Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: l3B6Cqhw00JY1TcQ8K+4ZMu2AldA1t+Atw5doeLgtT8=
Subject key identifier: 64:DB:91:43:CC:95:36:0C:E1:0F:9D:84:6C:B9:26:10:84:2A:28:FC
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 3820C501AE4B2471A1087B9965F38EE880CA6724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 035F
Signing time: Tue 09 Sep 2025 16:03:01 +0000
Manifest this update: Tue 09 Sep 2025 15:58:01 +0000
Manifest next update: Wed 10 Sep 2025 17:12:01 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: 4mrCkTbwf2vz1H1dyx/hgkY84DWffDNhrTVUc352+oI=)
2: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
3: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:20:c5:01:ae:4b:24:71:a1:08:7b:99:65:f3:8e:e8:80:ca:67:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Sep 9 15:58:01 2025 GMT
Not After : Sep 10 17:12:01 2025 GMT
Subject: CN=64DB9143CC95360CE10F9D846CB92610842A28FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:ff:db:09:cd:7a:4e:75:3b:f0:03:3e:fe:
bd:73:75:87:0e:b5:5c:82:43:1a:6c:74:95:26:31:
cd:9a:94:d3:3d:50:b7:99:55:ad:2e:74:29:73:da:
e5:ac:47:2b:08:3d:15:74:ad:bf:f6:e8:e5:3d:b9:
02:c5:25:39:d1:18:b3:39:62:b3:6c:84:4d:bc:69:
7a:f7:4b:a2:38:06:38:3a:a0:21:eb:db:d1:78:f2:
2c:03:8f:fc:c5:24:cd:9f:2c:f6:59:97:64:37:3e:
f2:b1:3e:63:64:07:a0:5e:ba:84:76:f9:92:5d:01:
84:1e:56:05:81:d6:b1:2d:28:81:08:96:ed:e8:ad:
4d:31:8b:fb:a1:a4:23:fd:ed:db:ce:6e:56:60:82:
5d:13:27:21:b1:43:86:c9:22:8a:96:1e:16:22:9f:
73:cd:49:63:1a:98:e8:60:bd:e9:32:11:e0:e5:fa:
72:d4:e7:52:e9:d9:95:1d:33:dc:28:b3:a4:0c:d5:
49:a3:0d:15:31:31:a9:2f:fd:a0:11:63:50:ed:f3:
b0:01:00:08:7f:0b:cf:cf:05:db:27:5b:33:2c:b6:
10:ea:54:95:54:3d:f4:4f:86:28:05:62:58:ad:c3:
fd:70:5c:3e:06:4d:a9:f3:d1:1a:81:21:a7:4f:2f:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:91:43:CC:95:36:0C:E1:0F:9D:84:6C:B9:26:10:84:2A:28:FC
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:52:0a:c3:1c:02:47:61:cd:de:e6:c2:cc:4b:19:33:47:18:
58:b8:a6:a7:43:a5:3a:a5:cc:e1:80:bd:28:32:6d:cf:37:15:
30:ae:4e:d7:2c:a4:df:0d:fa:4f:57:b3:f8:1d:84:63:a1:ba:
36:80:28:cd:0d:16:82:60:96:f3:0c:c6:c5:ef:0a:be:fa:22:
20:6a:7d:0a:9b:2b:90:03:6e:40:67:9d:89:8a:cf:25:29:30:
4b:96:d5:ac:83:ad:15:de:cc:3e:7e:15:b8:a8:e0:0e:9a:a7:
8c:66:79:b8:f4:fe:42:9f:90:08:00:1e:af:e6:77:f9:5f:1c:
5a:33:5c:f4:c1:65:cb:24:86:b2:d6:b1:19:34:2e:cd:af:c8:
56:1d:a4:b7:79:75:63:d1:df:40:b0:43:10:0b:8e:d1:78:d8:
d7:d9:f9:af:bc:2e:bc:ae:ac:bb:a6:26:3e:88:1a:c9:95:21:
fb:77:bd:68:4b:c9:2a:62:67:18:5e:11:e8:6a:72:54:28:15:
66:60:2e:6e:95:b1:bc:c1:f2:bf:6f:ee:02:85:48:58:9f:cb:
8c:f8:ba:c2:c4:e1:44:e1:c8:02:24:3b:71:48:01:ce:99:d8:
9d:f4:33:a5:96:8a:d1:87:bd:35:d7:4e:34:9c:4e:cf:79:fa:
6a:08:73:93
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUOCDFAa5LJHGhCHuZZfOO6IDKZyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw
NTE0ZGRmOTAeFw0yNTA5MDkxNTU4MDFaFw0yNTA5MTAxNzEyMDFaMDMxMTAvBgNV
BAMTKDY0REI5MTQzQ0M5NTM2MENFMTBGOUQ4NDZDQjkyNjEwODQyQTI4RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uv/bCc16TnU78AM+/r1zdYcO
tVyCQxpsdJUmMc2alNM9ULeZVa0udClz2uWsRysIPRV0rb/26OU9uQLFJTnRGLM5
YrNshE28aXr3S6I4Bjg6oCHr29F48iwDj/zFJM2fLPZZl2Q3PvKxPmNkB6BeuoR2
+ZJdAYQeVgWB1rEtKIEIlu3orU0xi/uhpCP97dvOblZggl0TJyGxQ4bJIoqWHhYi
n3PNSWMamOhgvekyEeDl+nLU51Lp2ZUdM9wos6QM1UmjDRUxMakv/aARY1Dt87AB
AAh/C8/PBdsnWzMsthDqVJVUPfRPhigFYlitw/1wXD4GTanz0RqBIadPL3WBAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUZNuRQ8yVNgzhD52EbLkmEIQqKPwwHwYDVR0j
BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv
QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC
QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMUgrDHAJHYc3e5sLMSxkzRxhYuKanQ6U6
pczhgL0oMm3PNxUwrk7XLKTfDfpPV7P4HYRjobo2gCjNDRaCYJbzDMbF7wq++iIg
an0KmyuQA25AZ52Jis8lKTBLltWsg60V3sw+fhW4qOAOmqeMZnm49P5Cn5AIAB6v
5nf5XxxaM1z0wWXLJIay1rEZNC7Nr8hWHaS3eXVj0d9AsEMQC47ReNjX2fmvvC68
rqy7piY+iBrJlSH7d71oS8kqYmcYXhHoanJUKBVmYC5ulbG8wfK/b+4ChUhYn8uM
+LrCxOFE4cgCJDtxSAHOmdid9DOllorRh7011040nE7PefpqCHOT
-----END CERTIFICATE-----
Generated at Tue Sep 9 20:27:18 2025 by rpki-client