Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: d9RoVOy63Q+1hxZvH4sJpMnntK1WxlG3mk4YVOKEnCY=
Subject key identifier: C8:34:A8:94:9F:97:D1:B8:C3:3A:5A:E4:E2:41:52:74:8B:AB:E1:9B
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0198530CF8425BB0741CF29AE15C2EA9BC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 15EF
Signing time: Mon 28 Jul 2025 22:00:15 +0000
Manifest this update: Mon 28 Jul 2025 22:00:15 +0000
Manifest next update: Tue 29 Jul 2025 22:00:15 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: LSYbbxLqOaOf02bDHcYiU9PXs/ixj0ke0YOKaUL080s=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:f8:42:5b:b0:74:1c:f2:9a:e1:5c:2e:a9:bc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jul 28 22:00:15 2025 GMT
Not After : Jul 29 22:00:15 2025 GMT
Subject: CN=c834a8949f97d1b8c33a5ae4e24152748babe19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:e8:03:38:a8:11:c2:73:98:f3:ce:b5:d1:
48:75:8a:e5:b0:f4:f3:de:23:d1:ad:be:f7:80:f0:
1c:1c:24:9d:0b:0b:0a:97:55:de:35:22:da:92:44:
e0:94:a6:5d:bf:66:b6:cb:2b:5c:1e:94:bd:26:b8:
fb:e7:0d:2d:62:f6:fc:10:49:38:38:78:33:22:8b:
dc:16:3f:fe:db:d9:60:a1:22:02:80:91:f7:c4:c9:
09:80:59:d2:61:75:18:76:ef:e7:71:1b:7a:c4:ba:
12:6e:b3:d5:9c:5a:af:d1:fd:11:ee:6b:39:61:d6:
d0:f6:5d:cf:4b:14:ed:a6:f5:de:85:9e:35:04:1b:
d6:c0:0c:28:dd:bc:ac:bd:a5:55:6a:32:e3:76:8d:
1a:07:a2:55:c8:64:2e:14:f0:f9:bf:17:64:df:8e:
94:76:30:8e:32:3b:ad:36:a9:21:7e:e3:8a:fc:46:
4c:dc:9f:81:b0:7d:24:d5:40:5f:4c:61:30:2e:02:
9c:b7:d4:21:65:c7:d4:6d:76:b9:15:34:f1:e2:67:
3f:97:5c:cd:c4:7f:ac:98:9f:56:62:f0:6b:fa:28:
52:19:a5:e2:99:ca:79:5a:50:54:fc:1f:25:80:28:
0c:74:8b:20:c2:dc:8b:40:41:cb:f2:54:71:92:6b:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:A8:94:9F:97:D1:B8:C3:3A:5A:E4:E2:41:52:74:8B:AB:E1:9B
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:02:98:08:35:48:7f:60:ac:6d:6d:32:52:32:0c:43:e2:1c:
90:15:83:3c:3f:87:fe:d3:cc:df:0d:80:22:60:f0:c1:49:93:
67:57:57:4d:80:37:d7:c1:ab:bb:45:b7:f1:95:22:88:d3:35:
47:43:6b:85:50:4d:4b:ba:5e:6f:78:70:aa:61:0e:54:15:c5:
26:9d:81:53:84:aa:65:e9:4b:a8:36:11:b8:e0:71:33:3f:f0:
01:7b:fe:1b:77:57:21:1b:36:62:6c:3e:01:72:04:f8:29:8e:
9b:1e:d0:f7:86:90:76:cb:e0:03:55:ef:03:f2:04:a1:af:c6:
08:2b:80:44:1c:ed:b1:42:b6:af:dc:cb:81:65:c3:b6:d6:e9:
29:5d:88:89:11:5e:46:73:07:6d:7f:82:8c:d6:ad:f7:4b:2e:
3b:c2:c7:18:b6:ae:2a:e6:6a:cb:d4:2a:76:ce:b9:4f:a2:b4:
a3:ed:36:13:85:52:ad:8a:c2:19:43:51:fe:d9:ce:60:aa:cf:
71:25:47:89:71:27:bf:9b:ef:04:db:52:34:7e:3c:a7:1a:50:
75:70:9c:81:0a:82:41:3f:cc:88:7d:ef:10:65:68:9a:7e:96:
21:c3:d8:56:4f:7b:84:10:73:d3:5f:d4:00:f2:81:60:72:24:
88:5c:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:32:46 2025 by rpki-client