8:2c:22:35:17:81:f5:2e:34:07:2f:8c:42:ae:35:
a3:65:e8:aa:ee:1e:f4:99:07:f1:74:be:d6:ad:ba:
63:cf:c2:9f:33:b1:72:81:9b:e5:0d:a8:90:88:75:
e4:40:22:2a:a1:ac:15:1c:72:cb:6a:be:f2:d3:d4:
25:04:1f:68:ff:b3:34:6c:b7:11:9e:68:05:df:79:
f6:86:7c:5a:cc:3b:2a:30:b5:1e:6d:f3:50:55:f6:
49:39:76:35:55:0a:69:9a:d1:02:14:73:03:03:28:
26:c3:e2:91:8d:26:90:b0:17:fe:d0:4b:40:ef:dd:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:E7:39:50:27:C8:4E:5D:DD:B2:BA:73:60:E7:52:DA:0F:1F:AD
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:8a:9a:26:69:50:b3:c1:45:61:98:cb:b7:29:f8:de:7f:
82:81:8b:6c:1f:af:16:66:10:5a:58:c7:99:00:0d:1b:b0:82:
d5:b4:95:25:83:4b:5a:47:74:99:a6:d8:cb:4b:9d:74:33:91:
b6:a8:72:60:3d:b9:b7:20:59:c7:21:a2:b9:8d:f2:74:c9:40:
75:63:73:75:5f:a5:cc:76:e3:6d:49:3e:19:db:0a:0f:d9:89:
49:58:d3:2f:b3:b7:32:6f:e4:23:6c:b1:37:cf:aa:19:65:03:
5b:55:93:e8:fb:71:d7:ac:f5:32:ff:38:af:54:46:9b:9c:8b:
6e:c9:99:c0:80:3c:97:53:0a:d1:16:95:9f:64:7e:52:65:cb:
0e:3a:25:62:c9:13:0d:5d:fd:d1:ff:e9:36:b5:62:6a:d5:3d:
38:af:34:08:32:da:80:97:51:cb:f0:82:c1:2e:f1:0a:31:e0:
b3:8d:e5:54:d3:64:fc:70:37:ae:04:fc:e8:64:ed:7c:4b:41:
5f:ae:9e:dc:8b:7b:d2:67:a2:27:0f:1f:26:c3:e7:e4:14:28:
32:94:66:48:fa:4f:11:c1:67:cb:68:b4:27:6a:9b:9a:29:62:
95:3a:12:0a:e5:44:1e:f2:26:af:8b:49:9e:fe:08:47:47:5f:
d4:b0:25:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLD1S819+tMtxAC9oUNtbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0
NWQwMTkwHhcNMjUwODA4MTkwMTM0WhcNMjUwODA5MTkwMTM0WjAzMTEwLwYDVQQD
Eyg1NzNjZTczOTUwMjdjODRlNWRkZGIyYmE3MzYwZTc1MmRhMGYxZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO+A29Na1le08B+bD0Y33PXHjHKY
3sZkYKCmDcoliB8ESr/ZdY+8nUaUjUk4Y94yT6L/PWqafaZIti7JPqa3C1pK43eW
+JdwrFHIxhgrHQ85GsKi82lULoCPS5iN1b/vTAH6ZXPD6cGT7Pc5HGItBWmfmNAW
uAinLd3YvQV4svlyBndrNPyoLCI1F4H1LjQHL4xCrjWjZeiq7h70mQfxdL7Wrbpj
z8KfM7FygZvlDaiQiHXkQCIqoawVHHLLar7y09QlBB9o/7M0bLcRnmgF33n2hnxa
zDsqMLUebfNQVfZJOXY1VQppmtECFHMDAygmw+KRjSaQsBf+0EtA790KsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc85zlQJ8hOXd2yunNg51LaDx+tMB8GA1UdIwQY
MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt
ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl
LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCSKmiZp
ULPBRWGYy7cp+N5/goGLbB+vFmYQWljHmQANG7CC1bSVJYNLWkd0mabYy0uddDOR
tqhyYD25tyBZxyGiuY3ydMlAdWNzdV+lzHbjbUk+GdsKD9mJSVjTL7O3Mm/kI2yx
N8+qGWUDW1WT6Ptx16z1Mv84r1RGm5yLbsmZwIA8l1MK0RaVn2R+UmXLDjolYskT
DV390f/pNrViatU9OK80CDLagJdRy/CCwS7xCjHgs43lVNNk/HA3rgT86GTtfEtB
X66e3It70meiJw8fJsPn5BQoMpRmSPpPEcFny2i0J2qbmililToSCuVEHvImr4tJ
nv4IR0df1LAlWA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:02 2025 by rpki-client