Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: EEr9rvA95e0si1t1ROdAvzRA2eIr3ECE0sLOkpP9GLA=
Subject key identifier: 86:7C:F5:17:D4:55:4B:D9:C8:07:77:AD:E5:1C:F4:41:46:99:39:92
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 73D193D20BD04629D240A22FBE65D06A0D41FA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 02E2
Signing time: Sat 07 Jun 2025 20:15:06 +0000
Manifest this update: Sat 07 Jun 2025 20:10:06 +0000
Manifest next update: Sun 08 Jun 2025 20:34:06 +0000
Files and hashes: 1: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
2: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: m1G6XSnJ4TFLEvdWpX86zd6OF40CLsUNjE1VxI7nIzU=)
3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d1:93:d2:0b:d0:46:29:d2:40:a2:2f:be:65:d0:6a:0d:41:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Jun 7 20:10:06 2025 GMT
Not After : Jun 8 20:34:06 2025 GMT
Subject: CN=867CF517D4554BD9C80777ADE51CF44146993992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:bd:99:d4:c0:8f:17:f0:8e:d1:48:72:cc:
02:62:fd:c7:ed:eb:08:77:67:c3:7e:01:75:3e:e3:
3e:37:ad:12:49:7f:d8:88:8e:b0:36:9b:c9:7e:d5:
ad:72:9c:9a:54:f8:ea:f1:4b:f9:a2:0e:5d:0b:fc:
8d:e0:1f:01:c6:66:a4:9c:e5:98:47:0d:fc:57:97:
d8:52:58:aa:88:af:ce:ec:76:a1:c9:d4:86:f3:e5:
92:3c:50:9d:4c:94:59:27:e5:8f:8e:95:9a:67:df:
19:a3:65:39:67:64:4d:4e:a2:d7:48:1d:76:a1:4d:
92:fa:6e:43:50:48:62:e5:f1:78:31:c4:e3:ef:4b:
9b:ad:42:f5:61:76:cf:09:c6:70:10:8e:13:d3:c7:
82:c5:32:a3:b8:f3:f5:17:3a:80:af:6d:db:65:24:
7e:c5:b4:29:64:28:82:bf:da:51:b0:8f:3c:06:45:
4f:33:8b:b6:6c:cf:07:59:86:c9:60:d0:68:4a:8c:
89:9a:aa:02:6a:91:c2:a8:fb:85:53:72:2e:1f:cd:
5e:5e:3f:77:4e:c3:01:27:be:4b:c4:ea:a5:df:54:
cc:32:6b:e0:17:c6:16:d5:bf:fb:a1:0b:8c:89:98:
1e:d4:91:66:6b:0e:61:6a:9d:b3:85:8c:c4:60:88:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7C:F5:17:D4:55:4B:D9:C8:07:77:AD:E5:1C:F4:41:46:99:39:92
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8c:90:47:e0:39:5c:8b:65:f8:e8:5c:b8:b4:39:69:7d:ee:
f1:b5:47:9c:73:d0:0c:f8:c3:83:52:61:46:40:a8:0f:ac:c4:
8d:c8:e7:55:31:e5:80:aa:b7:6d:d8:1c:21:a8:da:96:d7:e1:
85:90:f4:46:d3:b8:a4:3f:99:ac:9e:76:d0:99:cc:0a:9d:24:
4b:6f:f6:a4:e7:9b:92:cd:be:69:3c:b3:3a:6c:94:9f:58:a0:
64:9e:7a:2d:1b:c4:63:95:ce:86:d5:72:72:19:76:bf:a8:fa:
5f:04:6e:18:7e:53:67:2f:39:63:cc:6f:58:04:0b:c0:66:fa:
1a:fb:3f:02:e1:79:77:1f:a8:f9:21:ef:07:02:46:1b:fe:f2:
32:71:9b:2c:44:ea:8f:40:15:1c:6e:7e:ff:7d:21:19:1b:55:
b7:ba:03:93:78:55:48:ed:7c:96:df:0d:3d:b7:98:14:99:4d:
79:71:d2:a7:9f:8f:20:ad:42:24:5b:73:f7:f3:4d:f8:12:6c:
88:03:ea:1c:2c:5e:87:0d:ca:10:ca:5b:8e:0f:ad:29:35:f3:
be:5f:29:2b:f1:fa:a1:1b:7d:12:6b:db:d3:13:74:fd:7c:b8:
dd:58:d2:2c:7c:94:51:01:7f:ec:ed:d4:5b:96:33:65:a5:b4:
89:c1:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:38:35 2025 by rpki-client