Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: 3c+lG/qAzRdg84KQVbgt+ai1I8fZC8ZVhdb6nyM+/n8=
Subject key identifier: F8:68:0F:4D:87:23:8F:1A:1F:B9:1E:C4:96:BD:4D:62:B7:1F:0F:2B
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 0EA001FE1DAB924296B582CB97254A7751C6B1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 0322
Signing time: Fri 25 Jul 2025 22:07:18 +0000
Manifest this update: Fri 25 Jul 2025 22:02:18 +0000
Manifest next update: Sat 26 Jul 2025 22:13:18 +0000
Files and hashes: 1: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
3: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: +/iTeLViSJjQYEyUziaTo5B31YipuSAwYC9oIOiXLXo=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 22:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a0:01:fe:1d:ab:92:42:96:b5:82:cb:97:25:4a:77:51:c6:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Jul 25 22:02:18 2025 GMT
Not After : Jul 26 22:13:18 2025 GMT
Subject: CN=F8680F4D87238F1A1FB91EC496BD4D62B71F0F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:f5:0c:2d:8a:1e:27:55:43:a8:65:25:df:
2b:f4:76:e2:dc:95:1f:51:eb:65:aa:d2:7c:4f:ce:
21:78:1f:1c:0a:c0:a0:f0:a9:80:8d:e3:cb:f1:d9:
cb:48:1c:91:ff:f8:d5:83:89:4e:8c:ac:b2:a0:19:
34:62:f0:02:b1:32:7d:c6:56:ba:05:ac:23:81:da:
9d:fa:56:1b:92:f2:d8:c5:b1:8b:74:14:43:e4:66:
1a:2e:91:d2:25:3a:08:b7:8d:a9:34:dc:97:84:4f:
42:45:13:0d:ae:89:30:2c:12:d4:e0:d8:a2:22:22:
ca:cd:0a:c0:11:2a:e2:ff:01:2c:a9:ca:8b:6c:38:
56:84:77:85:d1:79:32:85:5c:00:75:88:12:fa:f7:
3e:5b:0c:77:35:94:6e:5f:0e:fe:6c:ea:9e:9f:42:
f6:1d:af:f7:11:7e:e8:6a:51:0d:db:4a:fe:1b:63:
f4:62:57:64:2e:c2:88:05:c0:87:ed:bf:ae:75:60:
fc:e0:62:db:2b:4f:35:d5:ae:b5:2e:22:91:4e:c7:
e2:f5:1a:a0:c0:e2:16:cd:35:8c:e2:96:38:64:a8:
79:7d:dc:ee:76:84:f4:3e:b4:03:80:e0:2e:ee:d6:
81:3f:00:7d:55:2d:86:f5:48:d0:71:db:e7:bd:0e:
b6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:68:0F:4D:87:23:8F:1A:1F:B9:1E:C4:96:BD:4D:62:B7:1F:0F:2B
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:0f:23:b1:b7:a7:8b:34:30:f5:bb:d3:75:3a:61:e0:65:
4e:2f:b2:b9:7a:b9:0a:33:ba:3c:26:c9:5d:43:62:0a:ef:4d:
76:03:e2:db:ca:54:e7:7f:20:f7:eb:e2:f4:98:e8:9f:8d:7f:
82:84:c9:d0:ed:ca:df:ea:e1:e6:98:57:c7:f3:29:16:79:67:
6f:5c:01:ba:fa:ce:c2:24:85:7c:e2:67:32:e3:88:e9:c8:4e:
eb:32:b4:e5:89:fd:ed:61:50:c6:0f:e4:83:10:0f:44:84:f3:
b6:c4:cd:f0:38:ea:43:b8:28:eb:a3:78:25:ee:e0:8f:3c:e9:
1b:b5:88:48:9c:27:e0:21:78:63:44:28:2e:22:12:7f:4c:56:
25:5a:57:24:81:c4:c1:d0:86:4b:1b:c9:42:e4:c6:94:4e:89:
29:b6:84:ab:9b:59:8d:7d:77:53:5e:ea:1d:26:9f:94:0e:0b:
0d:12:35:e1:be:35:7a:ba:30:ac:16:37:37:d7:b2:01:af:0f:
6a:64:36:53:c9:24:0f:54:f4:5d:0b:e9:42:9c:02:88:26:7c:
9c:ef:4f:5e:5a:5c:ac:14:27:3b:4e:c2:2c:5c:8e:99:28:cb:
16:0f:51:0e:95:32:10:a1:07:70:1c:c2:20:ac:98:62:61:9a:
e6:35:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:24:13 2025 by rpki-client