Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: X2akCHlxmwjKND6g9qRZCSafbx0o8lncFQdzOKpuaOc=
Subject key identifier: 5C:4F:5B:8D:5E:21:9C:71:FF:71:A1:7A:73:B7:5C:95:BA:4E:F7:A8
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 01923AA7AAD151AAB4C5E24D920B41A03140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 12C6
Signing time: Sat 28 Sep 2024 22:01:59 +0000
Manifest this update: Sat 28 Sep 2024 22:01:59 +0000
Manifest next update: Sun 29 Sep 2024 22:01:59 +0000
Files and hashes: 1: 4aoaAHzAWNIf3R37KtUaSDnPOdA.roa (hash: QwJX/aybUu8TUhz+Z+uKgKROL8NJV1DG1vtQh+/OhVo=)
2: HqGzF7ESfosv0PTTZyGBpx2ngr0.roa (hash: TI6AY2H4S/QfLqHfZD8CT39qRGMQAtESKxME/X3usng=)
3: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: r2OPG8/yGEstbjdHlvGiUv3LbLMY0yTdpwWBO+EvJZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:a7:aa:d1:51:aa:b4:c5:e2:4d:92:0b:41:a0:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Sep 28 22:01:59 2024 GMT
Not After : Sep 29 22:01:59 2024 GMT
Subject: CN=5c4f5b8d5e219c71ff71a17a73b75c95ba4ef7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:44:43:89:14:74:1a:81:9f:e3:99:1e:2f:
8a:ca:55:3a:b6:2f:5e:e3:1d:b9:59:e9:63:a9:4b:
f4:f7:88:3f:ce:a4:e0:5a:c4:08:d8:05:84:37:96:
c0:b2:f7:7d:e2:b7:f2:3f:da:32:34:73:6b:6a:13:
bf:9c:84:90:fb:e3:51:45:da:99:39:52:d3:03:90:
db:33:ea:db:f3:aa:64:e4:9a:b9:8c:d0:68:14:a3:
30:4a:79:e6:43:bc:9d:50:23:d0:4c:44:b5:d7:3c:
38:da:21:df:0a:fd:c6:27:b2:5f:fe:73:7f:77:2a:
ee:71:9f:60:4e:ca:ff:e6:84:d0:54:3b:79:dc:9e:
a7:e5:be:69:1f:5d:95:22:f0:b9:73:6d:1a:28:f3:
c9:5a:e2:db:eb:31:9e:14:19:f9:89:38:9c:85:6c:
a9:8d:a2:14:aa:a2:67:a8:98:aa:33:5e:66:25:de:
ce:30:6e:0e:eb:57:4a:0e:0f:e2:9a:5b:b5:a1:80:
a6:eb:fa:aa:9b:0e:6e:d5:59:7c:5b:19:69:a9:fe:
65:af:c5:5e:e0:42:66:37:11:b6:64:4c:52:22:8b:
a6:04:25:d6:ec:11:ba:6e:09:ec:87:86:22:fb:88:
c7:55:fb:bf:ad:2e:df:47:b0:40:3e:62:ce:bf:e6:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:5B:8D:5E:21:9C:71:FF:71:A1:7A:73:B7:5C:95:BA:4E:F7:A8
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a0:ba:28:a8:e9:80:d8:5d:33:6d:5e:3d:93:8f:46:ec:47:
3f:90:13:16:3f:6c:fb:26:10:de:0a:27:72:54:18:33:8b:e3:
23:0d:38:e4:e2:b0:aa:0e:38:18:6e:68:47:04:45:55:8e:54:
70:b4:53:0c:7a:19:bf:f9:f6:74:c3:ea:35:04:92:3e:75:bd:
c8:7c:d1:a0:e0:91:e9:1a:77:ee:68:7b:ad:a0:e6:ab:07:fd:
97:54:8c:75:1c:ba:c3:f7:09:f7:4d:b1:91:2e:42:aa:73:5a:
41:c6:f6:13:3c:00:db:65:3c:71:f6:eb:f7:61:4f:2d:0d:7b:
ad:1b:04:b8:4b:d3:f0:48:63:76:d6:d5:34:5a:af:5d:66:fd:
c2:7d:3d:4e:05:c1:3d:a1:7e:32:4f:0e:4d:71:ba:57:3d:11:
f4:b0:b5:e5:a2:aa:34:a6:a6:07:06:12:5d:39:ec:5b:d0:7d:
f4:ce:8d:f5:9b:7e:b0:d9:c3:5c:00:6a:6b:31:4e:bc:9d:72:
cf:71:a0:51:5b:38:43:59:3d:bb:75:8c:e1:fb:88:da:bc:56:
10:64:95:a6:25:ab:1d:1a:9e:af:ca:04:d3:56:ab:6a:f8:77:
8d:c7:90:b0:25:bf:e7:8a:58:8a:75:0b:20:63:03:00:2b:39:
a5:fb:01:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI6p6rRUaq0xeJNkgtBoDFAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTM3ZjcxYzkzM2JmODI3MTE4YzYzYzA3Nzc0ZGU5ODY0
NWQwMTkwHhcNMjQwOTI4MjIwMTU5WhcNMjQwOTI5MjIwMTU5WjAzMTEwLwYDVQQD
Eyg1YzRmNWI4ZDVlMjE5YzcxZmY3MWExN2E3M2I3NWM5NWJhNGVmN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZZEQ4kUdBqBn+OZHi+KylU6ti9e
4x25WeljqUv094g/zqTgWsQI2AWEN5bAsvd94rfyP9oyNHNrahO/nISQ++NRRdqZ
OVLTA5DbM+rb86pk5Jq5jNBoFKMwSnnmQ7ydUCPQTES11zw42iHfCv3GJ7Jf/nN/
dyrucZ9gTsr/5oTQVDt53J6n5b5pH12VIvC5c20aKPPJWuLb6zGeFBn5iTichWyp
jaIUqqJnqJiqM15mJd7OMG4O61dKDg/imlu1oYCm6/qqmw5u1Vl8Wxlpqf5lr8Ve
4EJmNxG2ZExSIoumBCXW7BG6bgnsh4Yi+4jHVfu/rS7fR7BAPmLOv+ZFFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxPW41eIZxx/3GhenO3XJW6TveoMB8GA1UdIwQY
MBaAFEzjf3HJM7+CcRjGPAd3TemGRdAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAt
ZTFjOGE0ZmViZGVlLzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmRmYzktZGEzYS00NmJkLTgzMDAtZTFjOGE0ZmViZGVl
LzEvVE9OX2Nja3p2NEp4R01ZOEIzZE42WVpGMEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKC6KKjp
gNhdM21ePZOPRuxHP5ATFj9s+yYQ3gonclQYM4vjIw045OKwqg44GG5oRwRFVY5U
cLRTDHoZv/n2dMPqNQSSPnW9yHzRoOCR6Rp37mh7raDmqwf9l1SMdRy6w/cJ902x
kS5CqnNaQcb2EzwA22U8cfbr92FPLQ17rRsEuEvT8EhjdtbVNFqvXWb9wn09TgXB
PaF+Mk8OTXG6Vz0R9LC15aKqNKamBwYSXTnsW9B99M6N9Zt+sNnDXABqazFOvJ1y
z3GgUVs4Q1k9u3WM4fuI2rxWEGSVpiWrHRqer8oE01aravh3jceQsCW/54pYinUL
IGMDACs5pfsBzA==
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:19:10 2024 by rpki-client on console-fra.rpki-client.org