Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: jiceCzr8V+RcEzl/6IRktbskGEu5mV9225Paz8W/kxk=
Subject key identifier: 29:A2:7B:4E:83:51:FE:06:41:1B:A9:3B:C3:3D:F6:F7:EA:65:99:95
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 30844C85FB725678A45CA15D305ED223EE480E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 03B3
Signing time: Mon 10 Nov 2025 16:24:00 +0000
Manifest this update: Mon 10 Nov 2025 16:19:00 +0000
Manifest next update: Tue 11 Nov 2025 17:50:00 +0000
Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: nM26tM7YweHR1yiZXJ4WkPN2l8EJ48yRIdRefxPykhQ=)
2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 17:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:84:4c:85:fb:72:56:78:a4:5c:a1:5d:30:5e:d2:23:ee:48:0e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Nov 10 16:19:00 2025 GMT
Not After : Nov 11 17:50:00 2025 GMT
Subject: CN=29A27B4E8351FE06411BA93BC33DF6F7EA659995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:cf:01:a3:ce:f8:08:17:eb:a3:b3:88:cd:
87:72:f0:f2:cd:79:09:36:4e:d6:16:c9:f9:33:a0:
3f:9b:8b:c2:db:06:c1:f8:f8:ba:78:de:cc:4a:da:
55:42:0a:64:2a:13:91:74:1a:ae:f9:d4:c7:28:e6:
ca:6d:d3:c4:3f:98:61:bd:de:0a:8c:82:fe:4e:69:
4d:4a:a1:49:84:29:e9:68:a5:cb:34:56:9f:fc:e8:
19:64:75:43:39:e5:90:94:f9:8a:fd:27:8d:da:f2:
81:c3:26:d2:67:d0:9b:a7:b5:d7:c9:ba:4f:04:b5:
0e:7b:66:0a:2b:4c:e7:e5:ea:97:35:bf:3e:f2:55:
63:dd:1a:2a:9f:f5:18:47:ba:fa:d9:21:77:88:d0:
f8:6c:da:c4:45:3a:2d:ec:77:5d:34:97:91:af:ad:
36:08:40:9b:7a:88:1c:61:fb:5d:24:a4:5d:e2:fa:
2c:0f:b8:1c:c2:27:23:70:4a:38:61:98:be:de:5c:
b0:99:2d:46:79:9d:e5:52:43:29:65:28:56:c6:41:
b6:42:61:3d:30:8c:b5:87:a9:91:74:7e:2c:0b:1a:
77:a9:13:32:bd:75:8c:e6:3c:d6:dc:62:20:49:29:
e6:bd:7a:d6:29:2e:bb:ae:1d:12:8e:ed:a1:e4:a4:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A2:7B:4E:83:51:FE:06:41:1B:A9:3B:C3:3D:F6:F7:EA:65:99:95
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f6:e4:a2:89:71:0e:18:0a:bc:61:c4:15:64:64:9e:9f:0d:
24:aa:95:f1:06:0d:d1:31:aa:f1:fa:78:a5:01:53:d6:c0:e2:
3b:11:e5:e3:63:3c:41:23:d0:47:bb:f7:94:d3:b2:35:20:69:
d4:b6:9f:5f:ee:87:58:af:db:f8:ea:3e:73:37:3b:b6:0d:24:
e2:dc:84:45:ee:5f:56:83:53:ae:b4:f0:2e:d7:33:57:49:62:
f5:2e:4c:11:bd:a9:83:3b:7b:58:23:97:0e:6a:16:90:94:61:
37:67:69:0a:fa:92:64:8b:21:75:b6:4e:0d:35:24:65:32:63:
8c:75:51:6b:2b:ac:13:c4:80:26:69:c7:12:a7:e4:c2:e7:cd:
f5:27:7f:10:e9:b3:de:51:96:c5:b6:64:53:f8:12:a2:c9:ce:
18:f4:49:fe:01:bd:29:16:98:14:02:77:96:9b:d6:54:f1:8d:
9c:77:f0:b9:4f:0f:08:94:11:b6:f9:c0:1d:fb:82:f3:25:61:
83:38:1f:e1:d3:cf:ea:9f:a8:f8:5d:83:55:79:c7:65:03:b3:
9c:7c:57:60:77:93:09:b6:83:ea:94:4b:f9:c4:aa:d5:08:7d:
ff:90:f3:c7:88:4f:b6:d1:53:6d:8f:4e:6f:6b:86:4a:ec:7c:
96:46:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:15 2025 by rpki-client