Manifest
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier: urkKhtUwmHvWFszmEV0enWVEN6RNp9cxLu89U+Yxmd4=
Subject key identifier: 8B:04:AB:95:26:9D:A5:ED:49:C0:B3:BD:69:07:1D:98:76:73:14:B4
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 64BC3542D477A340FF8893E9B6F1F0C91927E57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number: 02AD
Signing time: Tue 29 Apr 2025 09:14:27 +0000
Manifest this update: Tue 29 Apr 2025 09:09:27 +0000
Manifest next update: Wed 30 Apr 2025 09:20:27 +0000
Files and hashes: 1: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
2: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: OppJuESSaPKIZ53D2AtTOtjAnF2v6gg3T8sIWV85u/k=)
3: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: XL6US0An98xPzqDkSmmsQ/A2pY3jEWx/noy7TrW/Uto=)
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bc:35:42:d4:77:a3:40:ff:88:93:e9:b6:f1:f0:c9:19:27:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Apr 29 09:09:27 2025 GMT
Not After : Apr 30 09:20:27 2025 GMT
Subject: CN=8B04AB95269DA5ED49C0B3BD69071D98767314B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:16:df:53:6e:7a:da:30:ac:19:5a:3d:0d:
a7:e8:bf:d1:7b:d7:75:06:c5:32:39:5c:e9:76:66:
04:db:0f:ff:2b:83:a3:74:14:2c:f4:19:28:b7:07:
46:d7:9b:62:ce:7f:39:18:ac:97:ff:0e:4c:0c:42:
fd:ec:68:7f:85:ea:ab:70:64:ba:92:bb:aa:f5:e1:
02:ce:20:f5:70:08:ef:91:f6:a7:f8:38:11:ea:95:
06:9b:d0:eb:7e:b8:5a:d4:58:04:d5:66:a2:bd:ed:
fd:1b:75:3b:04:2b:1e:1f:7c:91:21:dd:03:b8:b3:
f1:7b:33:ec:ab:50:7b:73:23:3c:26:80:94:3e:5f:
32:48:8f:da:67:72:fc:05:1d:f2:d8:dc:5b:ce:e9:
65:38:77:e0:bb:ba:2d:df:88:6d:00:92:02:8d:83:
25:01:43:3b:3b:ac:c6:9c:ca:0f:55:5d:3a:f8:b9:
eb:c5:da:76:7c:2a:82:e6:43:4e:40:4f:88:cf:1a:
e7:9f:02:41:0a:a3:78:f5:dd:1a:85:47:54:48:9f:
64:ca:c0:e2:31:3a:e9:7a:39:a5:20:48:59:b5:c1:
6b:49:d9:fd:7f:df:d5:6b:6b:fa:9c:dc:16:f4:ad:
fc:ad:9c:61:ef:d4:da:c0:d0:b1:c2:e2:b5:63:5b:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:AB:95:26:9D:A5:ED:49:C0:B3:BD:69:07:1D:98:76:73:14:B4
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:08:62:56:8f:b1:91:b0:fa:93:1c:d8:6c:c3:8a:6b:9f:3e:
d3:8b:68:91:47:cf:6c:71:4c:95:8c:d9:81:2a:d7:88:51:8a:
d5:a7:2e:c6:0d:19:36:b0:42:b7:08:60:2b:80:03:e1:7f:4d:
ce:74:ec:d6:4c:43:ad:f3:68:66:c1:32:81:56:c1:47:a2:fd:
ea:a9:ec:69:f9:96:28:f0:ff:93:72:1d:ec:a7:e8:d6:da:1d:
43:9e:65:cc:a9:18:a0:82:19:29:4c:4b:bf:c9:7c:52:f6:93:
f2:8e:23:c1:30:69:a0:07:9d:8d:73:e7:ca:7d:cf:9d:c5:99:
47:8a:90:a2:c0:46:5e:2e:27:76:09:25:fd:a7:35:42:dc:8f:
e2:4b:7c:33:57:8c:93:59:7d:6d:75:dd:33:61:61:c1:d6:1c:
12:37:e5:f2:4e:ea:ff:55:01:65:1f:ed:df:bf:0a:63:a5:58:
dc:cd:89:4e:7a:4e:da:e4:9a:ff:c6:49:12:38:b2:75:b8:63:
91:d9:6b:85:40:ea:84:2e:b3:76:ab:57:91:0f:57:f4:48:0e:
72:ad:91:8f:8f:a1:54:f8:85:6c:d8:d0:c9:31:12:c6:55:69:
6f:7f:2b:ab:52:27:19:82:c3:28:50:0b:06:5a:4f:2c:9f:06:
58:57:35:68
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUZLw1QtR3o0D/iJPptvHwyRkn5XowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw
NTE0ZGRmOTAeFw0yNTA0MjkwOTA5MjdaFw0yNTA0MzAwOTIwMjdaMDMxMTAvBgNV
BAMTKDhCMDRBQjk1MjY5REE1RUQ0OUMwQjNCRDY5MDcxRDk4NzY3MzE0QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oBbfU2562jCsGVo9Dafov9F7
13UGxTI5XOl2ZgTbD/8rg6N0FCz0GSi3B0bXm2LOfzkYrJf/DkwMQv3saH+F6qtw
ZLqSu6r14QLOIPVwCO+R9qf4OBHqlQab0Ot+uFrUWATVZqK97f0bdTsEKx4ffJEh
3QO4s/F7M+yrUHtzIzwmgJQ+XzJIj9pncvwFHfLY3FvO6WU4d+C7ui3fiG0AkgKN
gyUBQzs7rMacyg9VXTr4uevF2nZ8KoLmQ05AT4jPGuefAkEKo3j13RqFR1RIn2TK
wOIxOul6OaUgSFm1wWtJ2f1/39Vra/qc3Bb0rfytnGHv1NrA0LHC4rVjW+J3AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUiwSrlSadpe1JwLO9aQcdmHZzFLQwHwYDVR0j
BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv
QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC
QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2CGJWj7GRsPqTHNhsw4prnz7Ti2iRR89s
cUyVjNmBKteIUYrVpy7GDRk2sEK3CGArgAPhf03OdOzWTEOt82hmwTKBVsFHov3q
qexp+ZYo8P+Tch3sp+jW2h1DnmXMqRigghkpTEu/yXxS9pPyjiPBMGmgB52Nc+fK
fc+dxZlHipCiwEZeLid2CSX9pzVC3I/iS3wzV4yTWX1tdd0zYWHB1hwSN+XyTur/
VQFlH+3fvwpjpVjczYlOek7a5Jr/xkkSOLJ1uGOR2WuFQOqELrN2q1eRD1f0SA5y
rZGPj6FU+IVs2NDJMRLGVWlvfyurUicZgsMoUAsGWk8snwZYVzVo
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:05 2025 by rpki-client